On Wed, Jan 31, 2018 at 03:06:13PM -0700, Todd C. Miller wrote: > On Wed, 31 Jan 2018 20:44:10 +0100, Landry Breuil wrote: > > > the default etc/syslog.conf has a commented out example for by-prog > > logging, but nothing for by-host logging. I fighted a bit with it; so > > why not providing an example in the EXAMPLES section of the manpage ? > > I recently did the same so an example would be nice. I do have one > question though. > > > Index: syslog.conf.5 > > =================================================================== > > RCS file: /cvs/src/usr.sbin/syslogd/syslog.conf.5,v > > retrieving revision 1.34 > > diff -u -r1.34 syslog.conf.5 > > --- syslog.conf.5 6 Jul 2016 19:29:13 -0000 1.34 > > +++ syslog.conf.5 31 Jan 2018 19:40:59 -0000 > > @@ -306,6 +306,10 @@ > > # Root and Eric get alert and higher messages. > > *.alert root,eric > > > > +# Log everything coming from host bastion to a separate file > > +++bastion /var/log/bastion > > ++* > > Shouldn't this be: > > # Log everything coming from host bastion to a separate file > ++bastion /var/log/bastion > *.* > +*
well maybe that's clearer, but the version without *.* works here.. i dont have a preference, so i'll defer to experts :) Landry
