syslog-ng not logging
peter at boosten.org
Thu Dec 27 10:34:03 PST 2007
Jeffrey Goldberg wrote:
> This is the first I've heard of mtree. I just looked mtree(8), but I
> take it that mtree is run periodically somehow to "fix" things. Do
> you know where?
> I can always keep my logs in some place other than /var/log if this is
> an issue.
IIRC it's done at boot time. Have a look at /etc/rc.d/var
>>> Will log rotation preserve daemon ownership?
>> Never used the *traditional* log style with syslog-ng, I stored
>> everything per day/month/year/server.
> I'm doing that for hosts that this is the remote syslod server for.
> I'm using
> for everything coming from the udp source. I suppose I could just add
> "localhost" under HOSTS to do a similar destination for everything
> else, though there I would probably have FACILITY be the major
"localhost" will be created automatically by syslog-ng (although it'll
probably use the hosts fqdn).
>> I ended up running syslog-ng as root, which is probably a bad idea as
>> well, so I cannot give you any advice on this one.
> It sounds like using something other than /var/log for a destination
> makes the most sense.
No, it's enough to grant daemon write permissions in /var/log/HOSTS.
Since you're using the $DAY macro, you won't need log rotation anyway.
More information about the freebsd-questions