Differences

This shows you the differences between two versions of the page.

--- public:techstuff:syslog [2012/08/21 13:51] – Deleted by PageMove plugin nathan
+++ public:techstuff:syslog [2020/04/25 13:05] (current) – created - external edit 127.0.0.1
@@ Line 1: / Line 1: @@
+====== rsyslog ======
+===== Filtering Applications into their own Logfiles =====
+  * Create a file in /etc/rsyslog.d/ with the following syntax
+  if $programname == '<programname' then <logfile>
+  & ~
+  * For example for tftpd you may write:
+  if $programname == 'in.tftpd' then /var/log/tftpd.log
+  & ~
+  * The programname variable can be found it the output to syslog. (e.g. see in.tftpd in the line below)
+  Jan 17 23:32:54 zoidberg in.tftpd[12343]:
+===== Filtering CRON into its own Logfile =====
+  * Open ''/etc/rsyslogd.conf''
+  | *.*;auth,authpriv.none             -/var/log/syslog
+  | #cron.*                            /var/log/cron.log
+  * and change it to
+  | *.*;auth,authpriv.none,cron.none   -/var/log/syslog
+  | cron.*                             -/var/log/cron/cron.log

Really Useful Stuff