rsyslog.conf 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124
  1. #
  2. # /etc/rsyslog.conf Configuration file for rsyslog v3. (Salt managed)
  3. #
  4. # For more information see
  5. # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
  6. #################
  7. #### MODULES ####
  8. #################
  9. $ModLoad imuxsock # provides support for local system logging
  10. $ModLoad imklog # provides kernel logging support (previously done by rklogd)
  11. #$ModLoad immark # provides --MARK-- message capability
  12. # provides UDP syslog reception
  13. #$ModLoad imudp
  14. #$UDPServerRun 514
  15. # provides TCP syslog reception
  16. #$ModLoad imtcp
  17. #$InputTCPServerRun 514
  18. ###########################
  19. #### GLOBAL DIRECTIVES ####
  20. ###########################
  21. #
  22. # Use default timestamp format.
  23. # To enable high precision timestamps, comment out the following line.
  24. #
  25. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  26. #
  27. # Set the default permissions for all log files.
  28. #
  29. $FileOwner root
  30. $FileGroup adm
  31. $FileCreateMode 0640
  32. #
  33. # Include all config files in /etc/rsyslog-early.d/
  34. #
  35. $IncludeConfig /etc/rsyslog-early.d/*.conf
  36. # Mirror all remaining logs to logserver
  37. *.* @10.132.251.43
  38. #
  39. # Include all config files in /etc/rsyslog.d/
  40. #
  41. $IncludeConfig /etc/rsyslog.d/*.conf
  42. ###############
  43. #### RULES ####
  44. ###############
  45. #
  46. # First some standard log files. Log by facility.
  47. #
  48. auth,authpriv.* /var/log/auth.log
  49. *.*;auth,authpriv.none -/var/log/syslog
  50. #cron.* /var/log/cron.log
  51. daemon.* -/var/log/daemon.log
  52. kern.* -/var/log/kern.log
  53. lpr.* -/var/log/lpr.log
  54. mail.* -/var/log/mail.log
  55. user.* -/var/log/user.log
  56. #
  57. # Logging for the mail system. Split it up so that
  58. # it is easy to write scripts to parse these files.
  59. #
  60. mail.info -/var/log/mail.info
  61. mail.warn -/var/log/mail.warn
  62. mail.err /var/log/mail.err
  63. #
  64. # Logging for INN news system.
  65. #
  66. news.crit /var/log/news/news.crit
  67. news.err /var/log/news/news.err
  68. news.notice -/var/log/news/news.notice
  69. #
  70. # Some "catch-all" log files.
  71. #
  72. *.=debug;\
  73. auth,authpriv.none;\
  74. news.none;mail.none -/var/log/debug
  75. *.=info;*.=notice;*.=warn;\
  76. auth,authpriv.none;\
  77. cron,daemon.none;\
  78. mail,news.none -/var/log/messages
  79. #
  80. # Emergencies are sent to everybody logged in.
  81. #
  82. *.emerg :omusrmsg:*
  83. #
  84. # I like to have messages displayed on the console, but only on a virtual
  85. # console I usually leave idle.
  86. #
  87. #daemon,mail.*;\
  88. # news.=crit;news.=err;news.=notice;\
  89. # *.=debug;*.=info;\
  90. # *.=notice;*.=warn /dev/tty8
  91. # The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
  92. # you must invoke `xconsole' with the `-file' option:
  93. #
  94. # $ xconsole -file /dev/xconsole [...]
  95. #
  96. # NOTE: adjust the list below, or you'll go crazy if you have a reasonably
  97. # busy site..
  98. #
  99. daemon.*;mail.*;\
  100. news.err;\
  101. *.=debug;*.=info;\
  102. *.=notice;*.=warn |/dev/xconsole