On 26/04/12 10:00, Simon Reap wrote:
> On Wed, 2012-04-25 at 22:21 +0100, Leo wrote:
>> On 25/04/12 08:05, Simon Reap wrote:
>>> SOn 24/04/2012 20:21, Leo wrote:
>>>> (rsyslog.conf does contain $IncludeConfig /etc/rsyslog.d/*.conf)
>>>
>>> Have your tried this instead?
>>>
>>> #includedir /etc/rsyslog.d
>>>
>> Just given that a try but it doesn't seem to make any difference.
>>
>
> Sorry, Leo - I got mixed up - I've been working with rsyslog and
> logrotate for a couple of months, and posted the logrotate equivalent by
> mistake!
>
> I've tried your $IncludeConfig line in a RedHat 6.2 system, and it
> picked the code up fine.
>
> Did you restart rsyslog or reload it? We have problems with reload, as
> called by the standard rsyslog lorotate file (actually a "kill -HUP") -
> rsyslog doesn't seem to close all of the files properly, and lsof shows
> it writing to the old file, even though that file has been renamed and
> compressed by logrotate.
>
> If you try Chris's check and get an error reported in your main
> rsyslog.conf, correct that error and try introducing one in your
> included file.
>
>
Simon,
Thanks, so that may have been part of the problem. After a reboot the
Shorewall one seems to be working now. However the dhcpd one still isn't
being working, it is:
:msg, contains, "dhcpd:" /var/log/dhcpd.log
& ~
Chris,
I tried your suggestion and that indicates that it's definitely reading
the file, but it's still writing all the dhcpd logs to syslog, rather
than dhcpd.log
Leo
--
Please post to: Hampshire@???
Web Interface:
https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL:
http://www.hantslug.org.uk
--------------------------------------------------------------
