Logging question

I’m discovering that syslog(-ng) has actually been replaced by systemd-journal, yet it still writes out log messages to /var/log/messages as syslog did for compatibility.

As we are starting to use splunk this will work for us. But I was wondering if SUSE is planning on changing this in the future ? They seem to like to change things without warning.

Another question I have: is it possible to modify or customize a log entries for logins so they are easily recognizable and perhaps add additional information like where a user logged in from (ip, hostname,etc…)

Thanks

cisaksen,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.suse.com/faq.php

If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot…

Good luck!

Your SUSE Forums Team
http://forums.suse.com

On 09/08/17 21:24, cisaksen wrote:
[color=blue]

I’m discovering that syslog(-ng) has actually been replaced by
systemd-journal, yet it still writes out log messages to
/var/log/messages as syslog did for compatibility.

As we are starting to use splunk this will work for us. But I was
wondering if SUSE is planning on changing this in the future ? They
seem to like to change things without warning.[/color]

I can’t give an official answer (you’d have to ask SUSE directly) but I
wouldn’t expect them to change this without warning and certainly not
within the same product release (i.e. SLES12). Instead if it was going
to change with a future release it would probably start as a Technical
Preview in a beta for that future release.
[color=blue]

Another question I have: is it possible to modify or customize a log
entries for logins so they are easily recognizable and perhaps add
additional information like where a user logged in from (ip,
hostname,etc…)[/color]

This I don’t know though I suspect given we’re talking about Linux it’s
probably possible.

HTH.

Simon
SUSE Knowledge Partner


If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.