blob: 70afd0da8476bc519f9a2eff5a96c27025bdec5f [file] [log] [blame]
Andrew Geissler615f2f12022-07-15 14:00:58 -05001@version: 3.36
Brad Bishop1a4b7ee2018-12-16 17:11:34 -08002#
3# Syslog-ng configuration file, compatible with default Debian syslogd
4# installation. Originally written by anonymous (I can't find his name)
5# Revised, and rewrited by me (SZALAY Attila <sasa@debian.org>)
Brad Bishop868407c2019-11-04 13:24:47 -05006#
7# Move to 3.19
8# Only change is to add dns_cache(no) to options to suppress initialization warning.
9#
10# Joe Slater <joe.slater@windriver.com>
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080011
12# First, set some global options.
Brad Bishop868407c2019-11-04 13:24:47 -050013options { chain_hostnames(off); flush_lines(0); use_dns(no); dns_cache(no); use_fqdn(no);
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080014 owner("root"); group("adm"); perm(0640); stats_freq(0);
15 bad_hostname("^gconfd$");
16};
17
18########################
19# Sources
20########################
21# This is the default behavior of sysklogd package
22# Logs may come from unix stream, but not from another machine.
23#
24source s_src { unix-dgram("/dev/log"); internal();
25 file("/proc/kmsg" program_override("kernel"));
26};
27
28# If you wish to get logs from remote machine you should uncomment
29# this and comment the above source line.
30#
31#source s_net { tcp(ip(127.0.0.1) port(1000) authentication(required) encrypt(allow)); };
32
33########################
34# Destinations
35########################
36# First some standard logfile
37#
38destination d_auth { file("/var/log/auth.log"); };
39destination d_cron { file("/var/log/cron.log"); };
40destination d_daemon { file("/var/log/daemon.log"); };
41destination d_kern { file("/var/log/kern.log"); };
42destination d_lpr { file("/var/log/lpr.log"); };
43destination d_mail { file("/var/log/mail.log"); };
44destination d_syslog { file("/var/log/syslog"); };
45destination d_user { file("/var/log/user.log"); };
46destination d_uucp { file("/var/log/uucp.log"); };
47
48# This files are the log come from the mail subsystem.
49#
50destination d_mailinfo { file("/var/log/mail/mail.info"); };
51destination d_mailwarn { file("/var/log/mail/mail.warn"); };
52destination d_mailerr { file("/var/log/mail/mail.err"); };
53
54# Logging for INN news system
55#
56destination d_newscrit { file("/var/log/news/news.crit"); };
57destination d_newserr { file("/var/log/news/news.err"); };
58destination d_newsnotice { file("/var/log/news/news.notice"); };
59
60# Some 'catch-all' logfiles.
61#
62destination d_debug { file("/var/log/debug"); };
63destination d_error { file("/var/log/error"); };
64destination d_messages { file("/var/log/messages"); };
65
66# The root's console.
67#
68destination d_console { usertty("root"); };
69
70# Virtual console.
71#
72destination d_console_all { file("/dev/tty10"); };
73
74# The named pipe /dev/xconsole is for the nsole' utility. To use it,
75# you must invoke nsole' with the -file' option:
76#
77# $ xconsole -file /dev/xconsole [...]
78#
79destination d_xconsole { pipe("/dev/xconsole"); };
80
81# Send the messages to an other host
82#
83#destination d_net { tcp("127.0.0.1" port(1000) authentication(on) encrypt(on) log_fifo_size(1000)); };
84
85# Debian only
86destination d_ppp { file("/var/log/ppp.log"); };
87
88########################
89# Filters
90########################
91# Here's come the filter options. With this rules, we can set which
92# message go where.
93
94filter f_dbg { level(debug); };
95filter f_info { level(info); };
96filter f_notice { level(notice); };
97filter f_warn { level(warn); };
98filter f_err { level(err); };
99filter f_crit { level(crit .. emerg); };
100
101filter f_debug { level(debug) and not facility(auth, authpriv, news, mail); };
102filter f_error { level(err .. emerg) ; };
103filter f_messages { level(info,notice,warn) and
104 not facility(auth,authpriv,cron,daemon,mail,news); };
105
106filter f_auth { facility(auth, authpriv) and not filter(f_debug); };
107filter f_cron { facility(cron) and not filter(f_debug); };
108filter f_daemon { facility(daemon) and not filter(f_debug); };
109filter f_kern { facility(kern) and not filter(f_debug); };
110filter f_lpr { facility(lpr) and not filter(f_debug); };
111filter f_local { facility(local0, local1, local3, local4, local5,
112 local6, local7) and not filter(f_debug); };
113filter f_mail { facility(mail) and not filter(f_debug); };
114filter f_news { facility(news) and not filter(f_debug); };
115filter f_syslog3 { not facility(auth, authpriv, mail) and not filter(f_debug); };
116filter f_user { facility(user) and not filter(f_debug); };
117filter f_uucp { facility(uucp) and not filter(f_debug); };
118
119filter f_cnews { level(notice, err, crit) and facility(news); };
120filter f_cother { level(debug, info, notice, warn) or facility(daemon, mail); };
121
122filter f_ppp { facility(local2) and not filter(f_debug); };
123filter f_console { level(warn .. emerg); };
124
125########################
126# Log paths
127########################
128log { source(s_src); filter(f_auth); destination(d_auth); };
129log { source(s_src); filter(f_cron); destination(d_cron); };
130log { source(s_src); filter(f_daemon); destination(d_daemon); };
131log { source(s_src); filter(f_kern); destination(d_kern); };
132log { source(s_src); filter(f_lpr); destination(d_lpr); };
133log { source(s_src); filter(f_syslog3); destination(d_syslog); };
134log { source(s_src); filter(f_user); destination(d_user); };
135log { source(s_src); filter(f_uucp); destination(d_uucp); };
136
137log { source(s_src); filter(f_mail); destination(d_mail); };
138#log { source(s_src); filter(f_mail); filter(f_info); destination(d_mailinfo); };
139#log { source(s_src); filter(f_mail); filter(f_warn); destination(d_mailwarn); };
140#log { source(s_src); filter(f_mail); filter(f_err); destination(d_mailerr); };
141
142log { source(s_src); filter(f_news); filter(f_crit); destination(d_newscrit); };
143log { source(s_src); filter(f_news); filter(f_err); destination(d_newserr); };
144log { source(s_src); filter(f_news); filter(f_notice); destination(d_newsnotice); };
145#log { source(s_src); filter(f_cnews); destination(d_console_all); };
146#log { source(s_src); filter(f_cother); destination(d_console_all); };
147
148#log { source(s_src); filter(f_ppp); destination(d_ppp); };
149
150log { source(s_src); filter(f_debug); destination(d_debug); };
151log { source(s_src); filter(f_error); destination(d_error); };
152log { source(s_src); filter(f_messages); destination(d_messages); };
153
154log { source(s_src); filter(f_console); destination(d_console_all);
155 destination(d_xconsole); };
156log { source(s_src); filter(f_crit); destination(d_console); };
157
158# All messages send to a remote site
159#
160#log { source(s_src); destination(d_net); };