Linux System Administration - X

logging

17.2.6. actions

The default action is to send a message to the username listed as action. When the action is prefixed with a / then rsyslog will send the message to the file (which can be a regular file, but also a printer or terminal). The @ sign prefix will send the message on to another syslog server. Here is a list of all possible actions.

root,user1 list of users, separated by comma's

* message to all logged on users

/ file (can be a printer, a console, a tty, ...)

-/ file, but don't sync after every write

| named pipe

@ other syslog hostname

In addition, you can prefix actions with a - to omit syncing the file after every logging.

17.2.7. configuration

Below a sample configuration of custom local4 messages in /etc/rsyslog.conf.

local4.crit /var/log/critandabove local4.=crit /var/log/onlycrit local4.* /var/log/alllocal4

17.2.8. restarting rsyslogd

Don't forget to restart the server after changing its configuration.

root@rhel65:/etc# service rsyslog restart

Shutting down system logger: [ OK ]

Starting system logger: [ OK ] root@rhel65:/etc#

192