I have odd problem with syslog local7, my syslog configure the syslog to be written to
it's working just fine for years but recent days one device syslog message written on console and I don't know why this one device syslog on console but other hundreds of devices syslog still written on the file. my question question is how I can stop that?
I'm not entirely sure about this, but it appears that syslog.log is just a log of syslog-ng occurences, which isn't that useful. Maybe configuring it to /var/log/everything.log or messages.log would be more useful. I'm not sure what log was the original intention and or whether "systemlog" or "syslog" is the name of a more useful log in other distros.
I want to get all of the syslog,which is under the catalogue of var/adm/syslog,in order to do something about correlation analysis.
But for days,I can not find anything about that,who can help me?
Thank you very much!
For some reason my log files are writing to the *.log.1 files instead of the *.log files, e.g. for my Postfix log files it is writing to /var/log/mail.log.1 and not /var/log/mail.log as expected. Same goes for mail.err.
It looks like it's also doing it for auth.log and syslog.