FastHandle - IT Operations Examples

FastHandle is fast operation tools for infrastructure configurations and tests.

User Tools

Site Tools


middleware:rsyslog:default_conf.html



Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
middleware:rsyslog:default_conf.html [2018/01/27 23:30]
kurihara created
middleware:rsyslog:default_conf.html [2018/01/28 01:52] (current)
kurihara
Line 1: Line 1:
 [[middleware:rsyslog:index.html|]] [[middleware:rsyslog:index.html|]]
-====== /etc/rsyslog.conf ======+====== /etc/rsyslog.conf Default Configuration======
  
 \\ \\
Line 11: Line 11:
  
 <sxh bash toolbar:false gutter:false> <sxh bash toolbar:false gutter:false>
 +#### MODULES ####
 $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
 $ModLoad imjournal # provides access to the systemd journal $ModLoad imjournal # provides access to the systemd journal
 +
 +#### GLOBAL DIRECTIVES ####
 $WorkDirectory /var/lib/rsyslog $WorkDirectory /var/lib/rsyslog
 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
Line 18: Line 21:
 $OmitLocalLogging on $OmitLocalLogging on
 $IMJournalStateFile imjournal.state $IMJournalStateFile imjournal.state
 +
 +#### RULES ####
 *.info;mail.none;authpriv.none;cron.none                /var/log/messages *.info;mail.none;authpriv.none;cron.none                /var/log/messages
 authpriv.*                                              /var/log/secure authpriv.*                                              /var/log/secure
Line 25: Line 30:
 uucp,news.crit                                          /var/log/spooler uucp,news.crit                                          /var/log/spooler
 local7.*                                                /var/log/boot.log local7.*                                                /var/log/boot.log
 +</sxh>
 +
 +==== /etc/rsyslog.d/listen.conf ====
 +<sxh bash toolbar:false gutter:false>
 +$SystemLogSocketName /run/systemd/journal/syslog
 </sxh> </sxh>
  
Line 33: Line 43:
 ==== /etc/rsyslog.conf ==== ==== /etc/rsyslog.conf ====
 <sxh bash toolbar:false gutter:false> <sxh bash toolbar:false gutter:false>
 +#### MODULES ####
 module(load="imuxsock") # provides support for local system logging module(load="imuxsock") # provides support for local system logging
 module(load="imklog"  # provides kernel logging support module(load="imklog"  # provides kernel logging support
 $KLogPermitNonKernelFacility on $KLogPermitNonKernelFacility on
 +
 +#### GLOBAL DIRECTIVES ####
 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
 $RepeatedMsgReduction on $RepeatedMsgReduction on
Line 48: Line 61:
 $IncludeConfig /etc/rsyslog.d/*.conf $IncludeConfig /etc/rsyslog.d/*.conf
 </sxh> </sxh>
 +
 +
 +
 +==== /etc/rsyslog.d/50-default.conf ====
 +<sxh bash toolbar:false gutter:false>
 +#  Default rules for rsyslog.
 +auth,authpriv.*                 /var/log/auth.log
 +*.*;auth,authpriv.none          -/var/log/syslog
 +kern.*                          -/var/log/kern.log
 +mail.*                          -/var/log/mail.log
 +mail.err                        /var/log/mail.err
 +news.crit                       /var/log/news/news.crit
 +news.err                        /var/log/news/news.err
 +news.notice                     -/var/log/news/news.notice
 +
 +*.emerg                                :omusrmsg:*
 +
 +daemon.*;mail.*;\
 +        news.err;\
 +        *.=debug;*.=info;\
 +        *.=notice;*.=warn       |/dev/xconsole
 +
 +</sxh>
 +
 +==== /etc/rsyslog.d/20-ufw.conf====
 +<sxh bash toolbar:false gutter:false>
 +:msg,contains,"[UFW " /var/log/ufw.log
 +</sxh>
 +
 +\\
 +<WRAP box 90%>
 +<catlist -noAddPageButton -smallHead -sortAscending>
 +</WRAP>
  
  


middleware/rsyslog/default_conf.html.1517063404.txt.gz · Last modified: 2018/01/27 23:30 by kurihara