syslog-ng.conf

syslog-ng.conf (text/plain), 2.68 KB, created by a_tevelev on 2009-12-21 03:23:09 UTC

@version: 3.0
# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3.0,v 1.1 2009/05/25 20:07:21 mr_bones_ Exp $
#
# Syslog-ng default configuration file for Gentoo Linux

options { 
	chain_hostnames(no); 
	flush_lines(0); 

	# The default action of syslog-ng is to log a STATS line
	# to the file every 10 minutes.  That's pretty ugly after a while.
	# Change it to every 12 hours so you get a nice daily update of
	# how many messages syslog-ng missed (0).
	stats_freq(43200); 
#	mark(43200); - not implemented yet
};

source main {
    unix-stream("/dev/log" max-connections(256));
    internal();
};

source src {
    unix-stream("/dev/log" max-connections(256));
    internal();
    file("/proc/kmsg");
};

source kernsrc { file("/proc/kmsg"); };

destination _syslog { file("/var/log/syslog.log"); };
destination kern { file("/var/log/kern.log"); };
destination debug { file("/var/log/debug.log"); };
destination firewall { file("/var/log/firewall.log"); };
destination cron { file("/var/log/cron.log"); };
destination sensors { file("/var/log/sensors.log"); };
destination avg { file("/var/log/avg.log"); };
# destination messages { file("/var/log/messages"); };
destination all { file("/tmp/all.log"); };


# By default messages are logged to tty12...
destination console_all { file("/dev/tty12"); };
# ...if you intend to use /dev/console for programs like xconsole
# you can comment out the destination line above that references /dev/tty12
# and uncomment the line below.
#destination console_all { file("/dev/console"); };
destination console { pipe("/dev/console"); };

filter f_error { level(err..emerg); };
filter f_avg { facility(daemon) and program("^avg.*"); };
filter f_firewall { facility(kern) and match("^.*FIREWALL.*"); };
filter f_cron { facility(cron); };
filter f_kern { facility(kern); };
# filter f_sensors {};
filter f_syslog { level(info..emerg)
                  and not facility(mail, news)
		  and not match("^.*FIREWALL.*")
		  and not program("^avg.*")
		  and not match("^.*STATS:.*"); };

log { source(src); filter(f_avg); destination(avg); };
log { source(src); filter(f_syslog); destination(_syslog); };
log { source(kernsrc); filter(f_kern); destination(kern); };
log { source(main); destination(debug); };
log { source(src); filter(f_firewall); destination(firewall); };
log { source(src); filter(f_cron); destination(cron); };
# log { source(src); filter(f_sensors); destination(sensors); };
log { source(src); source(main); source(kernsrc); destination(all); };

log { source(main); filter(f_error); destination(console); };
log { source(main); destination(console_all); };
#log { source(src); destination(messages); };
#log { source(src); destination(console_all); };