Re: SyslogFacility setting not working for cfservd

[Predrag Zecevic - Solaris System Administrator]

Hi,

I have in cfEngine (2.1.10 on SPARC Solaris 9):

   solaris.main.conf:      Syslog            = ( on )
   solaris.main.conf:      SyslogFacility    = ( LOG_LOCAL4 )

in /etc/syslog.conf (with TABs):

   # cfEngine logs
   local4.notice           ifdef(`LOGHOST', /var/log/cfenlog, @loghost)
   local4.debug            ifdef(`LOGHOST', /var/log/cfenlog, @loghost)
   local4.alert            ifdef(`LOGHOST', /var/log/cfenlog, @loghost)
   local4.info             ifdef(`LOGHOST', /var/log/cfenlog, @loghost)

touched file (/var/log/cfenlog) and restarted syslog service (maybe you 
are missing .alert or some other facility?)...
and everything is logged to defined syslog file *but* each event 3 times 
(???!!!):

   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Group of /etc/logadm.conf was 0, setting to 3
   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Group of /etc/logadm.conf was 0, setting to 3
   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Group of /etc/logadm.conf was 0, setting to 3
   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Object /etc/logadm.conf had permission 600, changed
   it to 644
   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Object /etc/logadm.conf had permission 600, changed
   it to 644
   Oct  8 03:25:54 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Object /etc/logadm.conf had permission 600, changed
   it to 644
   Oct  8 03:26:00 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Deleting file
   /etc/motd_1097115946_Thu_Oct__7_04_25_55_2004_.cfsaved
   Oct  8 03:26:00 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Deleting file
   /etc/motd_1097115946_Thu_Oct__7_04_25_55_2004_.cfsaved
   Oct  8 03:26:00 fatboy cfengine:fatboy[26148]: [ID 702911
   local4.notice] Deleting file
   /etc/motd_1097115946_Thu_Oct__7_04_25_55_2004_.cfsaved

I already had this posted as '[SysLog]: logs events 3 times...' but no 
feedback. Maybe this will help you/me...
Regards ;-)

David E. Nelson wrote:

> Hi All,
>
> I have/added the following in cfservd.conf:
>
> control:
>
>   any::
>
>     SyslogFacility = ( LOG_LOCAL3 )
>
> , configured /etc/syslog.conf with (being sure to use TABS):
>
> local3.inform        /var/adm/cfengine.log
>
> created the file:
>
> /var/adm/cfengine.log
>
> , restarted syslog, and then restarted cfservd.  However, cfservd is 
> still logging to /var/adm/messages.
>
> What am i missing?
>
> Thanks,
>      /\/elson

--
| Predrag Zecevic | e-Mail: Predrag.Zecevic@2e-Systems.COM |
| 2e Systems GmbH |              Tel: (+49)[0]6107 989 415 |
|Im Taubengrund 12|              Fax: (+49)[0]6107 989 494 |
|65451 Kelsterbach|                                        |
|     Germany     |         Cellular: (+49)[0]174 3109 288 |
+=================+
If you stand on your head, you will get footprints in your hair.