Hello all!
I'm using rsyslog in a cluster system to make a central log. In a
machine, I have the following rsyslog.conf snippet:
auth.* @@rsyslog-server
authpriv.* @@rsyslog-server
daemon.* @@rsyslog-server
kern.* @@rsyslog-server
security.* @@rsyslog-server
user.* @@rsyslog-server
The problem is that, if I have security.* uncommented, sshd output
(connect, disconnect, etc.) is duplicated. If I just let it commmented,
it logs just one line. I'm pretty sure my /etc/ssh/sshd_config has
SyslogFacility AUTH and LogLevel INFO.
rsyslog-server also has the same configuration snippet, so if I let
security.* uncommented, it duplicates sshd messages, 2 (because they are
already duplicated) turns 4.
Any help on this?
Thank you very much.
--
Silas Silva
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
