On Thu, Feb 01, 2018 at 09:08:04AM +0100, Landry Breuil wrote: > > # Log everything coming from host bastion to a separate file > > ++bastion /var/log/bastion > > *.* > > +* > > well maybe that's clearer, but the version without *.* works here.. i > dont have a preference, so i'll defer to experts :)
I wonder how that works. I have tried it and it does not, my understanding of the code is that everything after ++bastion on that line is not parsed. The log file name must be in the same line as the severity and facility. The hostname just starts the block. And the block should be closed. I put that block at the beginning of my syslog.conf. ++bastion *.* /var/log/bastion +* bluhm
