summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMicah <micah@leap.se>2016-08-19 08:21:06 -0400
committerMicah <micah@leap.se>2016-08-25 15:53:37 -0400
commit8ab8176dc076db4a0fb1fc1bf45f02efb0165c28 (patch)
tree97cdc6c226123083107fe021c9c6c03632bd2f60
parentabd56fccf75cd4132b62cb53d90b07529b4f4290 (diff)
Fix rsyslog auth.log entries (#8381).
The auth.log rsyslog entry was accidentally removed in #7863. Change-Id: I4ebffeafedbca5df902041ddd2bcb80d3f68b230
-rw-r--r--puppet/modules/site_rsyslog/templates/client.conf.erb3
1 files changed, 2 insertions, 1 deletions
diff --git a/puppet/modules/site_rsyslog/templates/client.conf.erb b/puppet/modules/site_rsyslog/templates/client.conf.erb
index 553b8373..12d6ea9b 100644
--- a/puppet/modules/site_rsyslog/templates/client.conf.erb
+++ b/puppet/modules/site_rsyslog/templates/client.conf.erb
@@ -83,7 +83,7 @@ $ActionSendStreamDriverAuthMode anon
<% if scope.lookupvar('rsyslog::log_style') == 'debian' -%>
# Log auth messages locally
-.*;auth,authpriv.none;mail.none -/var/log/syslog
+auth,authpriv.* /var/log/auth.log
<% elsif scope.lookupvar('rsyslog::log_style') == 'redhat' -%>
# Log auth messages locally
auth,authpriv.* /var/log/secure
@@ -93,6 +93,7 @@ auth,authpriv.* /var/log/secure
<% if scope.lookupvar('rsyslog::log_style') == 'debian' -%>
# First some standard log files. Log by facility.
#
+*.*;auth,authpriv.none;mail.none -/var/log/syslog
cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log