]> TLD Linux GIT Repositories - packages/syslog-ng.git/blob - syslog-ng.conf
- added java and python modules, seems ok, release 1
[packages/syslog-ng.git] / syslog-ng.conf
1 @version: 4.2
2 @include "scl.conf"
3 #
4 # Syslog-ng configuration for TLD Linux
5 #
6 # See syslog-ng(8) and syslog-ng.conf(5) for more information.
7 #
8
9 options {
10         flush_lines(0);
11         owner(root);
12         group(logs);
13         perm(0640);
14         create_dirs(yes);
15         dir_owner(root);
16         dir_group(logs);
17         dir_perm(0750);
18         stats_freq(3600);
19         time_reopen(10);
20         time_reap(360);
21         mark_freq(600);
22         threaded(yes);
23 };
24
25 source s_sys {
26         system();
27         internal();
28 };
29
30 # uncomment the line below and change ip/port if you want to run syslog server
31 #source s_net   { udp(ip(192.168.1.100),port(514)); };
32
33 # uncomment the line bellow if you want to send logs to syslog server
34 #destination d_loghost          { udp("loghost" port(514)); };
35
36 destination d_kern              { file("/var/log/kernel"); };
37 destination d_messages          { file("/var/log/messages"); };
38 destination d_authlog           { file("/var/log/secure"); };
39 destination d_mail              { file("/var/log/maillog"); };
40 destination d_uucp              { file("/var/log/spooler"); };
41 destination d_debug             { file("/var/log/debug"); };
42 destination d_cron              { file("/var/log/cron"); };
43 destination d_syslog            { file("/var/log/syslog"); };
44 destination d_daemon            { file("/var/log/daemon"); };
45 destination d_lpr               { file("/var/log/lpr"); };
46 destination d_user              { file("/var/log/user"); };
47 destination d_ppp               { file("/var/log/ppp"); };
48 destination d_ftp               { file("/var/log/xferlog"); };
49 destination d_audit             { file("/var/log/audit"); };
50 destination d_freshclam         { file("/var/log/freshclam.log"); };
51 destination d_shorewall         { file("/var/log/shorewall"); };
52 destination d_console           { usertty("root"); };
53 destination d_xconsole          { pipe("/dev/xconsole"); };
54 destination d_newscrit          { file("/var/log/news/news.crit" owner(news) group(news)); };
55 destination d_newserr           { file("/var/log/news/news.err" owner(news) group(news)); };
56 destination d_newsnotice        { file("/var/log/news/news.notice" owner(news) group(news)); };
57 destination d_dhcp              { file("/var/log/dhcp"); };
58
59 # uncomment the line below if you want to run syslog server
60 #destination d_from_net { file("/var/log/$HOST.log" owner(root) group(root) perm(0644) dir_perm(0700) create_dirs(yes)); };
61
62 # Filters for standard syslog(3) facilities
63 #filter f_audit         { facility(audit); };
64 filter f_authpriv       { facility(authpriv, auth); };
65 filter f_cron           { facility(cron); };
66 filter f_daemon         { facility(daemon); };
67 filter f_ftp            { facility(ftp); };
68 filter f_kern           { facility(kern); };
69 filter f_lpr            { facility(lpr); };
70 filter f_mail           { facility(mail); };
71 filter f_news           { facility(news); };
72 filter f_syslog         { facility(syslog); };
73 filter f_user           { facility(user); };
74 filter f_uucp           { facility(uucp); };
75 filter f_local0         { facility(local0); };
76 filter f_local1         { facility(local1); };
77 filter f_local2         { facility(local2); };
78 filter f_local3         { facility(local3); };
79 filter f_local4         { facility(local4); };
80 filter f_local5         { facility(local5); };
81 filter f_local6         { facility(local6); };
82 filter f_local7         { facility(local7); };
83
84 # Filters for standard syslog(3) priorities
85 filter p_debug          { level(debug); };
86 filter p_info           { level(info); };
87 filter p_notice         { level(notice); };
88 filter p_warn           { level(warn); };
89 filter p_err            { level(err); };
90 filter p_alert          { level(alert); };
91 filter p_crit           { level(crit); };
92 filter p_emergency      { level(emerg); };
93
94 # Additional filters for specific programs/use
95 filter f_freshclam      { program(freshclam); };
96 filter f_ppp            { program(pppd) or program(chat); };
97 filter f_shorewall      { facility(kern) and match("Shorewall:" value("MESSAGE")); };
98 filter f_dhcp           { program("dhcpd") or program("dnsmasq-dhcp"); };
99
100 # uncomment the line below if you want to run syslog server
101 #log { source(s_net); destination(d_from_net); flags(final); };
102
103 # uncomment the line bellow if you want to send logs to syslog server
104 #log { source(s_sys); destination(d_loghost); };
105
106 # log shorewall to separate log file by default
107 log { source(s_sys); filter(f_shorewall);                       destination(d_shorewall); flags(final); };
108
109 # log dhcp daemons to separate log file by default
110 log { source(s_sys); filter(f_dhcp);                            destination(d_dhcp); flags(final); };
111
112 log { source(s_sys); filter(f_authpriv);                        destination(d_authlog); };
113 log { source(s_sys); filter(f_cron);                            destination(d_cron); };
114 log { source(s_sys); filter(f_daemon);                          destination(d_daemon); };
115 log { source(s_sys); filter(f_ftp);                             destination(d_ftp); };
116 log { source(s_sys); filter(f_kern);                            destination(d_kern); };
117 log { source(s_sys); filter(f_lpr);                             destination(d_lpr); };
118 log { source(s_sys); filter(f_mail);                            destination(d_mail); };
119 log { source(s_sys); filter(f_news); filter(p_crit);            destination(d_uucp); };
120 log { source(s_sys); filter(f_news); filter(p_crit);            destination(d_newscrit); };
121 log { source(s_sys); filter(f_news); filter(p_err);             destination(d_newserr); };
122 log { source(s_sys); filter(f_news); filter(p_warn);            destination(d_newsnotice); };
123 log { source(s_sys); filter(f_news); filter(p_notice);          destination(d_newsnotice); };
124 log { source(s_sys); filter(f_news); filter(p_info);            destination(d_newsnotice); };
125 log { source(s_sys); filter(f_news); filter(p_debug);           destination(d_newsnotice); };
126 log { source(s_sys); filter(f_syslog);                          destination(d_syslog); };
127 log { source(s_sys); filter(f_user);                            destination(d_user); };
128 log { source(s_sys); filter(f_uucp);                            destination(d_uucp); };
129 log { source(s_sys); filter(p_debug);                           destination(d_debug); };
130 log { source(s_sys); filter(f_daemon); filter(f_ppp);           destination(d_ppp); };
131 log { source(s_sys); filter(f_local6); filter(f_freshclam);     destination(d_freshclam); };
132 log { source(s_sys); filter(p_emergency);                       destination(d_console); };
133
134 #  This is a catchall statement, and should catch all messages which were not
135 #  accepted any of the previous statements.
136 log { source(s_sys); destination(d_messages); flags(fallback); };