Attachment 580977 Details for Bug 812617 – rsyslog.conf with obfuscated mysql password

rsyslog.conf with obfuscated mysql password

rsyslog.txt (text/plain), 9.51 KB, created by Harald Reindl on 2012-04-28 14:39:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Harald Reindl

Created: 2012-04-28 14:39:23 UTC

Size: 9.51 KB

patch

obsolete

>#### MODULES ####
>
>$ModLoad imuxsock.so                                # provides support for local system logging (e.g. via logger command)
>$ModLoad imklog.so                                  # provides kernel logging support (previously done by rklogd)
>$ModLoad ommysql                                    # provides mysql-output
>
>#### GLOBAL DIRECTIVES ####
>
>$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
>$ActionOmmysqlServerPort 3306
>$MaxMessageSize 4096
>
>#### RULES ####
>
># Ignored messages
>:msg, contains, "HostIF_ReadUptime" ~
>:msg, contains, "Group with unexpected replay counter" ~
>:msg, contains, "smbd/service.c:942(make_connection_snum)" ~
>:msg, contains, "Can't become connected user" ~
>:msg, contains, "util_sock.c:1432(get_peer_addr_internal)" ~
>:msg, contains, "getpeername failed. Error was Der Socket ist nicht verbunden" ~
>:msg, contains, "read_fd_with_timeout: client 0.0.0.0 read error = Keine Route zum Zielrechner" ~
>:msg, contains, "FILTER barracudafeed" ~
>:msg, contains, "uid=0 from=<root>" ~
>:msg, contains, "RCPT from barracuda.thelounge.net" ~
>:msg, contains, "): disconnecting" ~
>:msg, contains, "certificate verification failed" ~
>:msg, contains, "setting up TLS connection" ~
>:msg, contains, "Anonymous TLS connection established from barracuda.thelounge.net" ~
>:msg, contains, "Untrusted TLS connection established to barracuda.thelounge.net" ~
>:msg, contains, "user=<asma.taoumi@sunshine.at>" ~
>:msg, contains, "user=<aziz@sunshine.at>" ~
>:msg, contains, "user=<funkboutique@sunshine.at>" ~
>:msg, contains, "connect from thx1138.thelounge.net[10.0.0.30]" ~
>:msg, contains, "connect from unknown[10.0.0.30]" ~
>:msg, contains, "connect from thx1138.thelounge.net[91.118.73.30]" ~
>:msg, contains, "connect from unknown[91.118.73.30]" ~
>:msg, contains, "connect from barracuda.thelounge.net[10.0.0.20]" ~
>:msg, contains, "connect from unknown[10.0.0.20]" ~
>:msg, contains, "connect from barracuda.thelounge.net[91.118.73.20]" ~
>:msg, contains, "connect from unknown[91.118.73.20]" ~
>:msg, contains, "connect from arrakis.thelounge.net[10.0.0.6]" ~
>:msg, contains, "connect from unknown[10.0.0.6]" ~
>:msg, contains, "connect from prometheus.thelounge.net[10.0.0.32]" ~
>:msg, contains, "connect from unknown[10.0.0.32]" ~
>:msg, contains, "connect from thebe.thelounge.net[10.0.0.38]" ~
>:msg, contains, "connect from unknown[10.0.0.38]" ~
>:msg, contains, "connect from localhost[127.0.0.1]" ~
>:msg, contains, "connect from unknown[127.0.0.1]" ~
>:msg, contains, "disconnect from thx1138.thelounge.net[10.0.0.30]" ~
>:msg, contains, "disconnect from unknown[10.0.0.30]" ~
>:msg, contains, "disconnect from thx1138.thelounge.net[91.118.73.30]" ~
>:msg, contains, "disconnect from unknown[91.118.73.30]" ~
>:msg, contains, "disconnect from barracuda.thelounge.net[10.0.0.20]" ~
>:msg, contains, "disconnect from unknown[10.0.0.20]" ~
>:msg, contains, "disconnect from barracuda.thelounge.net[91.118.73.20]" ~
>:msg, contains, "disconnect from unknown[91.118.73.20]" ~
>:msg, contains, "disconnect from arrakis.thelounge.net[10.0.0.6]" ~
>:msg, contains, "disconnect from unknown[10.0.0.6]" ~
>:msg, contains, "disconnect from prometheus.thelounge.net[10.0.0.32]" ~
>:msg, contains, "disconnect from unknown[10.0.0.32]" ~
>:msg, contains, "disconnect from thebe.thelounge.net[10.0.0.38]" ~
>:msg, contains, "disconnect from unknown[10.0.0.38]" ~
>:msg, contains, "disconnect from localhost[127.0.0.1]" ~
>:msg, contains, "disconnect from unknown[127.0.0.1]" ~
>:msg, contains, "lost connection after CONNECT from thx1138.thelounge.net[10.0.0.30]" ~
>:msg, contains, "lost connection after CONNECT from unknown[10.0.0.30]" ~
>:msg, contains, "lost connection after CONNECT from thx1138.thelounge.net[91.118.73.30]" ~
>:msg, contains, "lost connection after CONNECT from unknown[91.118.73.30]" ~
>:msg, contains, "lost connection after CONNECT from barracuda.thelounge.net[10.0.0.20]" ~
>:msg, contains, "lost connection after CONNECT from unknown[10.0.0.20]" ~
>:msg, contains, "lost connection after CONNECT from barracuda.thelounge.net[91.118.73.20]" ~
>:msg, contains, "lost connection after CONNECT from unknown[91.118.73.20]" ~
>:msg, contains, "lost connection after CONNECT from arrakis.thelounge.net[10.0.0.6]" ~
>:msg, contains, "lost connection after CONNECT from unknown[10.0.0.6]" ~
>:msg, contains, "lost connection after CONNECT from prometheus.thelounge.net[10.0.0.32]" ~
>:msg, contains, "lost connection after CONNECT from unknown[10.0.0.32]" ~
>:msg, contains, "lost connection after CONNECT from thebe.thelounge.net[10.0.0.38]" ~
>:msg, contains, "lost connection after CONNECT from unknown[10.0.0.38]" ~
>:msg, contains, "lost connection after CONNECT from localhost[127.0.0.1]" ~
>:msg, contains, "lost connection after CONNECT from unknown[127.0.0.1]" ~
>:msg, contains, "Did not receive identification string from thx1138.thelounge.net[10.0.0.30]" ~
>:msg, contains, "Did not receive identification string from unknown[10.0.0.30]" ~
>:msg, contains, "Did not receive identification string from thx1138.thelounge.net[91.118.73.30]" ~
>:msg, contains, "Did not receive identification string from unknown[91.118.73.30]" ~
>:msg, contains, "Did not receive identification string from barracuda.thelounge.net[10.0.0.20]" ~
>:msg, contains, "Did not receive identification string from unknown[10.0.0.20]" ~
>:msg, contains, "Did not receive identification string from barracuda.thelounge.net[91.118.73.20]" ~
>:msg, contains, "Did not receive identification string from unknown[91.118.73.20]" ~
>:msg, contains, "Did not receive identification string from arrakis.thelounge.net[10.0.0.6]" ~
>:msg, contains, "Did not receive identification string from unknown[10.0.0.6]" ~
>:msg, contains, "Did not receive identification string from prometheus.thelounge.net[10.0.0.32]" ~
>:msg, contains, "Did not receive identification string from unknown[10.0.0.32]" ~
>:msg, contains, "Did not receive identification string from thebe.thelounge.net[10.0.0.38]" ~
>:msg, contains, "Did not receive identification string from unknown[10.0.0.38]" ~
>:msg, contains, "Did not receive identification string from localhost[127.0.0.1]" ~
>:msg, contains, "Did not receive identification string from unknown[127.0.0.1]" ~
>
># unwanted desktop messages
>:msg,contains,"WARNING **: Property get or set does not have an interface string as first arg" ~
>:msg, contains, "CdSane-DEBUG" ~
>:msg, contains, "HDMI hot plug event" ~
>:msg, contains, "HDMI status" ~
>:msg, contains, "Activating service name='org.freedesktop.PolicyKit1'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.ConsoleKit'" ~
>:msg, contains, "Activating service name='org.freedesktop.UPower'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.UPower'" ~
>:msg, contains, "Activating service name='org.freedesktop.UDisks'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.UDisks'" ~
>:msg, contains, "Activating via systemd: service name='org.freedesktop.RealtimeKit1'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.RealtimeKit1'" ~
>:msg, contains, "Successfully made thread" ~
>:msg, contains, "Activating via systemd: service name='org.freedesktop.ColorManager'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.ColorManager'" ~
>:msg, contains, "Activating via systemd: service name='org.freedesktop.colord-sane'" ~
>:msg, contains, "Successfully activated service 'org.freedesktop.colord-sane'" ~
>:msg, contains, "CHECK POWER STATUS spins up disk" ~
>:msg, contains, "CHECK POWER STATUS returned 129, not ATA compliant" ~
>:msg, contains, "systemd[1]: Reloading" ~
>
># systemd-logind not in /var/log/messages
>:programname, isequal, "systemd-logind"             /var/log/secure
>:programname, isequal, "systemd-logind" ~
>
># log dhcpd in own file
>:programname, isequal, "dhcpd"                      /var/log/dhcpd.log
>:programname, isequal, "dhcpd" ~
>:programname, isequal, "vmnet-dhcpd"                /var/log/dhcpd.log
>:programname, isequal, "vmnet-dhcpd" ~
>
># log hostapd in own file
>:programname, isequal, "hostapd"                    /var/log/hostapd.log
>:programname, isequal, "hostapd" ~
>
># Log anything (except mail) of level info or higher
># Don't log private authentication messages!
>*.info;mail.none;authpriv.none;cron.none            /var/log/messages
>
># The authpriv file has restricted access.
>authpriv.*                                          /var/log/secure
>
># Log all the mail messages in one place.
>mail.*                                              /var/log/maillog
>
># Log cron stuff
>cron.*                                              /var/log/cron
>
># Everybody gets emergency messages
>*.emerg                                             *
>
># Save news errors of crit in special file.
>uucp,news.crit                                      /var/log/spooler
>
># Save boot messages also to boot.log
>local7.*                                            /var/log/boot.log
>
>### DATABASE-LOGGING ###
>$WorkDirectory /var/spool/rsyslog                   # default location for work (spool) files
>$ActionQueueType LinkedList                         # use asynchronous processing
>$ActionQueueFileName dbq                            # set file name, also enables disk mode
>$ActionResumeRetryCount -1                          # infinite retries on insert failure
>*.info;mail.none;authpriv.none;cron.none            :ommysql:localhost,dbmail,vm_syslog,**************************
>mail.*                                              :ommysql:localhost,dbmail,vm_syslog,**************************
>
># Log php-errors also in file and not only database
>!php
>user.*                                              /var/log/php_error.log
>!httpd
>user.*                                              /var/log/php_error.log

Actions: View

Attachments on bug 812617: 580977