Re: [Hampshire] rsyslog query

Top Page

Reply to this message
Author: Chris Dennis
Date:  
To: hampshire
Subject: Re: [Hampshire] rsyslog query
On 24/04/12 20:21, Leo wrote:
> I've added the following to firewall.conf in /etc/rsyslog.d/ but it
> seems to be having no affect:
> :msg, contains, "Shorewall:" /var/log/firewall.log
> & ~
>
> Can anyone help with what I've done wrong (because it works fine on my
> other debian box and i can't see any differences)?
>
> (rsyslog.conf does contain $IncludeConfig /etc/rsyslog.d/*.conf)


You could try a deliberately broken .conf file in /etc/rsyslog.d/ to see
if rsyslog complains when you restart it. If rsyslog is reading the
files in that directory, it should put something like this in syslog:

   rsyslogd: the last error occured in /etc/rsyslog.d/broken.conf,
      line 1:"rubbish"


cheers

Chris
-- 
Chris Dennis                                  cgdennis@???
Fordingbridge, Hampshire, UK


--
Please post to: Hampshire@???
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------