Log redirection?

Filosofem · 11-20-2005, 09:50 AM

Hey. Well, because of "firestarter" and "iptables", whenever I go on some console, I get a mass of log messages which are pretty annoying. Thus, I was wondering whether it is possible to redirect everything to "xconsole", for example.

Thanks!

ahedler · 11-21-2005, 09:24 PM

I'm not extremely experienced with this, but I believe syslog-ng will let you do this sort of thing. I've only just started trying to set up my logging, so I can't tell you much more than that.

-Alan

Filosofem · 11-25-2005, 01:06 PM

Hey. Thanks for the answer. Yeah, I figured recently that "sysklogd" might not be the best daemon and thus, I just installed "metalog". I heard many good things about it, especially the possibility to include perl regular expressions stuff, in order to filter logs. Anyway, I bet many threads have already been started about that so I won't start a new major discussion about that.

Filosofem · 11-25-2005, 04:13 PM

Ok so just in case someone would be wondering, "metalog" solves the problem.

There's a section in the "/etc/metalog.conf" file about firewalls that is commented. After being uncommented, the problem is solved.

win32sux · 11-25-2005, 04:27 PM

in case it helps anyone else running into this thread: i believe in /etc/syslog.conf there's an option for choosing whether or not you want the output to be sent to the console...

Filosofem · 11-28-2005, 10:54 AM

Yeah, I heard about it. Besides, I think it implies that you will get almost nothing in the console, which might not be a good idea.

win32sux · 11-28-2005, 04:13 PM

actually, AFAIK by selecting the option to not have kernel messages sent to the console it won't affect the other type of messages... personally i've NEVER had a need to see kernel messages on a console - i can just tail the logfiles if i need to... BTW, i'm on slackware and the out-of-the-box setting is to NOT show them... like:

Code:

# Uncomment this to see kernel messages on the console.
#kern.*                                                 /dev/console

but i remember when i tried debian a LONG time ago i had to change the out-of-the-box setting cuz my console was getting floaded with kernel messages and i couldn't do my work...