Hi, when you search the net for "rsyslog.conf" files, you often find examples where you set
> auth,authpriv.* /var/log/auth.log whereas for all the other facilities/log files you set > *.info;mail.none;authpriv.none;cron.none -/var/log/messages (the important thing is the "dash" before the log file) >From my understanding the user wanted to make sure, that every authentication event will be logged on disk, whereas for all the other logs performance was chosen. So far right, not? Now the question is: Is this still valid for v7.6+? <http://www.rsyslog.com/doc/v3compatibility.html> says that syncing was turned off in general, so that you no longer need to set a dash. Still right? Would you still recommend to enable syncing for important files like "/var/log/auth.log" or not? And if you recommend syncing, this can be rewritten in RainerScript (new syntax) like > auth,authpriv.* action( > type="omfile" > File="/var/log/auth.log" > Sync="on" > ) right? Thanks for all your answers! -Thomas _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
