I'm curious where to add those two additional lines in /etc/rsyslog.conf??? This is what it looks like out_of_box:
# /etc/rsyslog.conf Configuration file for rsyslog.
#
# For more information see
# /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog # provides kernel logging support
#$ModLoad immark # provides --MARK-- message capability
# Enable non-kernel facility klog messages
$KLogPermitNonKernelFacility on
###########################
#### GLOBAL DIRECTIVES ####
###########################
#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# Filter duplicated messages
$RepeatedMsgReduction on
#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog
#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
I'm thinking just at the very end add:
# Added to collect additional debug info
$SystemLogRateLimitInterval 0
$SystemLogRateLimitBurst 0
Does that make sense?
Also I studied man ps a bit and after a bit of experimentation I'd think ps -aux should suffice to show all processes, does that seem right?
I'm curious where to add those two additional lines in /etc/rsyslog. conf??? This is what it looks like out_of_box:
# /etc/rsyslog.conf Configuration file for rsyslog. doc/rsyslog- doc/html/ rsyslog_ conf.html d/50-default. conf
#
# For more information see
# /usr/share/
#
# Default logging rules can be found in /etc/rsyslog.
#################
#### MODULES ####
#################
$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog # provides kernel logging support
#$ModLoad immark # provides --MARK-- message capability
# provides UDP syslog reception
#$ModLoad imudp
#$UDPServerRun 514
# provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514
# Enable non-kernel facility klog messages ernelFacility on
$KLogPermitNonK
####### ####### ####### ###### ####### ####### ######
#### GLOBAL DIRECTIVES ####
#######
# ultTemplate RSYSLOG_ TraditionalFile Format
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefa
# Filter duplicated messages uction on
$RepeatedMsgRed
#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog
# d/*.conf
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.
I'm thinking just at the very end add:
# Added to collect additional debug info imitInterval 0 imitBurst 0
$SystemLogRateL
$SystemLogRateL
Does that make sense?
Also I studied man ps a bit and after a bit of experimentation I'd think ps -aux should suffice to show all processes, does that seem right?
Thanks in advance.