rsyslog.conf file

rsyslog.conf (text/plain), 3.24 KB, created by Jon Gerdes on 2008-08-27 18:45:39 UTC

# /etc/rsyslog.conf
# RSyslog system logger configuration
# Docs: http://www.rsyslog.com/doc-rsyslog_conf.html
# "/etc/init.d/rsyslog reload" to reread the config
# Jon Gerdes (www.blueloop.net) 23 Aug 2008
#
# JG 24 Aug 2008
# - Extra spaces for legibility in params causes errors, OK in 
#   log output lines

# Modules --------------------------------------------------------------------
# Input 
$ModLoad immark.so      # Add Mark messages
$ModLoad imuxsock.so    # Unix sockets
$ModLoad imklog.so      # Kernel logger
#$ModLoad imudp.so	 # UDP input
#$ModLoad imrelp.so	 # RELP input
#$ModLoad imtcp.so	 # TCP input
#$ModLoad file.so	 # Text file input
#$ModLoad imgssapi.so	 # Plain TCP and GSSAPI
#$ModLoad im1395.so	 # Messages via RFC1395 

# Output 
#$ModLoad omsnmp.so	 # Send SNMP traps
#$ModLoad ommysql.so	 # Log to MySQL
#$ModLoad ompgsql.so     # Log to PostgreSQL
#$ModLoad ommail.so      # Send mail
#$ModLoad omrelp.so	 # Send to another host via RELP
#$ModLoad omlibdbi.so	 # Log via generic DB output 
#$ModLoad omgss.so	 # GSS enabled output

# Globals --------------------------------------------------------------------
# There are many more - see docs
# Files and dirs are created as needed
$umask 0000	
$FileOwner root
$FileGroup root
$DirCreateMode 0644
$FileCreateMode	0644
$RepeatedMsgReduction on

# Listeners ------------------------------------------------------------------
#$UDPServerRun 514                      # UDP receiver
#$InputTCPServerRun 514                 # TCP receiver
#$InputRELPServerRun 20514              # RELP receiver
#$InputGSSServerRun 1514                # Kerberos 
#$InputGSSServerPermitPlainTCP on       # Add plain text listener to above

# Logging --------------------------------------------------------------------

# Log remotely (check docs for additional options, eg port and compression)
#*.*        @192.168.100.100     # UDP
#*.*       @@logserver.my.domain # TCP

# Filter out unwanted messages
#wpa_supplicread_interface: No such device

# Each ebuild that honours USE=rsyslog will have a snippet
#   added to /etc/rsyslog.d/
# These will log and then filter out those entries so that
#   they are not repeated in later outputs.
# Include package specific logs (including rsyslog itself)
$IncludeConfig /etc/rsyslog.d/*.conf

# syslog style - everything else that falls through from above
# will be logged in "traditional syslog style"
# If you don't want package specific logs, comment out the include above
# The "-" means don't sync after each write
# & ~ means drop messages that the last filter found (avoid duplication) 

# Log to the console
kern.*                                          /dev/console
& ~

*.info;mail.none;authpriv.none;cron.none        -/var/log/messages
& ~

authpriv.*                                      /var/log/secure
& ~

mail.*                                          -/var/log/maillog
& ~

cron.*                                          -/var/log/cron
& ~

# Display using wall to all logged in users
*.emerg                                         *
& ~

uucp,news.crit                                  -/var/log/spooler
& ~

local7.*                                        /var/log/boot.log
& ~

# Finally log everything else
*.*                                             /var/log/uncategorized.log