我最近注意到我的系统日志是空的。
我试过重新启动它,但我得到这个错误:
$ /etc/init.d/syslog-ng reload Reload system logging: syslog-ngsyntax error in /etc/syslog-ng/syslog-ng.conf at line 99. syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng failed!
这是syslog-ng.conf的一部分
9. filter f_auth { facility(auth, authpriv) and not filter(f_debug); }; 94. filter f_cron { facility(cron) and not filter(f_debug); }; 95. filter f_daemon { facility(daemon) and not filter(f_debug); }; 96. filter f_kern { facility(kern) and not filter(f_debug); }; 97. filter f_lpr { facility(lpr) and not filter(f_debug); }; 98. filter f_local { facility(local0, local1, local3, local4, local5, 99. local6, local7) and not filter(f_debug); }; 100. filter f_mail { facility(mail) and not filter(f_debug); }; 101. filter f_news { facility(news) and not filter(f_debug); }; 102. filter f_syslog3 { not facility(auth, authpriv, mail) and not filter(f_debug); }; 103. filter f_user { facility(user) and not filter(f_debug); }; 104. filter f_uucp { facility(uucp) and not filter(f_debug); };
你有什么想法,有什么可能是错的? 操作系统是Debian Squeeze。
你必须把第98和第99行放在一行中:
过滤f_local {设施(本地0,本地1,本地3,本地4,本地5,本地6,本地7),而不是filter(f_debug); };
如果你需要两行,在第一行的结尾使用\
filter f_local {facility(local0,local1,local3,local4,local5,\
local6,local7)而不是filter(f_debug); };