LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 11-21-2001, 01:01 PM   #1
phek
Member
 
Registered: Jul 2001
Location: California, US
Distribution: Slackware
Posts: 196

Rep: Reputation: 30
Couple syslogd questions


OK i've got a couple of questions on syslogd, first off... if i forward the messages remotely, is there any way to also store them locally?

second is in syslog.conf, i don't quite understand the source part of the configuration, so in the statement
mail.=debug /usr/adm/mail
what excactly does the mail. represent? i mean, does it represent any mail process such as sendmail and qmail and all the other mail daemons? What if i wanted to have iptables as my source would it just be
iptables.=debug /usr/adm/iptables_debug
also what is the . there for?

i could use any help or links to some help that i can get.

Last edited by phek; 11-21-2001 at 01:03 PM.
 
Old 11-21-2001, 01:35 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
You can duplicate rules for remote/local logging:

*.err /var/log/err.log
*.err @remotehost-address

The dot separates the facility (think daemon name, like LOCAL0, mail, kernel) from the level (type, debug to critical).
Ie, a rule starting with "kern.*" would accept all messages as spat out by the kernel, whereas "*.debug" would flood the logfile with all debug-level messages from any daemon.

HTH.
 
Old 11-21-2001, 01:47 PM   #3
phek
Member
 
Registered: Jul 2001
Location: California, US
Distribution: Slackware
Posts: 196

Original Poster
Rep: Reputation: 30
ok i kind of get it now, but what does the = mean then cause it seems kind of useless. also can the facility be from any daemon like dhcpd or are their predefined facilities which it could use? and if it can be from any daemon how would i specify something such as dhcpd, would
dhcp.debug /var/log/dhcp_debug
work?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
couple of questions?? Lucas10 Linux - Newbie 23 06-04-2005 05:45 PM
couple of questions ph0n1x Linux - Software 7 03-19-2004 12:58 PM
a Couple of questions! Nik0s Linux - Newbie 14 01-25-2004 11:01 AM
a couple o' questions dlwheeler Linux - General 2 01-15-2002 02:10 PM
Couple questions ericrogers Linux - Newbie 5 08-19-2001 03:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 10:29 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration