edit /etc/syslog.conf

wedgeworth · 04-02-2004, 11:09 AM

how do i edit my syslong.conf file to redirect all the pop3 entries in my /var/log/secure to it's own log file.....something i could make up like /var/log/pop3. one of my servers is used for the mail system and the pop3d runs every 15 minutes. i'd like to be able to reference my /var/log/secure file without having to parse through tons and tons of pop3 entries. any help would be appreciated. thnx

BigNate · 04-02-2004, 02:51 PM

I am not at a linux box right now to look at the files you are talking about...but I would gamble that you will need a script to handle the parsing. I'd use perl, but bash would work I am sure.

wedgeworth · 04-08-2004, 12:01 PM

i don't think you have to script the sparce......./etc/syslog.conf looks like you can do some kind of keyword deal to redirect to a different log.

cron to /var/log/cron
mail to /var/log/maillog

i'm just not sure what the filter process is. i just want jobs that are obviously pop3 stuff to go to it's own log. has anybody out there created a new set of files under their /var/log directory? stuff that would create the

maillog
maillog.1
maillog.2
maillog.3
maillog.4

files, except for something else we create.

any help?

gandalf2041 · 04-08-2004, 01:58 PM

I believe you need to use one of the local facilities:

e.g. :

Code:

 local0.*                    <path to custom log>

check out the man page for sysconf.log. It's got several examples.