Hello again, my master file /etc/rsyslog.conf:
> My configuration is: > > > > # cat /etc/rsyslog.conf > > > > $ModLoad imuxsock # provides support for local system logging > > $ModLoad imklog # provides kernel logging support (previously done by > > rklogd) > > > > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > > > $FileOwner root > > $FileGroup adm > > $FileCreateMode 0640 > > $DirCreateMode 0755 > > $Umask 0022 > > > > $IncludeConfig /etc/rsyslog.d/*.conf > > > > auth,authpriv.* /var/log/auth.log > > *.*;auth,authpriv.none -/var/log/syslog > > > > daemon.* -/var/log/daemon.log > > kern.* -/var/log/kern.log > > lpr.* -/var/log/lpr.log > > mail.* -/var/log/mail.log > > user.* -/var/log/user.log > > > > mail.info -/var/log/mail.info > > mail.warn -/var/log/mail.warn > > mail.err /var/log/mail.err > > > > news.crit /var/log/news/news.crit > > news.err /var/log/news/news.err > > news.notice -/var/log/news/news.notice > > > > *.=debug;\ > > auth,authpriv.none;\ > > news.none;mail.none -/var/log/debug > > *.=info;*.=notice;*.=warn;\ > > auth,authpriv.none;\ > > cron,daemon.none;\ > > mail,news.none -/var/log/messages > > > > *.emerg * > > > > daemon.*;mail.*;\ > > news.err;\ > > *.=debug;*.=info;\ > > *.=notice;*.=warn |/dev/xconsole > I only have one included config file: # ls -la /etc/rsyslog.d/ total 12 drwxr-xr-x 2 root root 4096 abr 5 09:38 . drwxr-xr-x 76 root root 4096 abr 5 12:22 .. -rw-r--r-- 1 root root 196 abr 5 11:58 mysql.conf # cat /etc/rsyslog.d/mysql.conf #Cuando el nombre del programa que genera el log contenga "mysql" lo envías al fichero... if $programname == 'msqld' or $msg contains 'mysql' then -/var/log/mysql/mysql.log #y luego lo tiras & ~ That is all my configuration. Thanks again. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
