Solved

Linux Logging

Posted on 2009-07-02
5
467 Views
Last Modified: 2013-12-06
I am new to Linux. I need to ensure that I have my system setup to log everything correctly to my central syslog server. Right now, I have the following in my syslog.conf. Now, I just want to ask, will this log everything? I cannot find any documentation on how to actually configure a level of logging for these logs. It almost seems to me that they are logged by default and your just tell it what level to log and I am logging everything. Is that correct?

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog


# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                              
0
Comment
Question by:ainselyb
  • 2
  • 2
5 Comments
 
LVL 1

Accepted Solution

by:
krishna_babu5 earned 250 total points
ID: 24769912
Insert the below syntax into syslog.conf to log alerts remotely.
*.*                 @hostname
The hostname shall be your remote server and once it is done restart the syslog daemon as follows.
service syslog restart
Use "man syslogd" for more detail information on configuring syslog.conf.
0
 
LVL 4

Assisted Solution

by:colinvann
colinvann earned 250 total points
ID: 24771517
just so you know what the *.* is for...

The left * tells syslog that you want all log facilities to be logged.
The right * tells syslog to log all levels of logging for whatever facility is to the left of the '.' (In this case - all facilities)

0
 
LVL 1

Expert Comment

by:krishna_babu5
ID: 24771735
yep all facilities and all levels of the logging should be logged at remote host "@hostname"
0
 

Author Comment

by:ainselyb
ID: 25327268
So one more question - does this assume that my applications are configured for logging?
0
 

Author Comment

by:ainselyb
ID: 25327428
Also,

If I have this line, *.info;mail.none;authpriv.none;cron.none , and then at the end I enter the *.* syslog server, is this saying log  *.info;mail.none;authpriv.none;cron.none  to /var/log/messages and also to send all facilities all severity to my syslog server at the same time? Just want to ensure that I am getting this. Thanks,
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After running Ubuntu some time, you will be asked to download updates for fixing bugs and security updates. All the packages you download replace the previous ones, except for the kernel, also called "linux-image". This is due to the fact that w…
This document is written for Red Hat Enterprise Linux AS release 4 and ORACLE 10g.  Earlier releases can be installed using this document as well however there are some additional steps for packages to be installed see Metalink. Disclaimer: I hav…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now