[SATLUG] syslog a particular level

Aaron Hackney aaron at aaronhackney.com
Mon Dec 13 19:19:08 CST 2010


On Mon, Dec 13, 2010 at 6:42 AM, Aaron Hackney <aaron at aaronhackney.com> wrote:
> On Sun, Dec 12, 2010 at 5:49 PM, Greg Swift <gregswift at gmail.com> wrote:
>> Take the /var/log/system.log line and add local4.none too it like this:
>>
>> *.notice;kern.debug;lpr.info;mail.crit;mail.info;news.err;local0.none;local7.none;local4.none
>> %/var/log/system.log
>
> Greg, thanks man! I'll give it a try and let you know!
> -A

Worked great. Thanks man! I gave a SATLUG shout out in my blog entry
on "Remote Syslog on Freenas"
http://www.networksa.org/?p=318

>
>
>>
>> -greg
>>
>> On Sun, Dec 12, 2010 at 10:41, Aaron Hackney <aaron at aaronhackney.com> wrote:
>>
>>> Hey all. Quick question that I can't find a clear answer on.
>>>
>>> I have a syslog server that is receiving syslog messages from an
>>> external source (Cisco ASA firewall) which is sending warning syslog
>>> messages (local4.*).
>>>
>>> This is NOT syslog-ng, but standard syslog.
>>>
>>> My config looks like this:
>>> #######################
>>>
>>> local3.* %/var/log/sshd.log
>>> local5.* %/var/log/smartd.log
>>> ftp.* %/var/log/ftp.log
>>> daemon.* %/var/log/daemon.log
>>> *.notice;kern.debug;lpr.info;mail.crit;mail.info
>>> ;news.err;local0.none;local7.none
>>> %/var/log/system.log
>>> security.* %/var/log/system.log
>>> auth.info;authpriv.info %/var/log/system.log
>>> +fw.aaron.pvt
>>> *.*                     /var/log/cisco-syslog
>>> *.emerg *
>>> #######################
>>>
>>> It is working fine, in that I am receiving the syslog messages in
>>> /var/log/cisco-syslog from my host, but I am also receiving those same
>>> messages in system.log.
>>>
>>> Is there a way, with standard syslog, to prevent the local4 messages
>>> from being written to system.log or do I just need to move on to
>>> syslog-ng?
>>>
>>> TIA!
>>> -A
>>>
>>> --
>>> "Don't ask yourself what the world needs. Ask yourself what makes you
>>> come alive and then go do that. Because what the world needs is people
>>> who have come alive." -Dr. Howard Thurman
>>>
>>> ******************************
>>> Aaron Keith Hackney
>>> aaron at aaronkeithstudios.com
>>> Cell 210.325.2196
>>> ******************************
>>> --
>>> _______________________________________________
>>> SATLUG mailing list
>>> SATLUG at satlug.org
>>> http://alamo.satlug.org/mailman/listinfo/satlug to manage/unsubscribe
>>> Powered by Rackspace (www.rackspace.com)
>>>
>> --
>> _______________________________________________
>> SATLUG mailing list
>> SATLUG at satlug.org
>> http://alamo.satlug.org/mailman/listinfo/satlug to manage/unsubscribe
>> Powered by Rackspace (www.rackspace.com)
>>
>
>
>
> --
> "Don't ask yourself what the world needs. Ask yourself what makes you
> come alive and then go do that. Because what the world needs is people
> who have come alive." -Dr. Howard Thurman
>
> ******************************
> Aaron Keith Hackney
> aaron at aaronkeithstudios.com
> Cell 210.325.2196
> ******************************
>



-- 
"Don't ask yourself what the world needs. Ask yourself what makes you
come alive and then go do that. Because what the world needs is people
who have come alive." -Dr. Howard Thurman

******************************
Aaron Keith Hackney
aaron at aaronkeithstudios.com
Cell 210.325.2196
******************************


More information about the SATLUG mailing list