Jeremy Henty stated: > LFS installs a fairly standard looking syslog.conf but doesn't explain > its contents. I'm wondering if there is any justification for > splitting the log messages to different files? There's so much to > wade through you'll be using some log analysis/monitoring program > anyway, so why not send everything to one file and process it in one > go?
Your Distro, Your Rules :) Personally, I split them out and then only 'logwatch' the logs I care about. For example, I skip mail.info stuff (amongst others). It's really a matter of personal preference. My opinion, I like having them split out so that when something is detected, I'm dealing w/ a much smaller log file (not to mention, not wading through events I don't care about). LFS uses a pretty 'typical' setup that seems to be a 'thats the way it's been done" kind of thing from commercial *NIXes -- Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 http://doug.hunley.homeip.net I just suck at the whole gray-area thing. -- http://linuxfromscratch.org/mailman/listinfo/blfs-support FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
