Thanks James. You wrote:
> Two of your answers lie in tuning your syslog daemon to only log what you
> want. Usually located in /etc/syslog.conf, or /etc/rsyslog.d/*.conf.
> The third relies on google-fu.
What changes would you recommend in /etc/syslog.conf (quoted last below)?
# ls -ltr user.log syslog messages
-rw------- 1 root root 47853952 Sep 4 09:39 user.log
-rw------- 1 root root 47943929 Sep 4 10:28 syslog
-rw------- 1 root root 47949714 Sep 4 10:28 messages
These seem to be essentially redundant. Is it safe to eliminate some? and
which?
Although the greater question is why is are so many errors being posted?
-rw------- 1 root root 36384 Aug 12 03:53 user.log.4.gz
-rw------- 1 root root 39396 Aug 19 03:58 user.log.3.gz
-rw------- 1 root root 47818 Aug 25 14:40 user.log.2.gz
-rw------- 1 root root 2147483647 Aug 31 09:26 user.log.1
-rw------- 1 root root 47853952 Sep 4 09:39 user.log
/etc/syslog.conf contents:
$ cat syslog.conf
# Mandriva syslog configuration
# $Id: sysklogd.conf 93075 2007-09-26 13:02:56Z blino $
# sensible stuff
auth,authpriv.* /var/log/auth.log
# generic stuff
*.info;mail,news,authpriv.none -/var/log/messages
*.*;auth,authpriv.none -/var/log/syslog
user.* -/var/log/user.log
# Mail logging
mail.=debug;mail.=info;mail.=notice -/var/log/mail/info.log
mail.=warn -/var/log/mail/warnings.log
mail.err -/var/log/mail/errors.log
# Cron logging
cron.=debug;cron.=info;cron.=notice -/var/log/cron/info.log
cron.=warn -/var/log/cron/warnings.log
cron.err -/var/log/cron/errors.log
# Kernel logging
kern.=debug;kern.=info;kern.=notice -/var/log/kernel/info.log
kern.=warn -/var/log/kernel/warnings.log
kern.err /var/log/kernel/errors.log
# Daemons logging
daemon.=debug;daemon.=info;daemon.=notice -/var/log/daemons/info.log
daemon.=warn
-/var/log/daemons/warnings.log
daemon.err -/var/log/daemons/errors.log
# Drakxtools logging
local1.* -/var/log/explanations
# Boot messages logging
local7.* -/var/log/boot.log
# Emergency messages for logged users
*.emerg *
# All messages on last terminal
*.* /dev/tty12
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss