upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-28 12:20:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/usr.sbin/syslogd/syslog.conf

36 lines
1.4 KiB
Text
Raw Normal View History

$Id$ -> $FreeBSD$
1999-08-27 19:37:10 -04:00
# $FreeBSD$
Add Id keywords
1998-09-01 21:34:57 -04:00
#
Note in the comments that it is possible, but not recommended to use spaces instead of tabs in this file. This matches the description in the manpage. PR: 25945 Submitted by: T. William Wells <bill@twwells.com>
2001-03-30 23:41:24 -05:00
# Spaces ARE valid field separators in this file. However,
# other *nix-like systems still insist on using tabs as field
# separators. If you are sharing this file between systems, you
# may want to use only tabs as field separators here.
- Add a couple comment lines to note that spaces are not allowed as field separators. PR: conf/8162 Submitted by: Sheldon Hearn <sheldonh@axl.training.iafrica.com>
1998-10-14 17:59:55 -04:00
# Consult the syslog.conf(5) manpage.
Fix a terrible braino in last commit. Put kern.debug back to /var/log/messages and do exactly what last commit message described.
2005-03-12 07:31:16 -05:00
*.err;kern.warning;auth.notice;mail.crit /dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
Clean up logging of security information a bit: o Introduce /var/log/authentication.log, which will be the target for auth.info and authpriv.info by default. Rotate on the same schedule as most other logs. Create at installation. o Remove logging of auth.info from /var/log/security.log, which will return to being only for security feature subsystems (such as ipfw, and so on). This creates a special authentication log, which can now be searched by scripts for authentication events.
2002-03-11 14:26:29 -05:00
security.* /var/log/security
Turns out everyone is a lot lazier than I thought. Spell 'authentication.log' as 'auth.log'. This is also more consistent with syslog facility names. Sigh. :-) Submitted by: asmodai, aeonflux, green, ....
2002-03-11 14:34:57 -05:00
auth.info;authpriv.info /var/log/auth.log
Initial import of 386BSD 0.1 othersrc/etc
1993-06-20 09:41:45 -04:00
mail.info /var/log/maillog
Move /var/cron/log to /var/log/cron
1999-09-06 16:10:27 -04:00
cron.* /var/log/cron
Add syslog(3) support to devd(8). sbin/devd/devd.cc All output will now go to syslog(3) if devd is daemonized, or stderr if it's running in the foreground. sbin/devd/devd.8 Remove the "-D" flag. Filtering messages by priority now happens in the usual syslog way. For performance reasons, a few extra-verbose debugging statements are now conditional on the "-d" (do not daemonize) flag. etc/syslog.conf etc/newsyslog.conf Direct messages from devd(8) to /var/log/devd.log, but leave it disabled by default Reviewed by: eadler Approved by: gibbs (co-mentor) MFC after: never (removed a command-line option from devd)
2013-07-01 17:20:17 -04:00
!-devd
Make sure debug.log only gets debugging messages.
2003-04-23 09:08:31 -04:00
*.=debug /var/log/debug.log
Initial import of 386BSD 0.1 othersrc/etc
1993-06-20 09:41:45 -04:00
*.emerg *
log daemon.info to /var/log/daemon.log by default log daemon facility now that daemon(8) has syslog support which defaults to daemon facility, info priority Reviewed by: bapt Approved by: bapt Differential Revision: https://reviews.freebsd.org/D21561
2019-09-17 16:03:20 -04:00
daemon.info /var/log/daemon.log
Log the console output to "/var/log/console.log", not "/var/log/console" (MFC candidate)
2001-02-17 15:27:58 -05:00
# uncomment this to log all writes to /dev/console to /var/log/console.log
Similar to all.log, mention that /var/log/console.log has to be created and chmod'ed to make logging work. PR: 168889 Submitted by: Robert Simmons <rsimmons0@gmail.com> MFC after: 1 week
2012-07-01 08:34:19 -04:00
# touch /var/log/console.log and chmod it to mode 600 before it will work
Log the console output to "/var/log/console.log", not "/var/log/console" (MFC candidate)
2001-02-17 15:27:58 -05:00
#console.info /var/log/console.log
Add two commented out syslog.conf entries, one to demonstrate the use of an all.log for logging all messages, and one to demonstrate use of loghosts. Also, a matching entry in newsyslog.conf for all.log. Per request of Garrett Wollman, also modified the maillog entry to use the @T newsyslog time specification mechanism. Because newsyslog doesn't support the mod date specification machanism, couldn't change other entries that required more than one execution a month, but less than once a day. Approved by: jkh Reviewed by: freebsd-security
2000-02-08 16:57:28 -05:00
# uncomment this to enable logging of all log messages to /var/log/all.log
Explain that /var/log/all.log needs to be touched and chmod'd 'ere it can be used. PR: 17022 Submitted by: Niels Christian Bank-Pedersen <ncbp@bank-pedersen.dk> MFC after: 1 week
2001-10-28 08:41:30 -05:00
# touch /var/log/all.log and chmod it to mode 600 before it will work
Add two commented out syslog.conf entries, one to demonstrate the use of an all.log for logging all messages, and one to demonstrate use of loghosts. Also, a matching entry in newsyslog.conf for all.log. Per request of Garrett Wollman, also modified the maillog entry to use the @T newsyslog time specification mechanism. Because newsyslog doesn't support the mod date specification machanism, couldn't change other entries that required more than one execution a month, but less than once a day. Approved by: jkh Reviewed by: freebsd-security
2000-02-08 16:57:28 -05:00
#*.* /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.* @loghost
auth.debug should not be sent to root realtime news.notice info should not be sent to /var/log/messages, as news has its own set of logs and notice is overused by inn added entries for newsservers (but they're commented out)
1996-11-06 17:27:04 -05:00
# uncomment these if you're running inn
# news.crit /var/log/news/news.crit
# news.err /var/log/news/news.err
# news.notice /var/log/news/news.notice
Add syslog(3) support to devd(8). sbin/devd/devd.cc All output will now go to syslog(3) if devd is daemonized, or stderr if it's running in the foreground. sbin/devd/devd.8 Remove the "-D" flag. Filtering messages by priority now happens in the usual syslog way. For performance reasons, a few extra-verbose debugging statements are now conditional on the "-d" (do not daemonize) flag. etc/syslog.conf etc/newsyslog.conf Direct messages from devd(8) to /var/log/devd.log, but leave it disabled by default Reviewed by: eadler Approved by: gibbs (co-mentor) MFC after: never (removed a command-line option from devd)
2013-07-01 17:20:17 -04:00
# Uncomment this if you wish to see messages produced by devd
# !devd
sbin/devd/devd.cc Promoting the SIGINFO handler's log message from LOG_INFO to LOG_NOTICE, and promoting the "Processing event ..." message from LOG_DEBUG to LOG_INFO. Setting the logfile to LOG_NOTICE with this change will have the same result as setting it to LOG_INFO without this change. Setting it to LOG_INFO with this change will include the useful "Processing event ..." messages that were previously at LOG_DEBUG, without including useless messages like "Pushing table". The intent of this change is that one can log "Processing event ..." without logging "Pushing table" and related messages that are sent for every event. The number of lines actually logged is reduced by about 75% by making this change and setting syslog to LOG_INFO vs setting syslog to LOG_DEBUG. etc/syslog.conf Changing the recommended loglevel to notice instead of info. Sponsored by: Spectra Logic Corp MFC after: 4 weeks
2013-12-13 17:58:57 -05:00
# *.>=notice /var/log/devd.log
syslog.conf: pop up from logging only ppp messages at the end of file This allows to append custom rules at the end of the file without risk of confusion that can result when one misses default !ppp line and doesn't add another program specification and thus subsequent selector(s) would belong to ppp program block. Requested by: marck Submitted by: marck Approved by: jhb (mentor)
2009-06-11 11:07:02 -04:00
!*
syslogd(8): add an 'include' keyword All the '.conf' files not beginning with a '.' contained int he directory following the keyword will be included. This keyword can only be used in the first level configuration files. Modify the default syslogd.conf to 'include' /etc/syslog.d and /usr/local/etc/syslog.d It simplify a lot handling of syslog from automation tools. Reviewed by: markj, kib (via irc) Approved by: markj MFC after: 2 weeks Relnotes: yes Differential Revision: https://reviews.freebsd.org/D8402
2016-10-31 21:41:24 -04:00
include /etc/syslog.d
include /usr/local/etc/syslog.d
Reference in a new issue Copy permalink