Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
syslog-ng nowadays has a crippled default config?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
msst
Apprentice
Apprentice


Joined: 07 Jun 2011
Posts: 213

PostPosted: Sat Jul 27, 2013 6:48 pm    Post subject: syslog-ng nowadays has a crippled default config? Reply with quote

I am not sure since when that is and whether to consider it an annoyance or a feature, but I just noticed that since beginning of July the logging facility of syslog-ng seemed to just not log certain events any more and basically all log files that were still used was log/messages.
Specifically I noticed that my log/mail.log and log/demon.log files did not get any more entries despite exim and other daemons running and working well - just without producing any logs.

As this happened on two gentoo machines, one run as a mini-server, it is probably linked to some syslog-ng update. I saw that the update had apparently installed a very minimalistic syslog-ng.conf, which basically only logs to messages file and just disregards all else.

I fixed this issue by copying the sample config from
http://www.gentoo.org/doc/de/security/security-handbook.xml?part=1&chap=3

over it, which is much more reasonable and seems to do what I expected.

As said, I am not sure if that is supposed to be so, but the currently shipping sample config in the syslog-ng package is close to useless for servers so people running a server should probably also look into replacing it as described and/or be careful not to allow any syslog-ng update to "update" the config file.
Back to top
View user's profile Send private message
anyNiXwilldo
Apprentice
Apprentice


Joined: 20 Feb 2004
Posts: 176
Location: US

PostPosted: Sat Jul 27, 2013 8:26 pm    Post subject: Re: syslog-ng nowadays has a crippled default config? Reply with quote

Check /usr/share/doc/syslog-ng-3.4.2 and copy your preferred conf file to /etc/syslog-ng/syslog-ng.conf

More info here
_________________
Of course you can have my root password. I'm on Hardened!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum