@version: 3.0
#
# Syslog-ng configuration file
#

# Global options:

options {	flush_lines(0);
		time_reopen(10);
		log_fifo_size(1000);
		long_hostnames(off); 
		use_dns(no);
		use_fqdn(no);
		create_dirs(no);
		keep_hostname(yes);
		owner("root");
		group("adm");
		perm(0640);
	};



# Sources :

source src {	unix-stream("/dev/log");
		internal();
		file("/proc/kmsg");
	};

# If you wish to get logs from remote machine you should uncomment
# this and comment the above source line.
#
#source net {	tcp(ip(127.0.0.1) port(1000) authentication(required) encrypt(allow));};



# Destinations:

# standart logfiles
destination auth	{ file("/var/log/auth.log"); };
destination cron	{ file("/var/log/cron.log"); };
destination daemon	{ file("/var/log/daemon.log"); };
destination kern	{ file("/var/log/kern.log"); };
destination lpr		{ file("/var/log/lpr.log"); };
destination user	{ file("/var/log/user.log"); };
destination uucp	{ file("/var/log/uucp.log"); };
destination mail	{ file("/var/log/mail.log"); };

# mail subsystem logfiles
destination mailinfo	{ file("/var/log/mail.info"); };
destination mailwarn	{ file("/var/log/mail.warn"); };
destination mailerr	{ file("/var/log/mail.err"); };

# news subsystem logfiles
destination newscrit	{ file("/var/log/news/news.crit"); };
destination newserr	{ file("/var/log/news/news.err"); };
destination newsnotice	{ file("/var/log/news/news.notice"); };


# catch-all logfiles
destination debug	{ file("/var/log/debug"); };
destination error	{ file("/var/log/error"); };
destination messages	{ file("/var/log/messages"); };
destination everything	{ file("/var/log/everything"); };


destination console	{ usertty("root"); };
destination console_all { file("/dev/tty12"); };



# Filters:

filter f_auth		{ facility(auth); };
filter f_authpriv	{ facility(auth, authpriv); };
filter f_syslog		{ not facility(authpriv, mail); };
filter f_cron		{ facility(cron); };
filter f_daemon		{ facility(daemon); };
filter f_kern		{ facility(kern); };
filter f_lpr		{ facility(lpr); };
filter f_mail		{ facility(mail); };
filter f_news		{ facility(news); };
filter f_user		{ facility(user); };
filter f_uucp		{ facility(uucp); };
filter f_debug		{ not facility(auth, authpriv, news, mail); };
filter f_messages	{ level(info..warn) and not facility(auth, authpriv, mail, news); };
filter f_everything	{ level(debug..emerg) and not facility(auth, authpriv); };

filter f_emergency	{ level(emerg); };
filter f_info		{ level(info); };
filter f_notice		{ level(notice); };
filter f_warn		{ level(warn); };
filter f_crit		{ level(crit); };
filter f_err		{ level(err); };
filter f_error		{ level(err .. emerg); };


# Log pathes:

log { source(src); filter(f_authpriv); destination(auth); };
log { source(src); filter(f_cron); destination(cron); };
log { source(src); filter(f_daemon); destination(daemon); };
log { source(src); filter(f_kern); destination(kern); };
log { source(src); filter(f_lpr); destination(lpr); };
log { source(src); filter(f_user); destination(user); };
log { source(src); filter(f_uucp); destination(uucp); };


log { source(src); filter(f_mail); destination(mail); };
log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); };
log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); };
log { source(src); filter(f_mail); filter(f_err); destination(mailerr); };

log { source(src); filter(f_news); filter(f_crit); destination(newscrit); };
log { source(src); filter(f_news); filter(f_err); destination(newserr); };
log { source(src); filter(f_news); filter(f_notice); destination(newsnotice); };

log { source(src); filter(f_debug); destination(debug); };
log { source(src); filter(f_error); destination(error); };
log { source(src); filter(f_messages); destination(messages); };
log { source(src); filter(f_everything); destination(everything); };

log { source(src); filter(f_emergency); destination(console); };
log { source(src); destination(console_all); };