I have the same syslog configuration on my host as a jail, but the host does not appear to be logging properly.
The logs, /var/log/messages/log and /var/log/cron/log, appear empty other than the line indicating the logfile was turned over.
My changes are basically, move all logs to a directory, ie:
1. /var/log/messages -> /var/log/messages/log (I do this because I don't want /var/log cluttered with a zillion files)
2. rotate each log file nightly and keep 10 logs
On my workstation jail, this works flawlessly, but on the host, /var/log/messages/log only has the log rotated message and nothing else. In addition, it seems my router logs are getting printed to the host's console - I have my router syslog listening on the network and the messages being printed to the console should be written to separate files:
/var/log/ap/<ip address>/log
I have 2 access points in my house and I want to have separate logs so I can easily figure out where something originated.
host and workstation syslog.conf:
router syslog.conf
The logs, /var/log/messages/log and /var/log/cron/log, appear empty other than the line indicating the logfile was turned over.
My changes are basically, move all logs to a directory, ie:
1. /var/log/messages -> /var/log/messages/log (I do this because I don't want /var/log cluttered with a zillion files)
2. rotate each log file nightly and keep 10 logs
On my workstation jail, this works flawlessly, but on the host, /var/log/messages/log only has the log rotated message and nothing else. In addition, it seems my router logs are getting printed to the host's console - I have my router syslog listening on the network and the messages being printed to the console should be written to separate files:
/var/log/ap/<ip address>/log
I have 2 access points in my house and I want to have separate logs so I can easily figure out where something originated.
host and workstation syslog.conf:
Code:
*.err;kern.warning;auth.notice;mail.crit /dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages/log
security.* /var/log/security/log
auth.info;authpriv.info /var/log/auth/log
mail.info /var/log/mail/log
#lpr.info /var/log/lpd-errs
#ftp.info /var/log/xferlog
cron.* /var/log/cron/log
!-devd
*.=debug /var/log/debug/log
*.emerg *
# uncomment this to log all writes to /dev/console to /var/log/console.log
#console.info /var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
#*.* /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
#*.* @loghost
# uncomment these if you're running inn
# news.crit /var/log/news/news.crit
# news.err /var/log/news/news.err
# news.notice /var/log/news/news.notice
# Uncomment this if you wish to see messages produced by devd
# !devd
# *.>=info
#!ppp
#*.* /var/log/ppp.log
#include /etc/syslog.d
include /usr/local/etc/syslog.drouter syslog.conf
Code:
*.err;kern.warning;auth.notice;mail.crit /dev/console
# write AP logs to separate files
+192.168.1.3
*.* /var/log/ap/192.168.1.3
+192.168.1.4
*.* /var/log/ap/192.168.1.4
# the remaining logs apply locally
+@
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local7.none /var/log/messages/log
security.* /var/log/security/log
auth.info;authpriv.info /var/log/auth/log
mail.info /var/log/mail/log
#lpr.info /var/log/lpd-errs
#ftp.info /var/log/xferlog
cron.* /var/log/cron/log
!-devd
*.=debug /var/log/debug/log
*.emerg *
