Re: syslog question
For some reason, switching Apache to use local3 instead of local5 and updating syslog.conf correspondingly correct this. Weird. Patrick On Wed, Jul 30, 2008 at 3:19 PM, patrick <[EMAIL PROTECTED]> wrote: > I've configured my Apache process to send the ErrorLog to the > syslog:local5 facility. > > In my syslog.conf file, I have: > > !httpd > *.* > /usr/local/apache/logs/error_log > > to catch these log messages. This works great, but these messages are > also going into my /var/log/messages which has: > > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err > /var/log/messag > es > > Apache sends to local5.notice. I have tried add local5.none to this > line which according to the man page is suppose to disable all local5 > messages, but they still come through. Is there something I'm missing > here? > > Thanks, > > Patrick > ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: syslog question
On Mon, Jan 19, 2004 at 01:09:13PM +0100, Didier WIROTH wrote: > Hi, > I've this entry in syslog.conf (which is default): > > *.err;kern.debug;auth.notice;mail.crit /dev/console > > I would like also to log those messages in a file called for example: > /var/log/console.critical (I want both, /dev/console and the log file!) > > How should I modify the above line to achive this? Just add a second line with the same selectors, but a different action. Eg. *.err;kern.debug;auth.notice;mail.crit /dev/console *.err;kern.debug;auth.notice;mail.crit /var/log/console.critical Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: syslog question
On Mon, 2004-01-19 at 14:09, Didier WIROTH wrote: > Hi, > I've this entry in syslog.conf (which is default): > > *.err;kern.debug;auth.notice;mail.crit /dev/console > > I would like also to log those messages in a file called for example: > /var/log/console.critical (I want both, /dev/console and the log file!) > > How should I modify the above line to achive this? Hi, If you read further down in the file you will see this: # uncomment this to log all writes to /dev/console to /var/log/console.log #console.info/var/log/console.log Just do as it says to log to a file as_well_as console. Change the above line to whatever name you would like to call the file. -- Nelis Lamprecht PGP: http://www.8ball.co.za/pgp/nelis.key "Unix IS user friendly.. It's just selective about who its friends are." signature.asc Description: This is a digitally signed message part
Re: syslog question
On Monday 19 January 2004 13:09, Didier WIROTH wrote: > I've this entry in syslog.conf (which is default): > > *.err;kern.debug;auth.notice;mail.crit /dev/console > > I would like also to log those messages in a file called for example: > /var/log/console.critical (I want both, /dev/console and the log file!) > > How should I modify the above line to achive this? For /etc/syslog.conf: # uncomment this to log all writes to /dev/console to /var/log/console.log # console.info/var/log/console.log ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Syslog question
On Wed, Jun 25, 2003 at 10:21:11AM -0400, Kliment Andreev wrote: > I have the following in /etc/syslog.conf. Notice lines (1) and (3). > I want to log news.notice ONLY in /var/log/news/news.notice but instead of > that I have the same output both in /var/log/news/news.notice and > /var/log/messages. If I remove *.notice from line (3) I am afraid that I > would not log any other *.notice messages. > > (1) news.notice > /var/log/news/news.notice > *.err;kern.debug;auth.notice;mail.crit /dev/console > (3) *.notice;kern.debug;lpr.info;mail.crit /var/log/messages Try: *.notice;news.none;kern.debug;lpr.info;mail.crit /var/log/messages which should stop any news facility logging to /var/log/messages iirc. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Syslog question
Add !news.notice to your /var/log/messages line. man syslog.conf as well, for your own sake. Kliment Andreev wrote: I have the following in /etc/syslog.conf. Notice lines (1) and (3). I want to log news.notice ONLY in /var/log/news/news.notice but instead of that I have the same output both in /var/log/news/news.notice and /var/log/messages. If I remove *.notice from line (3) I am afraid that I would not log any other *.notice messages. (1) news.notice /var/log/news/news.notice *.err;kern.debug;auth.notice;mail.crit /dev/console (3) *.notice;kern.debug;lpr.info;mail.crit /var/log/messages What should I modify, before I kill -HUP `cat /var/run/syslog.pid`. Thanks... ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: syslog question
> Is there any way to say in the first line "send *.notice except where > programname=ipmon to /var/log/messages"? > > I read through the syslog.conf man page, but there doesn't seem to be > any way to do this. Change the /var/log/messages line so it looks like this: *.notice;kern.debug;lpr.info;mail.crit;news.err;local0.none /var/log/messages (sorry for the line break added by my MUA). Works for me. -- Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/ * If you don't leave me alone, i'll go and find someone else who will. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
