The file you were looking at was named c2821.log. This has a '2' in the name. c2851.log is the one you referenced in the config file. it has a '5' in the name.
That is what Allan and I were refering to. If the below was exactly how you created the files, then please restart syslogd, to ensure it is picked up. On 2017 May 05 (Fri) at 16:30:33 +0200 (+0200), Paolo Aglialoro wrote: :Sorry Peter, what do '2' or '5' stand for? :And what does creating a file with '5' mean? : :This was my procedure: : :# cat "" > c2851.log :# chown root:wheel c2851.log :# chmod 644 c2851.log : : :On Fri, May 5, 2017 at 3:46 PM, Peter Hessler <phess...@theapt.org> wrote: : :> On 2017 May 05 (Fri) at 15:38:36 +0200 (+0200), Paolo Aglialoro wrote: :> :As written, mtime was due by me recreating the file trying to make things :> :work, not by syslog. :> :As of today, in fact, mtime is still unchanged, while output to :> :/var/log/messages still flowing from router. :> : :> : :> :On Fri, May 5, 2017 at 2:27 PM, Allan Streib <astr...@indiana.edu> wrote: :> : :> :> :> :> > -rw-r--r-- 1 root wheel - 1 May 4 15:43 /var/log/c2821.log :> :> ^ :> ^ this is a :> '2' :> :> :> [...] :> :> :> :> > local1.debug /var/log/c2851.log :> ^ this is a :> '5' :> :> :> :> You need to create the file with 5, then HUP/restart syslogd :> :> -- :> Hardware, n.: :> The parts of a computer system that can be kicked. :> -- You will be surprised by a loud noise.
