If I redirect logs using rsyslog, will dmesg be affected?

Question

I am trying to get some logging in place and am trying to troubleshoot it and this question became relevant.

I use rsyslog config files to redirect some of my logging. (Will use iptables logging since I am working with it but please assume the general case)

Under my rsyslog.d config I have

:msg, startswith, "iptables: " /var/log/iptables.log
:msg, startswith, "iptables denied: " /var/log/iptables.log
& ~

I would assume if this was working that it would no longer log to kern.log.

Since it is no longer going to kern.log does the redirect also effect the kernel ring buffer?

You may have to use contains and not startswith -- the kernel will likely append its own time stamp to iptables stuff before rsyslog sees it.

goldilocks · Accepted Answer · 2013-02-15 17:11:25Z

up vote 2 down vote accepted

The & only applies to the preceeding selector, so you will need one for each of those :msg lines.

edited Feb 15 at 17:11

answered Feb 15 at 16:36

goldilocks
6,169616

schaiba · Answer 2 · 2013-02-15 15:49:38Z

up vote 2 down vote

No, it only affects what you modified.

answered Feb 15 at 15:49

schaiba
1,74328

2 Answers