> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of [email protected] > Sent: Monday, January 31, 2011 3:54 PM > To: [email protected] > Subject: [rsyslog] Configuring which file(s) to log to > > I am noob to rsyslog, but from the documentation I've been able to > find, I > was able to get remote logging for the standard syslog stuff set up > fine, > messages, mail, auth/secure, etc. > > However, I've been trying to get a couple of non-standard stuff going > with > mixed results. First, there is fail2ban. I configured > /etc/rsyslog.conf > as follows: > > # fail2ban log > local6.* /var/log/fail2ban.log > > and fail2ban.conf as follows: > > loglevel = 3 > logtarget = SYSLOG > syslog-facility = 22 > syslog-target = /var/log/fail2ban.log > > fail2ban logs remotely, but instead of to the file specified above (I > touched it), it logs to messages. What did I miss?
Unfortunately, I don't know fail2ban. But some insight may be possible if you add *.* /var/log/debugfile;RSYSLOG_DebugFormat Then the debugfile will show us some details. > > Similarly, I created a cisco log and generated logging on the cisco. > In > this case, it does log to the file I created, but it duplicates it to > messages as well. you need to discard the message if it shall not be written to a second file. See here: http://www.rsyslog.com/storing-messages-from-a-remote-system-into-a-specific- file/ HTH Rainer > > Clues appreciated! > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
