I'm trying to log locally (notice.log) and to a local syslog-ng server.
It doesn't seem to work. I get no messages at all to my local syslog server. When I try to log some testlines manually (even as the tor system user) it seems to work.
As I understood the configuration I can have multiple "Log " lines without problem, right?
A test like: logger -p daemon.notice -t tortest Testing generates the expected lines in /var/log/messages
What facility is used by tor when logging to syslog? I didn't find that information.
System is a standard current debian 8.6 with tor Tor 0.2.8.8 (git-8d8a099454d994bd), the two Log-Lines are:
Log notice file /var/log/tor/notices.log Log notice syslog
Any idea what might be missing?
On Fri, 07 Oct 2016 09:46:54 +0200 "Dr. Who" drwho-W/G5t7EG8iL1P9xLtpHBDw@public.gmane.org wrote:
What facility is used by tor when logging to syslog? I didn't find that information.
It looks like the default is 'daemon', as you expected. It is changeable via a ./configure option, but debian doesn't seem to touch it.
System is a standard current debian 8.6 with tor Tor 0.2.8.8 (git-8d8a099454d994bd), the two Log-Lines are:
Log notice file /var/log/tor/notices.log Log notice syslog
Any idea what might be missing?
Those lines work for me. You could try sharing a minimal example syslog config that doesn't seem to be working; maybe something's weird with that? You could also maybe 'strace' tor during startup to see if it looks like some log-related syscalls are failing. But be careful with retaining or sharing any such trace, since I assume there can be some sensitive info in there.
tor-relays@lists.torproject.org
-
Andrew Deason -
Dr. Who