Hi,

Am 10-06-2013 18:16, schrieb Rainer Gerhards:
On Mon, Jun 10, 2013 at 4:40 PM, Aleksandar Lazic <[email protected]>wrote:

Dear list-member.

I try to write all unbound syslog messages into the file
/var/log/unbound.log

### cat /etc/rsyslog.d/21-unbound.conf
if $programname == "unbound" then /var/log/unbound.log
###


I have to admit I do not fully understand the question. Do you actually
have some program that logs with the name "unbounded"? Or do you mean
everything that is not from a given set of program names?

Sorry for not clear question.

I use unbound ( http://unbound.net/ ) for dns resolving.

This the syslog line

####
Jun 10 15:11:32 external unbound: [5017:2] info: 127.0.0.1 43.135.47.213.in-addr.arpa. PTR IN
####

I was not able to configure rsyslog that he write a seperate log for unbound messages.
I thought that 'unbound' is the $programname but maybe I'am wrong.

Thx,
Rainer

BR
Aleks

after a host www.none.at I have only the message in /var/log/syslog but
not in /var/log/unbound.log


My setup:

###
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 12.04.2 LTS
Release:        12.04
Codename:       precise
###

rsyslogd -v
rsyslogd 7.4.0, compiled with:
        FEATURE_REGEXP:                         Yes
        FEATURE_LARGEFILE:                      No
        GSSAPI Kerberos 5 support:              Yes
        FEATURE_DEBUG (debug build, slow code): No
        32bit Atomic operations supported:      Yes
        64bit Atomic operations supported:      Yes
        Runtime Instrumentation (slow code):    No
        uuid support:                           Yes

See http://www.rsyslog.com for more information.
####

/usr/sbin/rsyslogd -dn > rsyslogd-debug_01.log

http://download.none.at/rsyslogd-debug_01.log<http://download.none.at/rsyslogd-debug_01.log>
###

Thanks for any help.

BR Aleks

______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to