cat syslog-ng.conf1 # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v 1.5 2005/05/12 05:46:10 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux # contributed by Michael Sterrett options { chain_hostnames(off); sync(0); # The default action of syslog-ng 1.6.0 is to log a STATS line # to the file every 10 minutes. That's pretty ugly after a while. # Change it to every 12 hours so you get a nice daily update of # how many messages syslog-ng missed (0). stats(43200); }; source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); }; ############### # DESTINATION # ############### destination messages { file("/var/log/messages"); }; destination named { file("/var/log/dns/named.log"); }; destination ircd { file("/var/log/ircd/ircd.log"); }; destination saslauthd { file("/var/log/mail/saslauthd.log"); }; destination authdaemond { file("/var/log/mail/authdaemond.log"); }; destination postfix { file("/var/log/mail/postfix.log"); }; destination spam { file("/var/log/mail/spamd.log"); }; destination clamsmtpd { file("/var/log/mail/clamsmtpd.log"); }; destination cron { file("/var/log/cron/cron.log"); }; destination ssh { file("/var/log/ssh/sshd.log"); }; destination dhcp { file("/var/log/dhcp/dhcpd.log"); }; destination pop3d { file("/var/log/mail/pop3d.log"); }; destination pop3d-ssl { file("/var/log/mail/pop3d-ssl.log"); }; destination imapd { file("/var/log/mail/imapd.log"); }; destination ntpd { file("/var/log/ntpd.log"); }; destination arpwatch { file("/var/log/arpwatch.log"); }; destination ftp { file("/var/log/ftp/proftpd.log"); }; # By default messages are logged to tty12... destination console_all { file("/dev/tty12"); }; #destination console_all { file("/dev/console"); }; ########### # FILTERS # ########### filter messages { not (program("named") or program("ircd") or program("saslauthd") or program("authdaemond") or program("postfix") or program("spamd") or program("clamsmtpd") or program("cron") or program("sshd") or program("dhcpd") or program("pop3d") or program("pop3d-ssl") or program("imapd") or program("ntpd") or program("arpwatch") or program("proftpd")); }; filter named { program ("named"); }; filter ircd { program ("ircd"); }; filter saslauthd { program ("saslauthd"); }; filter authdaemond { program ("authdaemond"); }; filter postfix { program ("postfix"); }; filter spam { program ("spamd"); }; filter clamsmtpd { program ("clamsmtpd"); }; filter cron { program ("cron"); }; filter ssh { program ("sshd"); }; filter dhcp { program ("dhcpd"); }; filter pop3d { program ("pop3d"); }; filter pop3d-ssl { program ("pop3d-ssl"); }; filter imapd { program ("imapd"); }; filter ntpd { program ("ntpd"); }; filter arpwatch { program ("arpwatch"); }; filter ftp { program ("proftpd"); }; ####### # LOG # ####### log { source(src); filter(messages); destination(messages); }; log { source(src); destination(console_all); }; log { source(src); filter(named); destination(named); }; log { source(src); filter(ircd); destination(ircd); }; log { source(src); filter(saslauthd); destination(saslauthd); }; log { source(src); filter(authdaemond); destination(authdaemond); }; log { source(src); filter(postfix); destination(postfix); }; log { source(src); filter(spam); destination(spam); }; log { source(src); filter(clamsmtpd); destination(clamsmtpd); }; log { source(src); filter(cron); destination(cron); }; log { source(src); filter(ssh); destination(ssh); }; log { source(src); filter(dhcp); destination(dhcp); }; log { source(src); filter(pop3d); destination(pop3d); }; log { source(src); filter(pop3d-ssl); destination(pop3d-ssl); }; log { source(src); filter(imapd); destination(imapd); }; log { source(src); filter(ntpd); destination(ntpd); }; log { source(src); filter(arpwatch); destination(arpwatch); }; log { source(src); filter(ftp); destination(ftp); };