1 # /etc/rsyslog.conf Configuration file for rsyslog v3.
3 # For more information see
4 # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
11 $ModLoad imuxsock # provides support for local system logging
12 $ModLoad immark # provides --MARK-- message capability
13 $MarkMessagePeriod 900 # mark messages appear every 15 Minutes
15 ###########################
16 #### GLOBAL DIRECTIVES ####
17 ###########################
20 # Use traditional timestamp format.
21 # To enable high precision timestamps, comment out the following line.
23 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
26 # Set the default permissions for all log files.
34 # Include all config files in /etc/rsyslog.d/
36 $IncludeConfig /etc/rsyslog.d/*.conf
44 # Log each facility into its own log
45 auth,authpriv.* /var/log/rsyslog/auth.log
46 cron.* -/var/log/rsyslog/user.log
47 daemon.* -/var/log/rsyslog/daemon.log
48 kern.* -/var/log/rsyslog/kern.log
49 lpr.* -/var/log/rsyslog/lpr.log
50 mail.* -/var/log/rsyslog/mail.log
51 user.* -/var/log/rsyslog/user.log
52 local0,local1,local2,\
53 local3,local4,local5,\
54 local6,local7.* -/var/log/rsyslog/local.log
56 # Omitted facilities: syslog, news, uucp, ftp
58 # All logs end up in syslog as weel as the corresponding facility log above
59 # (except for auth, mail which only end up in the facility log for privacy
60 # reasons and debug which only ends up in the debug log below to prevent
65 mail.none -/var/log/rsyslog/syslog
67 # Debug entries end up in debug.log as well as the corresponding facility log
68 # above (except for auth and mail, which only end up in the facility logs for
72 news.none;mail.none -/var/log/rsyslog/debug.log
74 # Emergencies are sent to everybody logged in.