I still object to the inclusion of this patch. At least for syslog-ng3.
The developers of syslog-ng clearly state in their
http://www.balabit.com/dl/guides/syslog-ng-v3.0-guide-admin-en.pdf
that
/proc/kmsg should not be opened with pipe driver, but with file() instead
and also
log_prefix is depre
[ Second try as the first was not committed ]
If you want to use syslog-ng, likely you want to also log the kernel
messages with it. This patch adds that.
Signed-off-by: Brian J. Murrell
---
Index: files/syslog-ng.conf
===
--- fi
But then the FAQ contradicts this with it's "expanded
syslog-ng.conf" (http://www.campin.net/syslog-ng/expanded-syslog-ng.conf) where
it uses:
dunno what that site is but
http://www.balabit.com/network-security/syslog-ng/
is where syslog-ng comes from
source s_kernel
{ pipe("/proc/kmsg" log_
On Mon, 2009-12-14 at 11:16 +0100, edgar.sol...@web.de wrote:
>
> the syslog-ng manual also states
>
> page 38
[ details about klogd snipped ]
> and about the use of pipe on Page 39
> "Pipe is very similar to the file() driver, but there are a few
> differences, for example pipe() opens its ar
On Mon, 2009-12-14 at 10:41 +0200, Vasilis Tsiligiannis wrote:
> Hello Brian,
Hi Vasilis,
> > -log { source(src); destination(messages); };
> > +log { source(src); source(kernel); destination(syslog_server); };
>
> Correct me if I am wrong: shouldn't there be a "destination syslog_server
> {..
you are right vasilis .. I just tried it with syslog-ng3 ..
the syslog-ng manual also states
page 38
"On Linux, the klogd daemon can be used in addition to syslog-ng to read
kernel messages and forward them to syslog-ng.
klogd used to preprocess kernel messages to resolve symbols etc., but as
Hello Brian,
> -log { source(src); destination(messages); };
> +log { source(src); source(kernel); destination(syslog_server); };
Correct me if I am wrong: shouldn't there be a "destination syslog_server
{...};" also present in the config? Or just send them to messages destination
which already
If you want to use syslog-ng, likely you want to also log the kernel
messages with it. This patch adds that.
Signed-off-by: Brian J. Murrell
---
Index: files/syslog-ng.conf
===
--- files/syslog-ng.conf(revision 18617)
+++