since this has the include, we'd also need to see the contents of
/etc/rsyslog.d/*.conf
David Lang
On Mon, 18 Aug 2014, [email protected] wrote:
Date: Mon, 18 Aug 2014 09:09:45 -0700
From: [email protected]
Reply-To: rsyslog-users <[email protected]>
To: [email protected]
Subject: Re: [rsyslog] rsyslogd 7.4.7's CreatePath="on" for Socket fails to
create the Socket path
Hi Rainer
On Mon, Aug 18, 2014, at 08:53 AM, Rainer Gerhards wrote:
do you drop privileges? If not sure, please post your full config.
Not that I know of :-/
cat /etc/rsyslog.conf
$ModLoad immark.so # provides --MARK-- message capability (every 1
hour)
$MarkMessagePeriod 3600
module(load="imuxsock")
$RepeatedMsgReduction on
$ModLoad imklog.so # kernel logging (may be also provided by
/sbin/klogd),
# see also
http://www.rsyslog.com/doc-imklog.html.
$klogConsoleLogLevel 1 # set log level 1 (same as in
/etc/sysconfig/syslog).
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /var/run/rsyslog/additional-log-sockets.conf
$IncludeConfig /etc/rsyslog.d/*.conf
###
# print most important on tty10 and on the xconsole pipe
#
if ( \
/* kernel up to warning except of firewall */ \
($syslogfacility-text == 'kern') and \
($syslogseverity <= 4 /* warning */ ) and not \
($msg contains 'IN=' and $msg contains 'OUT=') \
) or ( \
/* up to errors except of facility authpriv */ \
($syslogseverity <= 3 /* errors */ ) and not \
($syslogfacility-text == 'authpriv') \
) \
then /dev/tty10
& |/dev/xconsole
## MESSAGES
# EMERG to all logged on
*.emerg :omusrmsg:*
## WARNINGS
*.=warning;*.=err -/var/log/warn
*.crit /var/log/warn
## LOCAL
local0.*;local1.* -/var/log/localmessages
local2.*;local3.* -/var/log/localmessages
local4.*;local5.* -/var/log/localmessages
local6.*;local7.* -/var/log/localmessages
## CATCHALL
*.*;cron.none;mail.none;news.none -/var/log/messages
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
