> From: Secaur,Matthew J. [mailto:Matthew.Secaur AT cna DOT com]
> Sent: Friday 13 July, 2001 21:30
[ ... ]
> HOWEVER! (Isn't there always a "but"?)
>
> This has a down side, too. Processes like inetd, ftpd, etc.
> also use the "daemon" facility. So by adding the daemon.none
> piece to syslog.conf, you will either lose messages from those
> services or they will be redirected to the file you specify on
> the daemon.info line, effectively separating them
that's definetly the way syslog works. you'll have the same
problem if you want only ftpd or inetd messages.
as you can't change the facility ltid us using to log, you can :
- redirect all DAEMON facility to a single dameon.log and grep
trough the it (anyway, [e]grep is syslog best friend ;-)).
you could have a crontab script doing the job.
- use another syslog, one that allows you to filter on the
message generator process name. i once saw such a syslog but
can't look right now - no web access for the moment.
Amicalement,
fx
#include <VRTS/std_disclaimer.h>
--
fx AT veritas DOT com | Serious error. All
François-Xavier Peretmere | Shortcuts have disappeared.
http://www.veritas.com/ | Screen. Mind. Both are blank.
|