#rsyslog v3 config file # provides support for local system logging (e.g. via logger command) $ModLoad imuxsock.so # provides kernel logging support (previously done by rklogd) $ModLoad imklog.so # provides --MARK-- message capability #$ModLoad immark.so # provides UDP syslog reception #$ModLoad imudp.so # provides TCP syslog reception and GSS-API (if compiled to support it) #$ModLoad imtcp.so # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;authpriv.none;cron.none /var/log/messages # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.* -/var/log/maillog # Log cron stuff cron.* /var/log/cron # Everybody gets emergency messages *.emerg * # Save news errors of level crit and higher in a special file. uucp,news.crit /var/log/spooler # Save boot messages also to boot.log local7.* /var/log/boot.log