redirecting logging away from syslog using syslog.conf

[itfellow]

Hi all,

I am using my SCO Openserver 5.0.5Eb server as a log server for my Cisco 1721 router. I have set up the router events to go to a seperate log, a file called rtrlog in the /var/log/ dir, but the router events also go to the syslog, and I have not been able to figure out how to get them to go to the rtrlog file only.

Here is my syslog.conf:

*.debug /var/adm/syslog
local7.info /var/log/rtrlog
*.err;kern.debug;auth.notice;mail.crit;local7.none /var/adm/syslog
*.notice;kern.debug;auth.info;mail.crit;local7.none /var/adm/messages

Local7 is the facility for the router. I'm getting router events in both rtrlog and syslog. I want them only in rtrlog.

Anyone dealt with this before?

 

[PHV]

*.debug[tab]/var/adm/syslog
This line tells syslogd to write ALL events to /var/adm/syslog.


Hope This Help, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[PHV]

Oops, submitted too fast.
Why not trying something like this ?

*.debug;local7.none   /var/adm/syslog
local7.debug          /var/log/rtrlog

Hope This Help, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[itfellow]

PH, thanks a lot - it worked like a charm. I've been tinkering with that for a little while now and good documentation is hard to find.

 

[PHV]

man syslogd

Hope This Help, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884