Hi Mark.. I made the proper changes and still not working.. :(
# vi /etc/syslog-ng/syslog-ng.conf
options {
chain_hostnames(off);
sync(0);
perm(0640);
dir_perm(0750);
create_dirs(yes);
stats(43200);
}
source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); };
source kernsrc { pipe("/proc/kmsg"); };
destination messages { file("/var/log/messages"); };
destination daemon { file("/var/log/daemon.log"); };
filter f_daemon { facility(daemon); };
destination console_all { file("/dev/tty12"); };
log { source(src); filter(f_daemon); destination(daemon); };
log { source(src); destination(messages); };
log { source(src); destination(console_all); };
What is wrong?
2006/6/4, Mick <[EMAIL PROTECTED]>:
On 03/06/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote:
> I'm using syslog-ng
>
> 2006/6/3, Daniel da Veiga <[EMAIL PROTECTED]>:
> > On 6/3/06, Leandro Melo de Sales <[EMAIL PROTECTED]> wrote:
> > > Hi,
> > >
> > > I can't find /var/log/daemon... Every time a service is stopped or
I have this in my /var/log/ directory:
==============================
-rw-r----- 1 root root 116223 Jun 3 18:08 daemon.log
==============================
In addition, check the extract from my /etc/syslog-ng/syslog-ng.conf
(which created the daemon.log file in the first place):
==============================
options {
chain_hostnames(off);
sync(0);
perm(0640);
dir_perm(0750);
create_dirs(yes);
[snip . . . ]
stats(43200);
};
source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); };
source kernsrc { pipe("/proc/kmsg"); };
[snip . . . ]
destination daemon { file("/var/log/daemon.log"); };
[snip . . . ]
#create filters
filter f_daemon { facility(daemon); };
[snip . . . ]
#connect filter and destination
log { source(src); filter(f_daemon); destination(daemon); };
==============================
Adding this in /etc/logrotate.conf ensures that the
/var/log/daemon.log file size does not get out of hand:
==============================
# when /var/log/daemon.log gets big
/var/log/daemon.log
{
rotate 1
weekly
size=1M
}
==============================
Of course the latter is only relevant if you are using logrotate.
HTH.
--
Regards,
Mick
--
[email protected] mailing list
--
[email protected] mailing list
