- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: FTP logging file is /var/adm/syslog/ftp.log
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 01:31 AM
тАО10-02-2006 01:31 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
I've made the changed according to your advise, but still the FTP messages are sent to the syslog.log file ...
Not sure I have to restart syslog-ng some way ?
----------
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};
source s_sys { pipe("/dev/log" pad_size(2048)); unix-dgram("/dev/log.un"); internal(); };
destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/adm/syslog/syslog.log"); };
destination d_mail { file("/var/adm/syslog/mail.log"); };
destination d_mlrt { usertty("root"); };
destination d_mlal { usertty("*"); };
destination ftpd { file("/var/adm/syslog/ftp.log"); };
destination tnm { udp("127.0.0.1" port(32145)); };
filter f_filter1 { facility(mail) and level(debug); };
filter f_filter3 { level(alert); };
filter f_filter4 { level(emerg); };
filter f_ftpd { facility(local5); };
log { source(s_sys); filter(f_filter1); destination(d_mail); };
log { source(s_sys); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_cons);
destination(d_mlrt); };
log { source(s_sys); filter(f_filter4); destination(d_mlal); };
log { source(s_sys); destination(tnm); };
log { source(src); filter(f_ftpd); destination(ftpd); };
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 01:40 AM
тАО10-02-2006 01:40 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
ivan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 01:44 AM
тАО10-02-2006 01:44 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
Many Thanks !!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 01:48 AM
тАО10-02-2006 01:48 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
/sbin/init.d/syslog-ng stop
/sbin/init.d/syslog-ng start
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 02:06 AM
тАО10-02-2006 02:06 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
so I did the following, but it returned an error concerning the "src" :
root_nfm036# pwd
/sbin/init.d
root_nfm036# ./syslogng stop
root_nfm036# ./syslogng start
Changing permissions on special file /dev/log
unresolved reference: src
Error initializing configuration, exiting.
EXIT CODE: 1
?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 08:44 AM
тАО10-02-2006 08:44 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
cp /usr/newconfig/etc/syslog.conf /etc/syslog.conf
Then edit that file and make these two changes:
Insert the line:
local5.info /var/adm/syslog/ftp.log
and change the line with syslog.log on it to read:
*.info;mail.none;local5.none /var/adm/syslog/syslog.log
Note: The separation between the facility.level entry and the full pathname must be a TAB, not spaces.
Once the /etc/syslog.conf has been edited, tell syslogd to reread the config file:
kill -HUP $(cat /etc/syslog.pid)
Verify that syslog reqad the file with:
tail /var/adm/syslog/syslog.log
You'll see the syslogd restart message. Now try your ftp commands.
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 08:51 AM
тАО10-02-2006 08:51 AM
Re: FTP logging file is /var/adm/syslog/ftp.log
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 09:48 AM
тАО10-02-2006 09:48 AM
Solution#new log file
destination ftpd { file("/var/adm/syslog/ftp.log"); };
#filter1
filter f_ftpd { facility(local5); };
#filter2
filter f_ftpd { program("ftpd"); };
#log
log { source(s_sys); filter(f_ftpd); destination(ftpd); };
You can use filter1 or filter2. After changing config file reload syslog-ng service.
regards,
ivan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО10-02-2006 07:18 PM
тАО10-02-2006 07:18 PM
Re: FTP logging file is /var/adm/syslog/ftp.log
Many thanks for the clarification ... I installed HP-UX myself (11.i), and I'm sure nobody touched the syslog.conf (I have the exact same syslog-ng file on all my machines in my lab.)
Ivan,
You got a 10 points ;-)
I have added the following lines, and restarted the daemon without error this time.
destination ftpd { file("/var/adm/syslog/ftp.log"); };
---
filter f_ftpd { facility(local5); };
filter f_ftpd { program("ftpd"); };
---
log { source(s_sys); filter(f_ftpd); destination(ftpd); };
I have now 2 questions to close the thread :
- I see the event coming in the ftp/log, but they are still duplicated in the syslog.log - Why is it so, and may I just send the events to ftp.log ?
- What Am I exactly doing with the estination, filter and log ??
I do not really understand the lines I've added.
Many Thanks !
- « Previous
-
- 1
- 2
- Next »