-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Wednesday 2007-05-30 at 09:08 +0200, Dirk Schreiner wrote:
Hi, next Lines in syslog-ng.conf will copy all messages into _one_ file. This may help to find if there is any message. (And like Markus, i love to find everything in one place. ) Do not forget to chmod 600 and chown root:root /var/log/allmessages!
Depends... If you have a mail server, the mail messages in the messages file are so much that you can miss important things there. One reason to send auth messages to their own file (and not to the main one) is because they may contain sensitive data (passwords, depending on cofig). There are cases when it is important to separate some messages on diferent files for easier inspection. Sometimes it is better to have everyting in the same place to find relations between different events. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGXf83tTMYHG2NR9URAjX9AJ48kvYTgkD2shKyl767sfOb+oaGLgCfdQb0 9PkUSWq39S32AekMsEKl8U8= =/7m7 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org