configs/syslog-ng.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

#
# /etc/syslog-ng.conf
#

options {
  sync (0);
  time_reopen (10);
  log_fifo_size (1000);
  long_hostnames(off); 
  use_dns (no);
  use_fqdn (no);
  create_dirs (no);
  keep_hostname (yes);
  perm(0640);
  group("log");
};

source src {
  unix-stream("/dev/log");
  #internal();
  file("/proc/kmsg");
};

# filters
filter f_messages { level(info..emerg) and not facility(auth, authpriv, mail, news, cron) and not program(syslog-ng) and not filter(f_iptables); };
filter f_iptables { match("IN=.*OUT="); };

# Log everything to vc12
#destination console_all { file("/dev/vc/12"); };
#log { source(src); destination(console_all); };

# Log most everything to vc12
destination console_all { file("/dev/vc/12"); };
log { source(src); filter(f_messages); destination(console_all); };

# Log all messages to a /tmp file, minus some exceptions
destination messages { file("/tmp/messages.log"); };
log { source(src); filter(f_messages); destination(messages); };