First the why of the question. We are using a monitoring tool (Gensys)
to monitor several logfiles on a variety of systems, the hpux syslog
file being one of them. As we used the default sysconf all messages,
including the info
where routed through and noticed as a 'problem'by the monitoring tool.
So what we want is that only the warning and higger messages are
written in the syslog. That is not to difficult. But we also want the
info messages in another logfile. so we tried:

mail.debug              /var/adm/syslog/mail.log
*.info;mail.none        /var/adm/syslog/infolog.log
*.warning;mail.none     /var/adm/syslog/syslog.log
*.alert                 /dev/console
*.alert                 root
*.emerg                 *

I know this would mean that all messages form info and up would be
written in the infolog file and all messages warning and up will also
be written in the
syslog file. But what happens is that everything is only written in
the infolog file. The syslog file stays empty. So is there a
possibility to split up the info messages and ther higher then info
messages into 2 different files?

David Reynolds

On 2005-04-27, David Reynolds <d.reynolds@hccnet.nl> wrote:

> So what we want is that only the warning and higger messages are
> written in the syslog. That is not to difficult. But we also want the
> info messages in another logfile. so we tried:
>
> mail.debug              /var/adm/syslog/mail.log
> *.info;mail.none        /var/adm/syslog/infolog.log
> *.warning;mail.none     /var/adm/syslog/syslog.log
> *.alert                 /dev/console
> *.alert                 root
> *.emerg                 *

> ...  But what happens is that everything is only written in
> the infolog file. The syslog file stays empty. So is there a
> possibility to split up the info messages and ther higher then info
> messages into 2 different files?

Tried "warn" instead of "warning" ?
Tried "=info" instead of "info" ?

-- 
Elvis Notargiacomo  master AT barefaced DOT cheek
http://www.notatla.org.uk/goen/
    Elections must be close.  Simon Hughes MP (LibDem) (well, an assistant)
    has replied to my letter from 9 months ago.