I just noticed a stray "/cron" line in the Modules section. I have no idea how that got there, but I assume that explains it.
On 6/12/18 2:43 pm, Brendan Simon (eTRIX) wrote: > My `/etc/rsyslog.conf` is as follows: > > # /etc/rsyslog.conf Configuration file for rsyslog. > # > # For more information see > > > ################# > #### MODULES #### > ################# > > $ModLoad imuxsock # provides support for local system logging > /cron > $ModLoad imklog # provides kernel logging support > #$ModLoad immark # provides --MARK-- message capability > > # provides UDP syslog reception > #$ModLoad imudp > #$UDPServerRun 514 > > # provides TCP syslog reception > #$ModLoad imtcp > #$InputTCPServerRun 514 > > > ########################### > #### GLOBAL DIRECTIVES #### > ########################### > > # > # Use traditional timestamp format. > # To enable high precision timestamps, comment out the following line. > # > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > # > # Set the default permissions for all log files. > # > $FileOwner root > $FileGroup adm > $FileCreateMode 0640 > $DirCreateMode 0755 > $Umask 0022 > > # > # Where to place spool and state files > # > $WorkDirectory /var/spool/rsyslog > > # > # Include all config files in /etc/rsyslog.d/ > # > $IncludeConfig /etc/rsyslog.d/*.conf > > > ############### > #### RULES #### > ############### > > # > # First some standard log files. Log by facility. > # > auth,authpriv.* /var/log/auth.log > *.*;auth,authpriv.none -/var/log/syslog > #cron.* /var/log/cron.log > daemon.* -/var/log/daemon.log > kern.* -/var/log/kern.log > lpr.* -/var/log/lpr.log > mail.* -/var/log/mail.log > user.* -/var/log/user.log > > # > # Logging for the mail system. Split it up so that > # it is easy to write scripts to parse these files. > # > mail.info -/var/log/mail.info > mail.warn -/var/log/mail.warn > mail.err /var/log/mail.err > > # > # Logging for INN news system. > # > news.crit /var/log/news/news.crit > news.err /var/log/news/news.err > news.notice -/var/log/news/news.notice > > # > # Some "catch-all" log files. > # > *.=debug;\ > auth,authpriv.none;\ > news.none;mail.none -/var/log/debug > > *.=info;*.=notice;*.=warn;\ > auth,authpriv.none;\ > cron,daemon.none;\ > mail,news.none -/var/log/messages > > # > # Emergencies are sent to everybody logged in. > # > *.emerg :omusrmsg:* > > # > # I like to have messages displayed on the console, but only on a > virtual > # console I usually leave idle. > # > #daemon,mail.*;\ > # news.=crit;news.=err;news.=notice;\ > # *.=debug;*.=info;\ > # *.=notice;*.=warn /dev/tty8 > > # The named pipe /dev/xconsole is for the `xconsole' utility. To > use it, > # you must invoke `xconsole' with the `-file' option: > # > # $ xconsole -file /dev/xconsole [...] > # > # NOTE: adjust the list below, or you'll go crazy if you have a > reasonably > # busy site.. > # > #daemon.*;mail.*;\ > # news.err;\ > # *.=debug;*.=info;\ > # *.=notice;*.=warn |/dev/xconsole > daemon.*;mail.*;\ > news.err;\ > *.=notice;*.=warn |/dev/xconsole > > > Thanks, > Brendan. > > > > On 6/12/18 12:10 pm, David Lang wrote: >> we would need to see your config to make any guesses. >> >> David Lang > -- ------------------------------------------------------------------------ *eTRIX Services* PO Box 497, Inverloch, VIC 3996, AUSTRALIA. (m) 0417-380-984 ------------------------------------------------------------------------ _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
