11-19-2009
Modifying syslog.conf
I have a RHEL box that I want to be the loghost for all of the other systems on my network and have set up a /logs partitions to hold all of the logs. I've also created a file called current.log that will contain daily logs and created it using the following command: cp /dev/null current.log. After that I went into syslog.conf and edited the file and added this entry:
*.info /logs/rsyslog/current.log
Once this is setup the syslog service is stopped and restarted and when i check the current.log file there are messages being written to it. Once I go back into the syslog.conf file and edit out the *.info file info and revert back to normal the system starts logging messages again.
Does anyone have any ideas why the system won't write to the current.log file?
10 More Discussions You Might Find Interesting
1. Red Hat
Hi all
I have a RedHat Linux AS2.1 server that keep crashing/rebooting and there are no messages in the /var/log/messages file pointing to any problems. I had a look at the /etc/syslog.conf file to see what gets logged to /var/log/messages, but I don't know what else to add. Can anyone tell me... (1 Reply)
Discussion started by: soliberus
1 Replies
2. Solaris
Has anyone here configured a central syslog server using syslog-ng ?
I have set one up and I'm trying to tune the syslog-ng.conf file, both for the server and the client. I have found lots of linux example files, but not much on Solaris which is slightly different.
So if you have a Solaris... (5 Replies)
Discussion started by: Tornado
5 Replies
3. UNIX for Dummies Questions & Answers
Hi,
We had a hardware problem at work and none of the kernel problems outputted to the log file, just the screen. How can I configure the syslogd.conf file to record kernel events (ie hardware problems) to /dev/console and/var/log/messages. Can I just put:
/dev/console /var/log/messages on... (5 Replies)
Discussion started by: mojoman
5 Replies
4. Red Hat
Hello all,
I'm running Oracle 10.2 on RHEL5. Current value of ulimit -n is set to a low value of 1024. I need to increase it to 65536 using the following procedure.
cat >> /etc/security/limits.conf <<EOF
oracle soft nproc 2047
oracle hard nproc 16384
oracle soft nofile 1024
oracle hard... (3 Replies)
Discussion started by: luft
3 Replies
5. Red Hat
Hey Guys,
I am having a problem after modifying the modprobe.conf. I added a few entries for the HBA drivers. When I noticed that it would not boot after this, I mounted a knoppix disk and removed those lines from the modprobe.conf. Now after removing those lines, it is still stuck at the same... (2 Replies)
Discussion started by: s ladd
2 Replies
6. Shell Programming and Scripting
How can i configure messages with warn priority to be logged in /var/log/mywarnings.log ? (1 Reply)
Discussion started by: g0dlik3
1 Replies
7. Solaris
I would like to configure the syslog.conf to have a good monitoring information about my system.
do you have any idea about best configuration from your experience in your Data Centers
BR, (5 Replies)
Discussion started by: maxim42
5 Replies
8. Red Hat
Hi,
I would like to configure syslog linux client, syslog server is windows server.
so adding on linux client in /etc/syslog.conf @hostname will work in the place of directory location.
example of /etc/syslog.conf
# Log all kernel messages to the console.
# Logging much else clutters up... (2 Replies)
Discussion started by: manoj.solaris
2 Replies
9. BSD
I'm trying to get all ipfw logs going to ipfw.log I've managed that, but ipfw.log is also getting stuff that shows up in system.log
!-ipfw
*.notice;authpriv,remoteauth,ftp,install,internal.none /var/log/system.log
kern.* /var/log/kernel.log... (5 Replies)
Discussion started by: jnojr
5 Replies
10. Solaris
Hi Community
Which are the available entries to forward syslog in syslog.conf
i have put
*.err;kern.debug;daemon.notice;mail.crit;user.alert;user.emerg;kern.notice;auth.notice;kern.warning @172.16.200.50
and it's not going through.giving error message like below:
syslogd:... (2 Replies)
Discussion started by: bentech4u
2 Replies
LEARN ABOUT DEBIAN
socklog-conf
socklog-conf(8) System Manager's Manual socklog-conf(8)
NAME
socklog-conf - sets up a socklog(8) service.
SYNOPSIS
socklog-conf unix|inet|klog|ucspi-tcp acct logacct
socklog-conf notify acct grp
DESCRIPTION
socklog-conf creates /etc/sv if necessary and a subdirectory that runs the unix, inet, ucspi-tcp or notify service (see below for each ser-
vice). Except for the notify service, socklog-conf also creates a log directory with subdirectories.
acct, logacct and grp must not contain any special characters.
UNIX SERVICE
socklog-conf unix acct logacct
Running socklog-conf with the 1st argument unix, socklog-conf creates the service directory /etc/sv/socklog-unix and the log directory
/var/log/socklog.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on /dev/log.
It also creates automatically rotated log directories in /var/log/socklog. The logs are owned by logacct. The corresponding svlogd(8)
process runs under the uid and gid of logacct.
You can add the service to system-wide service supervision through the update-service(8) program:
update-service --add /etc/sv/socklog-unix
INET SERVICE
socklog-conf inet acct logacct
Running socklog-conf with the 1st argument inet, socklog-conf creates the service directory /etc/sv/socklog-inet and the log directory
/var/log/socklog-inet.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on the UDP socket 0.0.0.0:514.
It also creates automatically rotated log directories in /var/log/socklog-inet. The logs are owned by logacct. The corresponding
svlogd(8) process runs under the uid and gid of logacct.
You can add the service to system-wide service supervision through the update-service(8) program:
update-service --add /etc/sv/socklog-inet
KLOG SERVICE
socklog-conf klog acct logacct
Running socklog-conf with the 1st argument klog, socklog-conf creates the service directory /etc/sv/socklog-klog and the log directory
/var/log/socklog-klog.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to read kernel messages from /proc/kmsg on Linux, or
/dev/socklog-klog on BSD.
It also creates automatically rotated log directories in /var/log/socklog-klog. The logs are owned by logacct. The corresponding
svlogd(8) process runs under the uid and gid of logacct.
You can add the service to system-wide service supervision through the update-service(8) program:
update-service --add /etc/sv/socklog-klog
UCSPI-TCP SERVICE
socklog-conf ucspi-tcp acct logacct
Running socklog-conf with the 1st argument ucspi-tcp, socklog-conf creates the service directory /etc/sv/socklog-ucspi-tcp and the log
directory /var/log/socklog-ucspi-tcp.
socklog-conf arranges for tcpsvd(1) to run socklog(8) under the uid and gid of acct and to listen on the TCP socket 0.0.0.0:10116.
It also creates automatically rotated log directories in /var/log/socklog-ucspi-tcp. The logs are owned by logacct. The corresponding
svlogd(8) process runs under the uid and gid of logacct.
You can add the service to system-wide service supervision through the update-service(8) program:
update-service --add /etc/sv/socklog-ucspi-tcp
NOTIFY SERVICE
socklog-conf notify acct grp
Running socklog-conf with the 1st argument notify, socklog-conf creates the service directory /etc/sv/socklog-notify.
socklog-conf arranges for uncat(1) to run under the uid and gid of acct and to listen on the named pipe /var/log/socklog/.notify. The
named pipe will have mode 0620, the uid of acct and the gid of grp.
All uids running a log service that is configured to push log events to the socklog-notify service must be member of the group grp.
You can add the service to system-wide service supervision through the update-service(8) program:
update-service --add /etc/sv/socklog-notify
SEE ALSO
socklog(8), svlogd(8), nc(1), tryto(1), uncat(1), socklog-check(8), tcpsvd(8), sv(8), runsv(8), runsvdir(8)
http://smarden.org/socklog/
http://smarden.org/runit/
AUTHOR
Gerrit Pape <pape@smarden.org>
socklog-conf(8)