Hi, next Lines in syslog-ng.conf will copy all messages into _one_ file. This may help to find if there is any message. (And like Markus, i love to find everything in one place. ) Do not forget to chmod 600 and chown root:root /var/log/allmessages! # # enable this, if you want to keep all messages in one file destination allmessages { file("/var/log/allmessages"); }; log { source(src); destination(allmessages); }; Dirk Markus Gaugusch schrieb:
I've got an old SuSE 9.3 system that serves as a firewall/router/samba for a small office. I use ssh for maintenance. Recently I learned that on other systems there is a /var/log/auth.log that logs who is coming in.
On SuSE, all messages go to /var/log/messages (except for mail, which goes to /var/log/mail). Of course you can also log auth messages to a separate auth.log, just copy the lines from syslog-ng.conf from another system to your box and restart the syslog daemon (rcsyslog restart). But then they would be duplicated and I find it more convenient to have everything in one file, than looking for messages in the wrong file.
Markus
-- TRIA IT-consulting GmbH Joseph-Wild-Straße 20 81829 München Germany Tel: +49 (89) 92907-0 Fax: +49 (89) 92907-100 http://www.tria.de Registergericht München HRB 113466 USt.-IdNr. DE 180017238 Steuer-Nr. 802/40600 Geschäftsführer: Rosa Igl -------------------------------------------------------------------------------- Nachricht von: Dirk.Schreiner@tria.de Nachricht an: opensuse-security@opensuse.org # Dateianhänge: 0 --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org