- time to move to 2.0 - updated to 1.9.9

[packages/syslog-ng.git] / syslog-ng.conf

#
# Syslog-ng configuration for PLD Linux
#
# See syslog-ng(8) and syslog-ng.conf(5) for more information.
#

options {
	long_hostnames(off);
	sync(0);
	owner(root);
	group(logs);
	perm(0640);
};

source s_sys	{
	{ pipe ("/proc/kmsg" log_prefix("kernel: ")); };
	unix-stream("/dev/log");
	internal();
	max_connections(1024);
};

# uncomment the line below if you want to setup syslog server
#source s_net	{ udp(); };

#destination loghost	{ udp("loghost" port(514)); };

destination kern	{ file("/var/log/kernel"); };
destination messages	{ file("/var/log/messages"); };
destination authlog	{ file("/var/log/secure"); };
destination mail	{ file("/var/log/maillog"); };
destination uucp	{ file("/var/log/spooler"); };
destination debug	{ file("/var/log/debug"); };
destination cron	{ file("/var/log/cron" owner(root) group(crontab) perm(0660)); };
destination syslog	{ file("/var/log/syslog"); };
destination daemon	{ file("/var/log/daemon"); };
destination lpr		{ file("/var/log/lpr"); };
destination user	{ file("/var/log/user"); };
destination ppp		{ file("/var/log/ppp"); };
destination ftp		{ file("/var/log/xferlog"); };
destination audit	{ file("/var/log/audit"); };
destination postgres	{ file("/var/log/pgsql"); };
destination freshclam	{ file("/var/log/freshclam.log"); };

# Log iptables messages to separate file
destination iptables	{ file("/var/log/iptables"); };

destination console	{ usertty("root"); };
#destination console_all	{ file("/dev/tty12"); };

destination xconsole	{ pipe("/dev/xconsole"); };

destination newscrit	{ file("/var/log/news/news.crit" owner(news) group(news)); };
destination newserr	{ file("/var/log/news/news.err" owner(news) group(news)); };
destination newsnotice	{ file("/var/log/news/news.notice" owner(news) group(news)); };

# Filters for standard syslog(3) facilities
filter f_audit		{ facility(audit); };
filter f_authpriv	{ facility(authpriv, auth); };
filter f_cron		{ facility(cron); };
filter f_daemon		{ facility(daemon); };
filter f_ftp		{ facility(ftp); };
filter f_kern		{ facility(kern); };
filter f_lpr		{ facility(lpr); };
filter f_mail		{ facility(mail); };
filter f_news		{ facility(news); };
filter f_syslog		{ facility(syslog); };
filter f_user		{ facility(user); };
filter f_uucp		{ facility(uucp); };
filter f_local0		{ facility(local0); };
filter f_local1		{ facility(local1); };
filter f_local2		{ facility(local2); };
filter f_local3		{ facility(local3); };
filter f_local4		{ facility(local4); };
filter f_local5		{ facility(local5); };
filter f_local6		{ facility(local6); };
filter f_local7		{ facility(local7); };

# Filters for standard syslog(3) priorities
filter p_debug		{ level(debug); };
filter p_info		{ level(info); };
filter p_notice		{ level(notice); };
filter p_warn		{ level(warn); };
filter p_err		{ level(err); };
filter p_alert		{ level(alert); };
filter p_crit		{ level(crit); };
filter p_emergency	{ level(emerg); };

# Additional filters for specific programs/use
filter f_freshclam	{ program(freshclam); };
filter f_ppp		{ program(pppd) or program(chat); };
filter f_postgres	{ program(postgres); };
filter f_iptables	{ match("IN=[A-Za-z0-9]* OUT=[A-Za-z0-9]*"); };

log { source(s_sys); filter(f_auth);	destination(authlog); };
log { source(s_sys); filter(f_cron);	destination(cron); };
log { source(s_sys); filter(f_daemon);	destination(daemon); };
log { source(s_sys); filter(f_ftp);	destination(ftp); };
log { source(s_sys); filter(f_kern);	destination(kern); };
log { source(s_sys); filter(f_lpr);	destination(lpr); };
log { source(s_sys); filter(f_mail);			destination(mail); };
log { source(s_sys); filter(f_news); filter(p_crit);	destination(uucp); };
log { source(s_sys); filter(f_news); filter(p_crit);	destination(newscrit); };
log { source(s_sys); filter(f_news); filter(p_err);	destination(newserr); };
log { source(s_sys); filter(f_news); filter(p_warn);	destination(newsnotice); };
log { source(s_sys); filter(f_news); filter(p_notice);	destination(newsnotice); };
log { source(s_sys); filter(f_news); filter(p_info);	destination(newsnotice); };
log { source(s_sys); filter(f_news); filter(p_debug);	destination(newsnotice); };
log { source(s_sys); filter(f_syslog);	destination(syslog); };
log { source(s_sys); filter(f_user);	destination(user); };
log { source(s_sys); filter(f_uucp);	destination(uucp); };

log { source(s_sys); filter(p_debug);	destination(debug); };

log { source(s_sys); filter(f_daemon); filter(f_ppp);		destination(ppp); };
log { source(s_sys); filter(f_local6); filter(f_freshclam);	destination(freshclam); };
log { source(s_sys); filter(f_local0); filter(f_postgres);	destination(postgres); };
#log { source(s_sys); filter(f_iptables);	destination(iptables); };

log { source(s_sys); filter(p_emergency);	destination(console); };
#log { source(s_sys); destination(console_all); };

#  This is a catchall statement, and should catch all messages which were not
#  accepted any of the previous statements.  
log { source(s_sys); filter(DEFAULT); destination(messages); };

# Network syslogging 
#log { source(s_sys); destination(loghost); };