• How do I stop a syslog server loggingt itself?

    From ian diddams@1:0/0 to All on Tue Jul 23 10:01:02 2013

    centos 5.5 server running standard syslog.

    The syslog.conf remains as it was with the addition of

    # centralised service
    *.* /var/log/central_log


    The idea behind that being any other server can log to /var/log/central_log whatever the alert level etc.

    however this also ends up logging the syslog server's own logging to the central_log, which is not required. ie the central_log is for other servers, not for this one.

    How can I stop this server logging its own stuff to this central log?


    cheers

    Ian

    --- MBSE BBS v1.0.0 (GNU/Linux-i386)
    * Origin: The Kofo System II BBS telnet://fido2.kofobbs.
  • From gmurnane@lotame.com@1:0/0 to All on Wed Jul 2 19:27:51 2014
    Try something akin to the following:

    #### RULES ####

    #Local logging
    $RuleSet local
    #These are just the rsyslog default destinations *.info;mail.none;authpriv.none;cron.none /var/log/messages authpriv.* /var/log/secure
    mail.* -/var/log/maillog cron.* /var/log/cron
    *.emerg *
    uucp,news.crit /var/log/spooler local7.* /var/log/boot.log

    #Remote logging
    $RuleSet remote
    *.* "/var/log/central_log"

    # Provides UDP syslog reception
    $ModLoad imudp
    $InputUDPServerBindRuleset remote
    $UDPServerRun 515

    $DefaultRuleset local

    --
    The information transmitted in this email is intended only for the
    person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or
    other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this email in error, please contact the sender and permanently
    delete the email from any computer.

    --- MBSE BBS v1.0.1 (GNU/Linux-i386)
    * Origin: The Kofo System II BBS telnet://fido2.kofobbs.