syslog-ng.conf

   1 #
   2 # Syslog-ng example configuration for PLD GNU/Linux
   3 #
   4 # Copyright (c) 1999 anonymous
   5 # Copyright (c) 1999 Balazs Scheidler
   6 # $Id$
   7 #
   8 # Syslog-ng configuration file, compatible with default PLD syslogd
   9 # installation.
  10 #
  11
  12 options { long_hostnames(off); sync(0); };
  13
  14 source src      { unix-dgram("/dev/log"); internal(); };
  15 source net      { udp(); };
  16
  17 #destination loghost    { udp("loghost" port(999)); };
  18
  19 destination kern        { file("/var/log/kernel"); };
  20 destination messages    { file("/var/log/messages"); };
  21 destination authlog     { file("/var/log/secure"); };
  22 destination mail        { file("/var/log/maillog"); };
  23 destination uucp        { file("/var/log/spooler"); };
  24
  25 destination debug       { file("/var/log/debug"); };
  26 destination console     { usertty("root"); };
  27 destination console_all { file("/dev/tty12"); };
  28
  29 destination xconsole    { pipe("/dev/xconsole"); };
  30
  31 destination mailinfo    { file("/var/log/mail/info"); };
  32 destination mailwarn    { file("/var/log/mail/warn"); };
  33 destination mailerr     { file("/var/log/mail/err"); };
  34
  35 destination newscrit    { file("/var/log/news/news.crit"); };
  36 destination newserr     { file("/var/log/news/news.err"); };
  37 destination newsnotice  { file("/var/log/news/news.notice"); };
  38
  39 destination cron        { file("/var/log/cron"); };
  40 destination syslog      { file("/var/log/syslog"); };
  41 destination daemon      { file("/var/log/daemon"); };
  42 destination lpr         { file("/var/log/lpr"); };
  43 destination user        { file("/var/log/user"); };
  44 destination ppp         { file("/var/log/ppp"); };
  45
  46 # Log iptables messages to separate file
  47 destination iptables    { file("/var/log/iptables"); };
  48
  49 filter f_auth           { facility(auth); };
  50 filter f_authpriv       { facility(auth, authpriv); };
  51 filter f_syslog         { not facility(authpriv, mail, news); };
  52 filter f_cron           { facility(cron); };
  53 filter f_daemon         { facility(daemon); };
  54 filter f_kern           { facility(kern); };
  55 filter f_lpr            { facility(lpr); };
  56 filter f_mail           { facility(mail); };
  57 filter f_user           { facility(user); };
  58 filter f_uucp           { facility(cron); };
  59 filter f_ppp            { facility(daemon) and program(pppd) or program(chat); };
  60 filter f_news           { facility(news); };
  61 filter f_messages       { level(info..warn)
  62                         and not facility(auth, authpriv, mail, news, daemon); };
  63
  64 filter p_debug          { level(debug); };
  65 filter p_info           { level(info); };
  66 filter p_notice         { level(notice); };
  67 filter p_warn           { level(warn); };
  68 filter p_err            { level(err); };
  69 filter p_alert          { level(alert); };
  70 filter p_crit           { level(crit); };
  71 filter p_emergency      { level(emerg); };
  72
  73 filter f_iptables       { facility(kern) and match("IN=[A-Za-z0-9]* OUT=[A-Za-z0-9]*"); };
  74
  75 log { source(src); filter(f_kern);      destination(kern); };
  76
  77 log { source(src); filter(f_authpriv);  destination(authlog); };
  78 log { source(src); filter(f_syslog);    destination(syslog); };
  79 log { source(src); filter(f_cron);      destination(cron); };
  80 log { source(src); filter(f_daemon);    destination(daemon); };
  81 log { source(src); filter(f_lpr);       destination(lpr); };
  82 log { source(src); filter(f_user);      destination(user); };
  83 log { source(src); filter(f_uucp);      destination(uucp); };
  84 log { source(src); filter(f_messages);  destination(messages); };
  85 log { source(src); filter(f_ppp);       destination(ppp); };
  86 log { source(src); filter(p_debug);     destination(debug); };
  87 log { source(src); filter(p_emergency); destination(console); };
  88 log { source(src); destination(console_all); };
  89
  90 log { source(src); filter(f_mail);                      destination(mail); };
  91 log { source(src); filter(f_mail); filter(p_info);      destination(mailinfo); };
  92 log { source(src); filter(f_mail); filter(p_warn);      destination(mailwarn); };
  93 log { source(src); filter(f_mail); filter(p_err);       destination(mailerr); };
  94
  95 log { source(src); filter(f_news); filter(p_crit);      destination(uucp); };
  96 log { source(src); filter(f_news); filter(p_crit);      destination(newscrit); };
  97 log { source(src); filter(f_news); filter(p_err);       destination(newserr); };
  98 log { source(src); filter(f_news); filter(p_warn);      destination(newsnotice); };
  99 log { source(src); filter(f_news); filter(p_notice);    destination(newsnotice); };
 100 log { source(src); filter(f_news); filter(p_info);      destination(newsnotice); };
 101 log { source(src); filter(f_news); filter(p_debug);     destination(newsnotice); };
 102
 103 #log { source(src); filter(f_iptables); destination(iptables); };