rsyslog.conf.logserver 2.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133
  1. #
  2. # /etc/rsyslog.conf Configuration file for rsyslog. (Salt managed)
  3. #
  4. # For more information see
  5. # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
  6. #################
  7. #### MODULES ####
  8. #################
  9. $ModLoad imuxsock # provides support for local system logging
  10. $ModLoad imklog # provides kernel logging support
  11. #$ModLoad immark # provides --MARK-- message capability
  12. # provides UDP syslog reception
  13. $ModLoad imudp
  14. $UDPServerRun 514
  15. # provides TCP syslog reception
  16. $ModLoad imtcp
  17. $InputTCPServerRun 514
  18. ###########################
  19. #### GLOBAL DIRECTIVES ####
  20. ###########################
  21. #
  22. # Use traditional timestamp format.
  23. # To enable high precision timestamps, comment out the following line.
  24. #
  25. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  26. #
  27. # Set the default permissions for all log files.
  28. #
  29. $FileOwner root
  30. $FileGroup adm
  31. $FileCreateMode 0640
  32. $DirCreateMode 0755
  33. $Umask 0022
  34. #
  35. # Where to place spool and state files
  36. #
  37. $WorkDirectory /var/spool/rsyslog
  38. #
  39. # Include all config files in /etc/rsyslog-early.d/
  40. #
  41. $IncludeConfig /etc/rsyslog-early.d/*.conf
  42. #
  43. # Mirror all remaining logs to graylog
  44. #
  45. *.* @{{ graylog_uri }}
  46. #
  47. # Include all config files in /etc/rsyslog.d/
  48. #
  49. $IncludeConfig /etc/rsyslog.d/*.conf
  50. ###############
  51. #### RULES ####
  52. ###############
  53. #
  54. # First some standard log files. Log by facility.
  55. #
  56. #auth,authpriv.* /var/log/auth.log
  57. #*.*;auth,authpriv.none -/var/log/syslog
  58. #cron.* /var/log/cron.log
  59. #daemon.* -/var/log/daemon.log
  60. #kern.* -/var/log/kern.log
  61. #lpr.* -/var/log/lpr.log
  62. #mail.* -/var/log/mail.log
  63. #user.* -/var/log/user.log
  64. #
  65. # Logging for the mail system. Split it up so that
  66. # it is easy to write scripts to parse these files.
  67. #
  68. #mail.info -/var/log/mail.info
  69. #mail.warn -/var/log/mail.warn
  70. #mail.err /var/log/mail.err
  71. #
  72. # Logging for INN news system.
  73. #
  74. #news.crit /var/log/news/news.crit
  75. #news.err /var/log/news/news.err
  76. #news.notice -/var/log/news/news.notice
  77. #
  78. # Some "catch-all" log files.
  79. #
  80. #*.=debug;\
  81. # auth,authpriv.none;\
  82. # news.none;mail.none -/var/log/debug
  83. #*.=info;*.=notice;*.=warn;\
  84. # auth,authpriv.none;\
  85. # cron,daemon.none;\
  86. # mail,news.none -/var/log/messages
  87. #
  88. # Emergencies are sent to everybody logged in.
  89. #
  90. *.emerg :omusrmsg:*
  91. #
  92. # I like to have messages displayed on the console, but only on a virtual
  93. # console I usually leave idle.
  94. #
  95. #daemon,mail.*;\
  96. # news.=crit;news.=err;news.=notice;\
  97. # *.=debug;*.=info;\
  98. # *.=notice;*.=warn /dev/tty8
  99. # The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
  100. # you must invoke `xconsole' with the `-file' option:
  101. #
  102. # $ xconsole -file /dev/xconsole [...]
  103. #
  104. # NOTE: adjust the list below, or you'll go crazy if you have a reasonably
  105. # busy site..
  106. #
  107. #daemon.*;mail.*;\
  108. # news.err;\
  109. # *.=debug;*.=info;\
  110. # *.=notice;*.=warn |/dev/xconsole