Cfengine syslog entries

[Beyh, Yehia]

I am trying to consolidate my cfengine syslog entries from multiple systems. I noticed that either cfagent or cfrun logs entries using the word “syslog” as the error string. This not unique for searching purposes and it is not clear to me which application is writing to the log!

 

Example:

 

May 10 10:27:31 test1 cfservd[11570]: Accepting connection from ::ffff:…

May 10 10:27:32 test1 cfservd[11570]: Accepting connection from ::ffff:…

May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cf.main

May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cf.main had permission 600, changed it to 644

May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cfagent.conf

May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cfagent.conf had permission 600, changed it to 644

May 10 10:28:25 test1 syslog: Copying from localhost:/var/opt/cfengine_master/inputs/cfrun.hosts

May 10 10:28:25 test1 syslog: Object /var/opt/cfengine/inputs/cfrun.hosts had permission 600, changed it to 644

 

Notice the “syslog:” - the name syslog is not unique and does not tell me which application!

 

I suggest a change here, I don’t know where it is being logged; however, I would replace:

errstr=syslog

Change it with:

errstr=cfrun_syslog or cfagent_syslog or whichever application as the prefix.

 

syslog(LOG_ERR, " %s: %s",errstr,);

 

Thank you for your consideration.

 

-Yehia