rsyslog.conf 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125
  1. # /etc/rsyslog.conf Configuration file for rsyslog.
  2. #
  3. # For more information see
  4. # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
  5. #################
  6. #### MODULES ####
  7. #################
  8. $ModLoad imuxsock # provides support for local system logging
  9. $ModLoad imklog # provides kernel logging support
  10. #$ModLoad immark # provides --MARK-- message capability
  11. # Don't drop messages
  12. $SystemLogRateLimitInterval 0
  13. $RepeatedMsgReduction off
  14. # provides UDP syslog reception
  15. #$ModLoad imudp
  16. #$UDPServerRun 514
  17. # provides TCP syslog reception
  18. #$ModLoad imtcp
  19. #$InputTCPServerRun 514
  20. ###########################
  21. #### GLOBAL DIRECTIVES ####
  22. ###########################
  23. #
  24. # Use traditional timestamp format.
  25. # To enable high precision timestamps, comment out the following line.
  26. #
  27. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  28. #
  29. # Set the default permissions for all log files.
  30. #
  31. $FileOwner root
  32. $FileGroup adm
  33. $FileCreateMode 0640
  34. $DirCreateMode 0755
  35. $Umask 0022
  36. #
  37. # Where to place spool and state files
  38. #
  39. $WorkDirectory /var/spool/rsyslog
  40. #
  41. # Include all config files in /etc/rsyslog.d/
  42. #
  43. $IncludeConfig /etc/rsyslog.d/*.conf
  44. ###############
  45. #### RULES ####
  46. ###############
  47. #
  48. # First some standard log files. Log by facility.
  49. #
  50. auth,authpriv.* /var/log/auth.log
  51. *.*;auth,authpriv.none -/var/log/syslog
  52. #cron.* /var/log/cron.log
  53. daemon.* /var/log/daemon.log
  54. kern.* -/var/log/kern.log
  55. lpr.* -/var/log/lpr.log
  56. mail.* -/var/log/mail.log
  57. user.* -/var/log/user.log
  58. #
  59. # Logging for the mail system. Split it up so that
  60. # it is easy to write scripts to parse these files.
  61. #
  62. mail.info -/var/log/mail.info
  63. mail.warn -/var/log/mail.warn
  64. mail.err /var/log/mail.err
  65. #
  66. # Logging for INN news system.
  67. #
  68. news.crit /var/log/news/news.crit
  69. news.err /var/log/news/news.err
  70. news.notice -/var/log/news/news.notice
  71. #
  72. # Some "catch-all" log files.
  73. #
  74. *.=debug;\
  75. auth,authpriv.none;\
  76. news.none;mail.none -/var/log/debug
  77. *.=info;*.=notice;*.=warn;\
  78. auth,authpriv.none;\
  79. cron,daemon.none;\
  80. mail,news.none -/var/log/messages
  81. #
  82. # Emergencies are sent to everybody logged in.
  83. #
  84. *.emerg :omusrmsg:*
  85. #
  86. # I like to have messages displayed on the console, but only on a virtual
  87. # console I usually leave idle.
  88. #
  89. #daemon,mail.*;\
  90. # news.=crit;news.=err;news.=notice;\
  91. # *.=debug;*.=info;\
  92. # *.=notice;*.=warn /dev/tty8
  93. # The named pipe /dev/xconsole is for the `xconsole' utility. To use it,
  94. # you must invoke `xconsole' with the `-file' option:
  95. #
  96. # $ xconsole -file /dev/xconsole [...]
  97. #
  98. # NOTE: adjust the list below, or you'll go crazy if you have a reasonably
  99. # busy site..
  100. #
  101. daemon.*;mail.*;\
  102. news.err;\
  103. *.=debug;*.=info;\
  104. *.=notice;*.=warn |/dev/xconsole