65 lines
1.6 KiB
Plaintext
Executable File
65 lines
1.6 KiB
Plaintext
Executable File
# /etc/rsyslog.conf Configuration file for rsyslog.
|
|
#
|
|
# For more information see
|
|
# /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
|
|
#
|
|
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
|
|
|
|
|
|
#################
|
|
#### MODULES ####
|
|
#################
|
|
|
|
module(load="imuxsock") # provides support for local system logging
|
|
#module(load="immark") # provides --MARK-- message capability
|
|
|
|
# provides UDP syslog reception
|
|
#module(load="imudp")
|
|
#input(type="imudp" port="514")
|
|
|
|
# provides TCP syslog reception
|
|
#module(load="imtcp")
|
|
#input(type="imtcp" port="514")
|
|
|
|
# provides kernel logging support and enable non-kernel klog messages
|
|
module(load="imklog" permitnonkernelfacility="on")
|
|
|
|
###########################
|
|
#### GLOBAL DIRECTIVES ####
|
|
###########################
|
|
|
|
#
|
|
# Use traditional timestamp format.
|
|
# To enable high precision timestamps, comment out the following line.
|
|
#
|
|
|
|
template(name="RFC3164fmt" type="string" string="<%PRI%>%timestamp:::date-rfc3164% %hostname% %syslogtag%%msg%\n")
|
|
template(name="RFC5424fmt" type="string" string="<%PRI%>%protocol-version% %timestamp:::date-rfc3339% %hostname% %app-name% %procid% %structured-data% %msgid%%msg%\n")
|
|
|
|
|
|
$ActionFileDefaultTemplate RFC5424fmt
|
|
|
|
# Filter duplicated messages
|
|
$RepeatedMsgReduction on
|
|
|
|
#
|
|
# Set the default permissions for all log files.
|
|
#
|
|
$FileOwner syslog
|
|
$FileGroup adm
|
|
$FileCreateMode 0640
|
|
$DirCreateMode 0755
|
|
$Umask 0022
|
|
$PrivDropToUser syslog
|
|
$PrivDropToGroup syslog
|
|
|
|
#
|
|
# Where to place spool and state files
|
|
#
|
|
$WorkDirectory /var/spool/rsyslog
|
|
|
|
#
|
|
# Include all config files in /etc/rsyslog.d/
|
|
#
|
|
$IncludeConfig /etc/rsyslog.d/*.conf
|