config root man

#
# options
#
options { long_hostnames(off); sync(0); stats(0); };

#
# sources
#
source src { unix-dgram("/var/run/log");
             unix-dgram("/var/run/logpriv" perm(0600));
	     udp(); internal(); file("/dev/klog"); };

#
# destinations
#
destination console { file("/dev/console"); };
destination authlog { file("/var/log/auth.log"); };
destination cron { file("/var/log/cron"); };
destination maillog { file("/var/log/maillog"); };
destination smtplog { file("/var/log/smtplog"); };
destination messages { file("/var/log/messages"); };
destination security { file("/var/log/security"); };
destination allusers { usertty("*"); };
destination poplog { file("/var/log/poplog"); };
destination xferlog { file("/var/log/xferlog"); };
destination namedlog { file("/var/log/named/named.log" owner(bind) group(bind)); };
destination openvpnlog { file("/var/log/openvpn.log"); };

#
# log facility filters
#
filter f_auth { facility(auth); };
filter f_authpriv { facility(authpriv); };
filter f_not_authpriv { not facility(authpriv); };
filter f_console { facility(console); };
filter f_cron { facility(cron); };
filter f_daemon { facility(daemon); };
filter f_ftp { facility(ftp); };
filter f_kern { facility(kern); };
filter f_mail { facility(mail); };
filter f_security { facility(security); };
filter f_user { facility(user); };
filter f_local0 { facility(local0); };
filter f_local1 { facility(local1); };
filter f_local2 { facility(local2); };
filter f_local3 { facility(local3); };
filter f_local4 { facility(local4); };	# sftp-server
filter f_local5 { facility(local5); };	# smtp
filter f_local6 { facility(local6); };
filter f_local7 { facility(local7); };

#
# log level filters
#
filter f_emerg { level(emerg); };
filter f_alert { level(alert..emerg); };
filter f_crit { level(crit..emerg); };
filter f_err { level(err..emerg); };
filter f_warning { level(warning..emerg); };
filter f_notice { level(notice..emerg); };
filter f_info { level(info..emerg); };
filter f_debug { level(debug..emerg); };
filter f_is_debug { level(debug); };

#
# program filters
#

filter f_stunnel { program("stunnel"); };
filter f_popd { program("popd"); };
filter f_ftpd { program("ftpd"); };
filter f_named { program("named"); };
filter f_openvpn { program("openvpn"); };
filter f_saslauthd { program("saslauthd"); };

#
# *.err;kern.debug;auth.notice;mail.crit		/dev/console
#

#
# auth.info;authpriv.info				/var/log/auth.log
#
log { source(src); filter(f_auth); filter(f_info); destination(authlog); };
log { source(src); filter(f_authpriv); filter(f_info); destination(authlog); };

#
# cron.*						/var/log/cron
#
log { source(src); filter(f_cron); destination(cron); };

#
# mail.info						/var/log/maillog
#
log { source(src); filter(f_mail); filter(f_info); destination(maillog); };
log { source(src); filter(f_saslauthd); destination(maillog); };

#
# local5.info						/var/log/smtplog
#
log { source(src); filter(f_local5); filter(f_info); destination(smtplog); };

#
# *.emerg,kern.debug;mail.crit				/var/log/messages
#
log { source(src); filter(f_emerg); filter(f_debug); destination(messages); };
log { source(src); filter(f_kern); filter(f_debug); destination(messages); };
log { source(src); filter(f_user); destination(messages); };

#
# security.*						/var/log/security
#
log { source(src); filter(f_security); destination(security); };

#
# !popd
# *.*
#
log { source(src); filter(f_popd); destination(poplog); };
log { source(src); filter(f_stunnel); destination(poplog); };

#
# !ftpd
# *.*
#
log { source(src); filter(f_ftpd); destination(xferlog); };
log { source(src); filter(f_local4); destination(xferlog); };

#
# !named
# *.*
#
log { source(src); filter(f_named); destination(namedlog); };

#
# !openvpn
# *.*
#
log { source(src); filter(f_openvpn); destination(openvpnlog); };