<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 29/07/2020 08:10, Pierrick CHOVELON
via Pdns-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAHzjrsu5R=f2JZzPyTktdfcab1groH3o17Wo_RD0ArReeNd=XA@mail.gmail.com">
<div>But logs are still written in /var/log/messages</div>
<div><br>
</div>
<div>Have you got any idea ?</div>
</blockquote>
<p>This is an rsyslog issue, not a pdns issue.</p>
<p>You probably have /etc/rsyslog.d/50-default.conf containing<br>
</p>
<p><tt>*.*;auth,authpriv.none -/var/log/syslog</tt><br>
</p>
<p>which says "log everything to /var/log/syslog, except auth and
authpriv"</p>
<p>To fix this, you should put your rules in an earlier file, say
/etc/rsyslog.d/30-pdns.conf, with instructions not to let the
messages progress to later rules. I think this should work:</p>
<p><tt><span>local5.=info -/var/log/pdns/<a
href="http://pdns.info">pdns.info</a></span></tt><tt><br>
</tt><tt><span>local5.=warn
-/var/log/pdns/pdns.warn</span></tt><tt><br>
</tt><tt><span>local5.err
/var/log/pdns/pdns.err</span></tt><tt><br>
</tt><tt><span>local5.* stop</span></tt>
</p>
<p><span></span></p>
<span></span>
<p>If not, I'm sure this will:<br>
</p>
<pre><span><span>local5.=info -/var/log/pdns/<a href="http://pdns.info">pdns.info</a>
& stop
local5.=warn -/var/log/pdns/pdns.warn
& stop
local5.err /var/log/pdns/pdns.err
& stop
</span></span></pre>
<br>
HTH,<br>
<p>Brian.</p>
<pre><span></span></pre>
</body>
</html>