rsyslog.conf 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123
  1. # /etc/rsyslog.conf Configuration file for rsyslog.
  2. #
  3. # For more information see
  4. # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
  5. #################
  6. #### MODULES ####
  7. #################
  8. $ModLoad imuxsock # provides support for local system logging
  9. $ModLoad imklog # provides kernel logging support
  10. #$ModLoad immark # provides --MARK-- message capability
  11. # provides UDP syslog reception
  12. #$ModLoad imudp
  13. #$UDPServerRun 514
  14. # provides TCP syslog reception
  15. #$ModLoad imtcp
  16. #$InputTCPServerRun 514
  17. ###########################
  18. #### GLOBAL DIRECTIVES ####
  19. ###########################
  20. #
  21. # Use traditional timestamp format.
  22. # To enable high precision timestamps, comment out the following line.
  23. #
  24. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  25. #
  26. # Set the default permissions for all log files.
  27. #
  28. $FileOwner root
  29. $FileGroup adm
  30. $FileCreateMode 0640
  31. $DirCreateMode 0755
  32. $Umask 0022
  33. #
  34. # Where to place spool and state files
  35. #
  36. $WorkDirectory /var/spool/rsyslog
  37. #
  38. # Include all config files in /etc/rsyslog.d/
  39. #
  40. $IncludeConfig /etc/rsyslog.d/*.conf
  41. ###############
  42. #### RULES ####
  43. ###############
  44. #
  45. # First some standard log files. Log by facility.
  46. #
  47. auth,authpriv.* /var/log/auth.log
  48. *.*;auth,authpriv.none -/var/log/syslog
  49. #cron.* /var/log/cron.log
  50. daemon.* -/var/log/daemon.log
  51. kern.* -/var/log/kern.log
  52. lpr.* -/var/log/lpr.log
  53. mail.* -/var/log/mail.log
  54. user.* -/var/log/user.log
  55. #
  56. # Logging for the mail system. Split it up so that
  57. # it is easy to write scripts to parse these files.
  58. #
  59. mail.info -/var/log/mail.info
  60. mail.warn -/var/log/mail.warn
  61. mail.err /var/log/mail.err
  62. #
  63. # Logging for INN news system.
  64. #
  65. news.crit /var/log/news/news.crit
  66. news.err /var/log/news/news.err
  67. news.notice -/var/log/news/news.notice
  68. #
  69. # Some "catch-all" log files.
  70. #
  71. *.=debug;\
  72. auth,authpriv.none;\
  73. news.none;mail.none -/var/log/debug
  74. *.=info;*.=notice;*.=warn;\
  75. auth,authpriv.none;\
  76. cron,daemon.none;\
  77. mail,news.none -/var/log/messages
  78. #
  79. # Emergencies are sent to everybody logged in.
  80. #
  81. *.emerg :omusrmsg:*
  82. #
  83. # I like to have messages displayed on the console, but only on a virtual
  84. # console I usually leave idle.
  85. #
  86. #daemon,mail.*;\
  87. # news.=crit;news.=err;news.=notice;\
  88. # *.=debug;*.=info;\
  89. # *.=notice;*.=warn /dev/tty8
  90. # The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
  91. # you must invoke `xconsole' with the `-file' option:
  92. #
  93. # $ xconsole -file /dev/xconsole [...]
  94. #
  95. # NOTE: adjust the list below, or you'll go crazy if you have a reasonably
  96. # busy site..
  97. #
  98. daemon.*;mail.*;\
  99. news.err;\
  100. *.=debug;*.=info;\
  101. *.=notice;*.=warn |/dev/xconsole
  102. *.* @10.132.251.43