[logs] syslog question

From: Srinadh Penugonda (QC/EMC) (Srinadh.Penugonda@private)
Date: Thu Oct 13 2005 - 07:56:21 PDT


Hi Guys and Girls!
My syslog.conf is like the following: I wanted all the messages with
facility user with levels everything to be sent to /var/log/syslog.
But when I restart syslogd with this syslog.conf, I see each message twice.
Which one of these is the culprit?
Thanks alot.
--------------

*.err;kern.notice;auth.notice                   /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit        /var/adm/messages

*.alert;kern.err;daemon.err                     operator
*.alert                                         root

*.emerg                                         *

####################### BEGIN: My change ###############################
user.debug                                      /var/log/syslog
############################# END: My change ###########################

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice                    ifdef(`LOGHOST', /var/log/authlog, @loghost)

mail.debug                      ifdef(`LOGHOST', /var/log/syslog, @loghost)
#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err                                        /dev/sysmsg
user.err                                        /var/adm/messages
user.alert                                      `root, operator'
user.emerg                                      *
)

Thanks,
.........................................................
Srinadh Penugonda
Ericsson Canada
TollFree: 1 888-345-7900 ext: 2832
..........................................................




_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis



This archive was generated by hypermail 2.1.3 : Thu Oct 13 2005 - 08:50:15 PDT