[NTLUG:Discuss] breaking up logfiles

[MadHat]

Jay Urish wrote:
> 
> Hey Gang,
> 
> I want to break up my logfiles. I have looked at syslog.conf and
> experimented a little but I can't make heads or tails of it.
> 
> I would like for all the nameserver messages to go to a named.x file and
> all the sshd stuff to go to a ssd.x file
> 
> Any ideas?
> 
> TIA

for SSHd, you can't by default...  now what you can do is this...  
in the sshd_config you need to add the line:
SyslogFacility LOCAL7
then in your /etc/syslog.conf you add the line:
local7.*		/var/log/sshd
restart both and it should work.  You can actually use local0 or local1
or local2... etc...

for named, I think we would have to hack the source to get it to log
somewhere else, but I might have missed something.

-- 
%_=split';','f; Perl ;h;st a;o;ker;@;not;.;hac;u;her;d;ju';
print map $_{$_}, split //,
'madhat at unspecific.com'