# syslog-ng configuration file. # # This should behave pretty much like the original syslog on RedHat. But # it could be configured a lot smarter. # # See syslog-ng(8) and syslog-ng.conf(5) for more information. # # 20000925 gb@sysfive.com # # Updated by Frank Crawford () - 10 Aug 2002 # - for Red Hat 7.3 # - totally do away with klogd # - add message "kernel:" as is done with klogd. # # Updated by Frank Crawford () - 22 Aug 2002 # - use the log_prefix option as per Balazs Scheidler's email # # Updated by Jose Pedro Oliveira () - 05 Apr 2003 # - corrected filters 'f_filter2' and 'f_filter6' # these filters were only allowing messages of one specific # priority level; they should be allowing messages from that # priority and upper levels. # # Updated by Jose Pedro Oliveira () - 25 Jan 2005 # - Don't sync the d_mail destination # # Updated by Jose Pedro Oliveira () - 01 Feb 2005 # - /proc/kmsg is a file not a pipe. # (https://lists.balabit.hu/pipermail/syslog-ng/2005-February/006963.html) # options { sync (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs (no); keep_hostname (yes); }; source s_sys { file ("/proc/kmsg" log_prefix("kernel: ")); unix-stream ("/dev/log"); internal(); # udp(ip(0.0.0.0) port(514)); }; source s_smartcs { udp(ip(0.0.0.0) port(514)); }; destination d_cons { file("/dev/console"); }; destination d_mesg { file("/var/log/messages"); }; destination d_auth { file("/var/log/secure"); }; destination d_mail { file("/var/log/maillog" sync(10)); }; destination d_spol { file("/var/log/spooler"); }; destination d_boot { file("/var/log/boot.log"); }; destination d_cron { file("/var/log/cron"); }; destination d_mlal { usertty("*"); }; destination d_smartcs1p { file("/var/log/$HOST_FROM-tty1-port.log"); }; destination d_smartcs2p { file("/var/log/$HOST_FROM-tty2-port.log"); }; destination d_smartcs3p { file("/var/log/$HOST_FROM-tty3-port.log"); }; destination d_smartcs4p { file("/var/log/$HOST_FROM-tty4-port.log"); }; destination d_smartcs5p { file("/var/log/$HOST_FROM-tty5-port.log"); }; destination d_smartcs6p { file("/var/log/$HOST_FROM-tty6-port.log"); }; destination d_smartcs7p { file("/var/log/$HOST_FROM-tty7-port.log"); }; destination d_smartcs8p { file("/var/log/$HOST_FROM-tty8-port.log"); }; destination d_smartcs9p { file("/var/log/$HOST_FROM-tty9-port.log"); }; destination d_smartcs10p { file("/var/log/$HOST_FROM-tty10-port.log"); }; destination d_smartcs11p { file("/var/log/$HOST_FROM-tty11-port.log"); }; destination d_smartcs12p { file("/var/log/$HOST_FROM-tty12-port.log"); }; destination d_smartcs13p { file("/var/log/$HOST_FROM-tty13-port.log"); }; destination d_smartcs14p { file("/var/log/$HOST_FROM-tty14-port.log"); }; destination d_smartcs15p { file("/var/log/$HOST_FROM-tty15-port.log"); }; destination d_smartcs16p { file("/var/log/$HOST_FROM-tty16-port.log"); }; destination d_smartcs17p { file("/var/log/$HOST_FROM-tty17-port.log"); }; destination d_smartcs18p { file("/var/log/$HOST_FROM-tty18-port.log"); }; destination d_smartcs19p { file("/var/log/$HOST_FROM-tty19-port.log"); }; destination d_smartcs20p { file("/var/log/$HOST_FROM-tty20-port.log"); }; destination d_smartcs21p { file("/var/log/$HOST_FROM-tty21-port.log"); }; destination d_smartcs22p { file("/var/log/$HOST_FROM-tty22-port.log"); }; destination d_smartcs23p { file("/var/log/$HOST_FROM-tty23-port.log"); }; destination d_smartcs24p { file("/var/log/$HOST_FROM-tty24-port.log"); }; destination d_smartcs25p { file("/var/log/$HOST_FROM-tty25-port.log"); }; destination d_smartcs26p { file("/var/log/$HOST_FROM-tty26-port.log"); }; destination d_smartcs27p { file("/var/log/$HOST_FROM-tty27-port.log"); }; destination d_smartcs28p { file("/var/log/$HOST_FROM-tty28-port.log"); }; destination d_smartcs29p { file("/var/log/$HOST_FROM-tty29-port.log"); }; destination d_smartcs30p { file("/var/log/$HOST_FROM-tty30-port.log"); }; destination d_smartcs31p { file("/var/log/$HOST_FROM-tty31-port.log"); }; destination d_smartcs32p { file("/var/log/$HOST_FROM-tty32-port.log"); }; destination d_smartcs { file("/var/log/$HOST_FROM-sys.log" template("$DATE <$PRIORITY> $MSG\n")); }; #filter f_filter1 { facility(kern); }; filter f_filter2 { level(info..emerg) and not facility(mail,authpriv,cron); }; filter f_filter3 { facility(authpriv); }; filter f_filter4 { facility(mail); }; filter f_filter5 { level(emerg); }; filter f_filter6 { facility(uucp) or (facility(news) and level(crit..emerg)); }; filter f_filter7 { facility(local7); }; filter f_filter8 { facility(cron); }; filter f_portlog { facility(local0); }; filter f_syslog { not facility(local0); }; filter f_tty1 { match("TTY01"); }; filter f_tty2 { match("TTY02"); }; filter f_tty3 { match("TTY03"); }; filter f_tty4 { match("TTY04"); }; filter f_tty5 { match("TTY05"); }; filter f_tty6 { match("TTY06"); }; filter f_tty7 { match("TTY07"); }; filter f_tty8 { match("TTY08"); }; filter f_tty9 { match("TTY09"); }; filter f_tty10 { match("TTY10"); }; filter f_tty11 { match("TTY11"); }; filter f_tty12 { match("TTY12"); }; filter f_tty13 { match("TTY13"); }; filter f_tty14 { match("TTY14"); }; filter f_tty15 { match("TTY15"); }; filter f_tty16 { match("TTY16"); }; filter f_tty17 { match("TTY17"); }; filter f_tty18 { match("TTY18"); }; filter f_tty19 { match("TTY19"); }; filter f_tty20 { match("TTY20"); }; filter f_tty21 { match("TTY21"); }; filter f_tty22 { match("TTY22"); }; filter f_tty23 { match("TTY23"); }; filter f_tty24 { match("TTY24"); }; filter f_tty25 { match("TTY25"); }; filter f_tty26 { match("TTY26"); }; filter f_tty27 { match("TTY27"); }; filter f_tty28 { match("TTY28"); }; filter f_tty29 { match("TTY29"); }; filter f_tty30 { match("TTY30"); }; filter f_tty31 { match("TTY31"); }; filter f_tty32 { match("TTY32"); }; #log { source(s_sys); filter(f_filter1); destination(d_cons); }; log { source(s_sys); filter(f_filter2); destination(d_mesg); }; log { source(s_sys); filter(f_filter3); destination(d_auth); }; log { source(s_sys); filter(f_filter4); destination(d_mail); }; log { source(s_sys); filter(f_filter5); destination(d_mlal); }; log { source(s_sys); filter(f_filter6); destination(d_spol); }; log { source(s_sys); filter(f_filter7); destination(d_boot); }; log { source(s_sys); filter(f_filter8); destination(d_cron); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty1); destination(d_smartcs1p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty2); destination(d_smartcs2p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty3); destination(d_smartcs3p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty4); destination(d_smartcs4p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty5); destination(d_smartcs5p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty6); destination(d_smartcs6p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty7); destination(d_smartcs7p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty8); destination(d_smartcs8p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty9); destination(d_smartcs9p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty10); destination(d_smartcs10p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty11); destination(d_smartcs11p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty12); destination(d_smartcs12p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty13); destination(d_smartcs13p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty14); destination(d_smartcs14p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty15); destination(d_smartcs15p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty16); destination(d_smartcs16p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty17); destination(d_smartcs17p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty18); destination(d_smartcs18p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty19); destination(d_smartcs19p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty20); destination(d_smartcs20p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty21); destination(d_smartcs21p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty22); destination(d_smartcs22p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty23); destination(d_smartcs23p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty24); destination(d_smartcs24p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty25); destination(d_smartcs25p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty26); destination(d_smartcs26p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty27); destination(d_smartcs27p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty28); destination(d_smartcs28p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty29); destination(d_smartcs29p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty30); destination(d_smartcs30p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty31); destination(d_smartcs31p); }; log { source(s_smartcs); filter(f_portlog); filter(f_tty32); destination(d_smartcs32p); }; log { source(s_smartcs); filter(f_syslog); destination(d_smartcs); };