options { chain_hostnames(no); }; #Fuentes source internoSyslog-NG { internal(); }; source externoUDP { udp(); }; source internoDEVLOG { # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); }; source internoKernel { # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); }; source internoNtp { file("/var/log/ntp.log"); }; source internoRadius { file("/usr/local/vaar/log/radius.log"); }; #Destinos destination archivosExternosUDP { file("/logs/$HOST/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; destination archivosInternosSyslog-NG { file("/logs/Syslog-NG/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; destination archivosInternosDEVLOG { file("/logs/DEVLOG/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; destination archivosInternosKernel { file("/logs/Kernel/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; destination archivosInternosNtp { file("/logs/Ntp/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; destination archivosInternosRadius { file("/logs/Radius/$YEAR/$MONTH/$FACILITY.$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) create_dirs(yes) dir_perm(0700) template("$DATE $HOST $PROGRAM: [$FACILITY.$PRIORITY] $MSG\n")); }; #Filtros filter f_ntp { facility(daemon) and match( ntpd); }; #Logs log { source(externoUDP); destination(archivosExternosUDP); }; log { source(internoSyslog-NG); destination(archivosInternosSyslog-NG); }; log { source(internoDEVLOG); destination(archivosInternosDEVLOG); }; log { source(internoKernel); destination(archivosInternosKernel); }; log { source(internoNtp); destination(archivosInternosNtp); }; log { source(internoDEVLOG); filter(f_ntp); destination(archivosInternosNtp); }; log { source(internoRadius); destination(archivosInternosRadius); };