Add usermod, passwd and pkg events to syslog(-ng)

Hello!

I work with FreeBSD 13.2-RELEASE amd64 and send logs to a log-collector server (Debian 10 Buster). There's syslog-ng that have the config.
Here's some additional lines to send logs to the remote server:

Bash:
161 #log { source(src); destination(loghost); };
162 destination lc_net { tcp("172.30.250.70" port(3100) log_fifo_size(1000)); };
163
164 # All messages send to a remote site
165 #
166 log { source(src); destination(lc_net); };

Other lines are from standard syslog-ng configuration.

When I execute these commands I can't watch their result or errors in the message journal.

Bash:
adduser
rmuser
passwd user

pw groupmod wheel -m user

pkg lock mongodb70

exit # after su command

service <service> start|stop|status

Yes, I able to see pkg install| delete loglines in the system journal, but that's not enough.


Could I switch on that events in syslog/syslog-ng?
 
If a command doesn't send any messages to syslog then no amount of fiddling with the syslog configuration is going to help.
 
Back
Top