Solved newsyslog conf is not working in jail, but works fine for host

[tOsYZYny]

I have the exact same configuration for a log file as the host, but in the jail, it isn't working. I am expecting logs to be written to /var/log/messages/log. While the logfile is turned over, syslog is not writing to it, so I'm not seeing any logs. Here is a snippet of syslog and newsyslog:

/etc/syslog.conf

.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err   /var/log/messages/log

/etc/newsyslog.conf

/var/log/messages/log                       644  5     1000 @T00 YC

I believe I have restarted syslog several times to take into account the configuration change, but no dice. I also have my dhcp logs split out and that is working just fine. Those logs are going to /var/log/dhcp/log and are being split each day.

 

[tOsYZYny]

The problem was I had this line in front of the line before /var/log/messages/log:

!local7.*;

I use local7 for dhcpd and I want that only to go to /var/log/dhcpd/log and nowhere else.

 

[tOsYZYny]

I think what I wanted was:

*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none   /var/log/messages/log

.none is what I want to exclude log from a particular facility.