[opensuse] Editing syslog-ng
I just don't get it right.. I want to log cyrus messages to a separate file, and added this to my syslog-ng.conf; filter cyrus { facility(local6) and level(debug); }; destination cyrus { file("/var/log/cyrus"); }; log { source(src); filter(cyrus); destination(cyrus); }; but nothing gets written in the /var/log/cyrus file.. So, I suppose I got the syslog-ng config messed up, can somebody please help? Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
* Anders Norrbring
but nothing gets written in the /var/log/cyrus file.. So, I suppose I got the syslog-ng config messed up, can somebody please help?
?? as root: rcsyslog restart ?? - -- Patrick Shanahan Plainfield, Indiana, USA HOG # US1244711 http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://counter.li.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn4472 (GNU/Linux) iD8DBQFHF9c2ClSjbQz1U5oRAhWaAJ4xk2ZeoKWHuUTB2lFWmcdYbMyQDACgkuOt zPx4xkkYdvBdQJQOEmJQLZg= =E6bn -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Patrick Shanahan skrev:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
* Anders Norrbring
[10-18-07 16:14]: but nothing gets written in the /var/log/cyrus file.. So, I suppose I got the syslog-ng config messed up, can somebody please help?
?? as root: rcsyslog restart ??
Hehe.. Of course syslog AND cyrus has been restarted, I even tried rebooting in desperation. Still no logging to cyrus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2007-10-19 at 06:51 +0200, Anders Norrbring wrote:
but nothing gets written in the /var/log/cyrus file.. So, I suppose I got the syslog-ng config messed up, can somebody please help?
?? as root: rcsyslog restart ??
Hehe.. Of course syslog AND cyrus has been restarted, I even tried rebooting in desperation. Still no logging to cyrus
Maybe it's a different facility. Also, the custom seems to name the filter named as "f_cyrus", try (so that the filter and the destination have different names). Also the custom seems to be to use the order "level and facility" - it should not matter, but sometimes syslog-ng is quite picky. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFHGHOrtTMYHG2NR9URAkQzAJ9p66V4IdEHG3Krha4H6Tsb3QuBKgCbB6Pm Co8iR7OdA52QEGx0i+ewxdA= =hp++ -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Carlos E. R. skrev:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The Friday 2007-10-19 at 06:51 +0200, Anders Norrbring wrote:
but nothing gets written in the /var/log/cyrus file.. So, I suppose I > got the syslog-ng config messed up, can somebody please help?
?? as root: rcsyslog restart ??
Hehe.. Of course syslog AND cyrus has been restarted, I even tried rebooting in desperation. Still no logging to cyrus
Maybe it's a different facility.
Also, the custom seems to name the filter named as "f_cyrus", try (so that the filter and the destination have different names). Also the custom seems to be to use the order "level and facility" - it should not matter, but sometimes syslog-ng is quite picky.
- -- Cheers, Carlos E. R.
That has been tried as well.... But you have a point about facility, they may have changed it, I'll take a look at the docs once again for Cyrus. Anders. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2007-10-19 at 12:34 +0200, Anders Norrbring wrote:
That has been tried as well.... But you have a point about facility, they may have changed it, I'll take a look at the docs once again for Cyrus.
You could filter by program instead of by facility. For instance, one of mine: filter f_fax { facility(daemon) and ( program("FaxGetty") or program("FaxSend") ); }; - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFHGKjWtTMYHG2NR9URAvXPAJ9nfqLWsCp9ErNYqgAbhsZpCSbdsQCdHe5s 3cW77CPc/DZaagEaNoOwML4= =2kuf -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Carlos E. R. skrev:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The Friday 2007-10-19 at 12:34 +0200, Anders Norrbring wrote:
That has been tried as well.... But you have a point about facility, they may have changed it, I'll take a look at the docs once again for Cyrus.
You could filter by program instead of by facility. For instance, one of mine:
filter f_fax { facility(daemon) and ( program("FaxGetty") or program("FaxSend") ); };
That may be a solution.. Anyway, I posted the question in a cyrus mailing list as well, I'll await a response there before going deeper into it.. Thanks Carlos. ;) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Anders Norrbring
-
Carlos E. R.
-
Patrick Shanahan