Linux 15.070 Themen, 107.540 Beiträge

metalog tageweise loggen?

T-Rex am 28.09.2003, 00:00 / 7 Antworten / Flachansicht

Hallo,

ich habe unter SuSE 7.2 metalog installiert und möchte tageweise loggen (also alles, was an einem Tag passiert, in ein Logfile schreiben lassen).
In der Datei "/etc/metalog.conf" habe ich maxsize auskommentiert.

Leider sind jetzt die erstellten Logfiles ziemlich genau 1MB groß und werden geschrieben.

Ich möchte aber erreichen, daß alles, was zwischen 00:00:00 und 23:59:59 passiert, in einer Datei landet, egal, wie groß die Datei wird.

Was muß ich in "metalog.conf" ändern/eintragen, damit das passiert?

Vielen Dank im Voraus.

		Hi T-Rex, 7.3 ist nicht mehr die aktuellste Distri von SuSE 8.0, 8.1, 8.2 ...
		NANÜ
		28.09.2003, 00:00
	
		metalog ist ein Ersatz für syslogd und klogd. Ich hatte es installiert, ...
		T-Rex
		29.09.2003, 00:00
	
		NANÜ

		T-Rex
		„metalog tageweise loggen?“

		29.09.2003, 00:00
		Optionen
	
da hätte ich lange suchen können..........;-), habe auf einer Konsole eben mal "man syslog" (SuSE 8.2) eingegeben, steht so gut wie alles drin, was dein Problem betrifft, ansonsten schau mal Hier = Klick oder hier das Script:

# metalog.conf.

maxsize = 100000

maxtime = 86400 = 24 Stunden in sec

maxfiles = 5 auf deinen Wert heraufsetzen

den Rest habe ich mir nicht durchgelesen............

##########################################################################

Kernel messages :

facility = "kern"

logdir = "/var/log/kernel"

# 0 is critical, 7 is debug.

Everything important :

facility = "*"

minimum = 6

logdir = "/var/log/everything"

Everything very important :

facility = "*"

minimum = 1

logdir = "/var/log/critical"

##########################################################################

# now let's get all the facilities.

auth & authpriv:

facility = "auth"

facility = "authpriv"

logdir = "/var/log/auth"

cron :

facility = "cron"

logdir = "/var/log/cron"

daemon :

facility = "daemon"

logdir = "/var/log/daemon"

ftp:

facility = "ftp"

logdir = "/var/log/ftp"

# Already done above.

#Kernel messages :

# facility = "kern"

# logdir = "/var/log/kernel"

lpr:

facility = "lpr"

logdir = "/var/log/lpr"

mail:

facility = "mail"

logdir = "/var/log/mail"

news:

facility = "news"

logdir = "/var/log/news"

security:

facility = "security"

logdir = "/var/log/security"

syslog:

facility = "syslog"

logdir = "/var/log/syslog"

user:

facility = "user"

logdir = "/var/log/user"

uucp:

facility = "uucp"

logdir = "/var/log/uucp"

local0:

facility = "local0"

logdir = "/var/log/local0"

local1:

facility = "local1"

logdir = "/var/log/local1"

local2:

facility = "local2"

logdir = "/var/log/local2"

local3:

facility = "local3"

logdir = "/var/log/local3"

local4:

facility = "local4"

logdir = "/var/log/local4"

local5:

facility = "local5"

logdir = "/var/log/local5"

local6:

facility = "local6"

logdir = "/var/log/local6"

local7:

facility = "local7"

logdir = "/var/log/local7"

##########################################################################

# All the servers.

#apache

#atd

#authdaemond

#autofs

#courier-imapd

#courier-imapd-ssl

#courier-pop3d

#courier-pop3d-ssl

#crypto-loop

#cupsd

cups:

facility = "*"

program = "cupsd"

logdir = "/var/log/cupsd"

#dhcp

dhcp:

facility = "*"

program = "dhcpd"

logdir = "/var/log/dhcpd"

#distccd

distcc :

facility = "*"

program = "distccd"

logdir = "/var/log/distccd"

#exim

exim :

facility = "*"

program = "exim"

logdir = "/var/log/exim"

#fam

#fetchmail

#gpm

#hotplug

#inetd

#iptables

#lisa

#mysql

#named

named (bind) :

facility = "*"

program = "named"

logdir = "/var/log/named"

#nfs

#nscd

#ntpd

ntpd :

facility = "*"

program = "ntpd"

logdir = "/var/log/ntpd"

#pmud

#pbbuttonsd

#portmap

#pppd

pppd :

facility = "*"

program = "pppd"

logdir = "/var/log/pppd"

#rsyncd

#samba

#spamd

#squid

#sshd

SSH Server :

facility = "*"

program = "sshd"

logdir = "/var/log/sshd"

#vcron

#windind

#xdm

#xfs

#xinetd

#ypbind

#yppasswdd

#ypserv

yp server:

facility = "*"

program = "ypserv"

logdir = "/var/log/ypserv"

yp bind:

facility = "*"

program = "ypbind"

logdir = "/var/log/ypbind"

yp passwd:

facility = "*"

program = "yppasswdd"

logdir = "/var/log/yppasswdd"

##########################################################################

# Miscellaneous stuff & examples.

Password failures :

regex = "(password|login|authentication)\s+(fail|invalid)"

regex = "(failed|invalid)\s+(password|login|authentication)"

regex = "ILLEGAL ROOT LOGIN"

logdir = "/var/log/pwdfail"

# command = "/usr/local/sbin/mail_pwd_failures.sh"

#Add authenticated IP addresses for SMTP relaying :

# program = "/usr/sbin/ipop3d"

# regex = "Login.+nmsgs="

# command = "/usr/local/sbin/add_pop_address.sh"

#

#Uncomment and adjust the following lines to

#your needs to enable console logging

#

# Hint: you can change the device to which

# should be logged in /usr/sbin/consolelog.sh

#

#console logging :

#

# facility = "*"

# command = "/usr/sbin/consolelog.sh"

Hoffe, es hilft dir weiter.........

cu

NANÜ

			 bei Antwort benachrichtigen
		
		Danke, das kenne ich habe ich an meine Bedürfnisse angepaßt, da nicht alle ...
		T-Rex
		30.09.2003, 00:00
	
		hast du dir mal die Konfigurationshilfe über den geposteten Link ...
		NANÜ
		30.09.2003, 00:00
	
		Nachtrag: Ausschnitt aus der Hilfe KLICK MICH Das müßte es sein..
		NANÜ
		30.09.2003, 00:00
	
		Hi NANÜ, danke, aber das hilft mir nicht wirklich. Wie bekomme ich die ...
		T-Rex
		30.09.2003, 00:00