allow syslog settings to be adjusted

[jamaroney]

I was trying to set up N4F as a syslog server via https://www.jmedved.com/2014/03/nas4fre ... og-server/.

But with an embedded install, there's a lot of limitations. The server option is disabled by default, and I can't edit syslog.conf, /etc/rc.d/clog, nor /etc/rc.d/syslogd.

Is there something I'm missing (other than going with a full install)? If not, options should be in place to adjust setting within these files.

[Snunn1]

Just as the link you've provided explains, I've used a PostInit command using sed on Embedded to forward my syslogs to my Logstash jail. You could do the same to specify an alternative syslog.conf which is then configured with the logs you're interested in.

[jamaroney]

You could do the same to specify an alternative syslog.conf....

Thanks - how do I specify an alternative conf file?

.....which is then configured with the logs you're interested in.

How do I configure my router's log messages to go into their own separate file? Right now, they all go into N4F's system.log.

[Snunn1]

You could do the same to specify an alternative syslog.conf....

Thanks - how do I specify an alternative conf file?

-f config file - see HERE for the man pages.

.....which is then configured with the logs you're interested in.

How do I configure my router's log messages to go into their own separate file? Right now, they all go into N4F's system.log.

This can be configured in syslog.conf - see the man pages on the link above.

Hope this Helps

[jamaroney]

After reading that page, what I still don't understand is how a specific network device's logs can be directed to a separate file.

With my embedded install, via a N4F WEBGUI PostInit command, I use the following to have all my router's messages sent to N4F with an alternative syslog.conf

sed -i -e 's^syslogd_flags=".*"^syslogd_flags="-8 -a 192.168.1.1/24:*"^g' /etc/rc.d/syslogd ; /etc/rc.d/syslogd restart -f /mnt/HDD/syslog.conf

What this yields is both router and N4F messages going into the system.log file.

But I want all router messages to go only to its own file (e.g., router.log). All the instructions I see on the page you noted (as well as other places on the web) show how to channel TYPES of messages to different logs, but not how to channel different devices to separate logs.

So, what do I need to enter into the new syslog.conf to have my router (192.168.1.1) messages go to router.log (and nowhere else)?

[Snunn1]

I've got some notes on setting this up so I'll send you a PM about this as soon as I've found them. Once we've solved it, I'll add the solution to this thread.

[jamaroney]

Thanks so much!

[jamaroney]

I solved the problem via the router. It has dd-wrt firmware, so I enabled a CIFS share for it on one of my N4F drives, and commanded the router's syslogd to output its log file there.

[Snunn1]

Glad you found a workaround but it's a pity syslogd on N4F couldn't do it. I've tested syslogd recently using iceflatline's article HERE but syslogd bombs out with...

Code: Select all

nas4free: ~ # /usr/sbin/syslogd -a 192.168.1.1/24 -f /mnt/Data/syslog.conf
syslogd: child pid 47679 exited on signal 11

...when I try it using it with the following config (Netgear is in /etc/hosts):

Code: Select all

nas4free: ~ # cat /mnt/Data/syslog.conf
local3.* %/var/log/sshd.log
local4.* %/var/log/rsyncd.log
local5.* %/var/log/smartd.log
ftp.* %/var/log/ftp.log
daemon.* %/var/log/daemon.log
*.notice;kern.debug;lpr.info;mail.crit;mail.info;news.err;local0.none;local7.none %/var/log/system.log
security.* %/var/log/system.log
auth.info;authpriv.info %/var/log/system.log
*.emerg *
+Netgear
*.* %/var/log/router.log

If I change the last line to *.* /var/log/router.log, syslogd executes but nothing relating to Netgear gets written to router.log or to system.log - the messages seem to vanish. Any ideas anyone?

Thanks
Snunn1

[kfnas]

where in 9.3.0.2 - Nayla (revision 1283) is (embedded) the syslog (remote) config yet please? I have upgraded it from previous 9.2. version and at least the forwarding is in config(xml) but can't see it under system general anymore...
I would like to modify it and to set the local facility so I can track it on the remote syslog

[Snunn1]

If you look in /etc/rc.d/syslogd, you'll see that it echos to /etc/syslog.conf. If you add anything to this inbetween the quotation marks after the echo, it will be copied into syslog.conf.

Hope this Helps
Snunn1

[Snunn1]

After following the steps HERE to allow N4F to create a new logfile for my router, the router syslog messages get written to system.log as well as router.log. Does anyone know how to only permit messages to be written to router.log?

Thanks
Snunn1

[piwwo]

I am struggling with a similar problem: I need syslog messages from a chroot environment but can't get it to work. According to this http://www.the-art-of-web.com/system/sf ... ng-chroot/ I have to set dev/log sockets in the chroot environment and edit syslog.conf. But that post is for rsyslog and linux, not BSD. Has anyone solved this?
viewforum.php?f=57