# /etc/rsyslog.conf -- Default rsyslog configuration. -*- conf -*- # # We have a lot of infrastructure already using syslog.conf, so this file just # includes /etc/syslog.conf for the log location definitions. Eventually, we # should transition to dropping files into /etc/rsyslog.d, which will make # things quite a bit nicer. # Load support for local system and kernel logging. $ModLoad imuxsock $ModLoad imklog # Use the traditional timestamp format. Too much of our software expects it. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # Default permissions for log files. $FileOwner root $FileGroup root $FileCreateMode 0640 $DirCreateMode 0755 $WorkDirectory /var/lib/rsyslog_queue <%# Disable rate limiting on >= Debian Wheezy, Ubuntu Precise and RHEL6. -%> <% if ( operatingsystem == 'Ubuntu' && lsbmajdistrelease.to_i() >= 12 ) || ( operatingsystem == 'Debian' && lsbmajdistrelease.to_i() >= 7 ) || ( operatingsystem == 'RedHat' && lsbmajdistrelease.to_i() >= 6 ) then -%> # Turn off rate limiting to syslog. If there are too many messages # being written to syslog something is wrong that should be examined # and not hidden. This works only on wheezy and precise and better. $SystemLogRateLimitInterval 0 <% end -%> <% unless use_syslog_conf == 'false' || !use_syslog_conf -%> # Include the syslog rules first so they can be overriden by rsyslog.d. $IncludeConfig /etc/syslog.conf <% end -%> # Include all config files in /etc/rsyslog.d. $IncludeConfig /etc/rsyslog.d/*.conf