adding a line to /etc/syslog.config file

Ribo01 · 05-22-2012, 08:37 AM

hello y"all. am trying to add a line to my /etc/syslog.config file. i would want it to always show all failed login attempt to my system in the /var/adm/loginlog file. have created a /var/adm/loginlog file and have modified the ownership to "root". so basically all i want is how to get about it. thanks hope to read from you guys soon. the OS is sun solaris 10 x86

kind regards

Blinker_Fluid · 05-22-2012, 09:23 AM

so are you looking for something like:

Code:

user.*               /var/adm/loginlog
or more restrictive like 
user.info                  /var/adm/loginlog

watch out when editing the file they need to be tabs not spaces.

Ribo01 · 05-23-2012, 12:37 AM

Thanks blinker_fluid. but does it not matter even if i have that line already "user. *" linked to a different file? eg "user. * /var/adm/messages " ! so can i go right ahead and make another "user. *" linking to /var/adm/loginlog. won't there be any conflict of such? using "user.* twice? curious

kind regards

thanks

Blinker_Fluid · 05-23-2012, 11:11 AM

You can have multiples shouldn't be an issue. Both instances are matched and you will see it in messages and in the custom log file you want.