Typical workstation syslog-ng.conf - Revision history

Gordp at 17:05, 21 February 2008

2008-02-21T17:05:26Z

Gordp at 16:54, 21 February 2008

2008-02-21T16:54:46Z

← Older revision		Revision as of 16:54, 21 February 2008
Line 39:		Line 39:
	And, if you want to drop these (for the sake of clarity in your /var/log/messages, one way is to filter out all cron-related messages, by adding the bolded/red lines. Think twice, though, if this is really, really what you want to do :-O		And, if you want to drop these (for the sake of clarity in your /var/log/messages, one way is to filter out all cron-related messages, by adding the bolded/red lines. Think twice, though, if this is really, really what you want to do :-O
	destination messages { file("/var/log/messages"); };		destination messages { file("/var/log/messages"); };
	<font color=red>'''# We will take out the annoying every-10-min cron notifications		<font color=red>'''# We will take out the annoying every-10-min cron notifications'''
	filter nocron { not facility(cron); };'''</font>		'''filter nocron { not facility(cron); };'''</font>

	# By default messages are logged to tty12...		# By default messages are logged to tty12...

Gordp at 16:54, 21 February 2008

2008-02-21T16:54:11Z

← Older revision		Revision as of 16:54, 21 February 2008
Line 31:		Line 31:

	log { source(src); destination(messages); };		log { source(src); destination(messages); };
			log { source(src); destination(console_all); };

			If you find that your workstation's /var/log/messages file is cluttered with every-10-minute cron entries like these:
			Feb 21 07:00:01 oilslick cron[19045]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )
			Feb 21 07:10:01 oilslick cron[19097]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )
			Feb 21 07:20:01 oilslick cron[19149]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )
			And, if you want to drop these (for the sake of clarity in your /var/log/messages, one way is to filter out all cron-related messages, by adding the bolded/red lines. Think twice, though, if this is really, really what you want to do :-O
			destination messages { file("/var/log/messages"); };
			<font color=red>'''# We will take out the annoying every-10-min cron notifications
			filter nocron { not facility(cron); };'''</font>

			# By default messages are logged to tty12...
			destination console_all { file("/dev/tty12"); };
			# ...if you intend to use /dev/console for programs like xconsole
			# you can comment out the destination line above that references /dev/tty12
			# and uncomment the line below.
			#destination console_all { file("/dev/console"); };

			<font color=red>'''log { source(src); filter(nocron); destination(messages); };'''</font>
	log { source(src); destination(console_all); };		log { source(src); destination(console_all); };

Gordp at 19:11, 8 February 2008

2008-02-08T19:11:44Z

New page

# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v 1.7 2007/08/02 04:52:18 mr_bones_ Exp $
#
# Syslog-ng default configuration file for Gentoo Linux
# contributed by Michael Sterrett

options {
chain_hostnames(off);
sync(0);

# The default action of syslog-ng 1.6.0 is to log a STATS line
# to the file every 10 minutes. That's pretty ugly after a while.
# Change it to every 12 hours so you get a nice daily update of
# how many messages syslog-ng missed (0).
stats(43200);
};

source src {
unix-stream("/dev/log" max-connections(256));
internal();
file("/proc/kmsg");
};

destination messages { file("/var/log/messages"); };

# By default messages are logged to tty12...
destination console_all { file("/dev/tty12"); };
# ...if you intend to use /dev/console for programs like xconsole
# you can comment out the destination line above that references /dev/tty12
# and uncomment the line below.
#destination console_all { file("/dev/console"); };

log { source(src); destination(messages); };
log { source(src); destination(console_all); };

← Older revision		Revision as of 17:05, 21 February 2008
Line 37:		Line 37:
	Feb 21 07:10:01 oilslick cron[19097]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )		Feb 21 07:10:01 oilslick cron[19097]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )
	Feb 21 07:20:01 oilslick cron[19149]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )		Feb 21 07:20:01 oilslick cron[19149]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons )
	And, if you want to drop these (for the sake of clarity in your /var/log/messages, one way is to filter out all cron-related messages, by adding the bolded/red lines. Think twice, though, if this is really, really what you want to do :-O		And, if you want to drop these (for the sake of clarity in your /var/log/messages, one way is to filter out all cron-related messages, by adding the bolded/red lines. Think twice, though, if this is really, really what you want to do :-O It may be better to continue to log, but just to a separate file which you can review when/as needed
	destination messages { file("/var/log/messages"); };		destination messages { file("/var/log/messages"); };
	<font color=red>'''# We will take out the annoying ~~every-10-min~~ cron notifications'''		<font color=red>'''# We will take out the annoying cron notifications'''
	'''filter nocron { not facility(cron); };'''</font>		'''filter nocron { not facility(cron); };'''
			'''# We will also remove the annoying spamd notifications'''
			'''filter nospamd { not program(spamd); };'''</font>


	# By default messages are logged to tty12...		# By default messages are logged to tty12...
Line 49:		Line 52:
	#destination console_all { file("/dev/console"); };		#destination console_all { file("/dev/console"); };

	<font color=red>'''log { source(src); filter(nocron); destination(messages); };'''</font>		<font color=red>'''log { source(src); filter(nocron); filter(nospamd); destination(messages); };'''</font>
	log { source(src); destination(console_all); };		log { source(src); destination(console_all); };