1 # /etc/rsyslog.conf Configuration file for rsyslog v3.
3 # For more information see
4 # /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
11 $ModLoad imuxsock # provides support for local system logging
12 $ModLoad imklog # provides kernel logging support (previously done by rklogd)
13 #$ModLoad immark # provides --MARK-- message capability
16 ###########################
17 #### GLOBAL DIRECTIVES ####
18 ###########################
21 # Use traditional timestamp format.
22 # To enable high precision timestamps, comment out the following line.
24 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
27 # Set the default permissions for all log files.
35 # Include all config files in /etc/rsyslog.d/
37 $IncludeConfig /etc/rsyslog.d/*.conf
45 # Log each facility into its own log
46 auth,authpriv.* /var/log/auth.log
47 cron.* -/var/log/user.log
48 daemon.* -/var/log/daemon.log
49 kern.* -/var/log/kern.log
50 lpr.* -/var/log/lpr.log
51 mail.* -/var/log/mail.log
52 user.* -/var/log/user.log
53 local0,local1,local2,\
54 local3,local4,local5,\
55 local6,local7.* -/var/log/local.log
57 # Omitted facilities: syslog, news, uucp, ftp
59 # All logs end up in syslog as weel as the corresponding facility log above
60 # (except for auth, mail which only end up in the facility log for privacy
61 # reasons and debug which only ends up in the debug log below to prevent
66 mail.none -/var/log/syslog
68 # Debug entries end up in debug.log as well as the corresponding facility log
69 # above (except for auth and mail, which only end up in the facility logs for
73 news.none;mail.none -/var/log/debug.log
75 # Emergencies are sent to everybody logged in.