is there any way to filter in syslog (not rsyslog) such as programname?

Asked Aug 17 '18 at 18:01

Active Aug 17 '18 at 21:45

Viewed 361 times

I need to add filter in my syslogs. I know how to do in rsyslogs. But we need to add same logs in syslogs as well in legacy systems.Is there any way to do it?

Corresponding rsyslog entries are:

:msg, contains, "ABC" /var/log/abc.log
:programname, isequal, "sudo" /var/log/sudo.log

edited Aug 17 '18 at 21:45

asked Aug 17 '18 at 18:01

sgupta

1

You can install rsyslog on the legacy system. Why do you think it exists? – Michael Hampton Aug 17 '18 at 18:02
I don't have enough memory in legacy systems. So, can't install rsyslog. My best bet is to use syslog only. – sgupta Aug 17 '18 at 19:03
Is there any way, I can filter the logs in syslogs? say anything containing ssh or sudo? – sgupta Aug 17 '18 at 21:46
You cannot make syslog do something it is not capable of doing! – Michael Hampton Aug 17 '18 at 22:59
Which syslog implementation? GNU inetutils, syslog-ng, BSD, something else? – John Mahowald Aug 18 '18 at 20:40
syslogd (GNU inetutils) 1.5 – sgupta Aug 20 '18 at 21:00

is there any way to filter in syslog (not rsyslog) such as programname?

0 Answers0