master/etc/rsyslog.conf

   1 #  /etc/rsyslog.conf    Configuration file for rsyslog.
   2 #
   3 #                       For more information see
   4 #                       /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
   5
   6
   7 #################
   8 #### MODULES ####
   9 #################
  10
  11 $ModLoad imuxsock # provides support for local system logging
  12 $ModLoad imklog   # provides kernel logging support
  13 $ModLoad immark  # provides --MARK-- message capability
  14
  15 # provides UDP syslog reception
  16 $ModLoad imudp
  17 $UDPServerRun 514
  18
  19 # provides TCP syslog reception
  20 #$ModLoad imtcp
  21 #$InputTCPServerRun 514
  22
  23
  24 ###########################
  25 #### GLOBAL DIRECTIVES ####
  26 ###########################
  27
  28 #
  29 # Use traditional timestamp format.
  30 # To enable high precision timestamps, comment out the following line.
  31 #
  32 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  33
  34 #
  35 # Set the default permissions for all log files.
  36 #
  37 $FileOwner root
  38 $FileGroup adm
  39 $FileCreateMode 0640
  40 $DirCreateMode 0755
  41 $Umask 0022
  42
  43 #
  44 # Where to place spool and state files
  45 #
  46 $WorkDirectory /var/spool/rsyslog
  47
  48 #
  49 # Include all config files in /etc/rsyslog.d/
  50 #
  51 $IncludeConfig /etc/rsyslog.d/*.conf
  52
  53
  54 ###############
  55 #### RULES ####
  56 ###############
  57
  58 #
  59 # First some standard log files.  Log by facility.
  60 #
  61 auth,authpriv.*                 /var/log/auth.log
  62 *.*;auth,authpriv.none          -/var/log/syslog
  63 #cron.*                         /var/log/cron.log
  64 daemon.*                        -/var/log/daemon.log
  65 kern.*                          -/var/log/kern.log
  66 lpr.*                           -/var/log/lpr.log
  67 mail.*                          -/var/log/mail.log
  68 user.*                          -/var/log/user.log
  69
  70 #
  71 # Logging for the mail system.  Split it up so that
  72 # it is easy to write scripts to parse these files.
  73 #
  74 mail.info                       -/var/log/mail.info
  75 mail.warn                       -/var/log/mail.warn
  76 mail.err                        /var/log/mail.err
  77
  78 #
  79 # Logging for INN news system.
  80 #
  81 news.crit                       /var/log/news/news.crit
  82 news.err                        /var/log/news/news.err
  83 news.notice                     -/var/log/news/news.notice
  84
  85 #
  86 # Some "catch-all" log files.
  87 #
  88 *.=debug;\
  89         auth,authpriv.none;\
  90         news.none;mail.none     -/var/log/debug
  91 *.=info;*.=notice;*.=warn;\
  92         auth,authpriv.none;\
  93         cron,daemon.none;\
  94         mail,news.none          -/var/log/messages
  95
  96 #
  97 # Emergencies are sent to everybody logged in.
  98 #
  99 *.emerg                         :omusrmsg:*
 100
 101 #
 102 # I like to have messages displayed on the console, but only on a virtual
 103 # console I usually leave idle.
 104 #
 105 #daemon,mail.*;\
 106 #       news.=crit;news.=err;news.=notice;\
 107 #       *.=debug;*.=info;\
 108 #       *.=notice;*.=warn       /dev/tty8
 109
 110 # The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
 111 # you must invoke `xconsole' with the `-file' option:
 112 #
 113 #    $ xconsole -file /dev/xconsole [...]
 114 #
 115 # NOTE: adjust the list below, or you'll go crazy if you have a reasonably
 116 #      busy site..
 117 #
 118 daemon.*;mail.*;\
 119         news.err;\
 120         *.=debug;*.=info;\
 121         *.=notice;*.=warn       |/dev/xconsole