Project

General

Profile

Actions

Feature #4548

closed

syslog-ng interface doesn't allow rule ordering

Added by William Bedard almost 10 years ago. Updated about 8 years ago.

Status:
Resolved
Priority:
Normal
Category:
syslog-ng
Target version:
-
Start date:
03/23/2015
Due date:
% Done:

100%

Estimated time:
Plus Target Version:

Description

Summarized from the initial query over in the pfSense Forums (https://forum.pfsense.org/index.php?topic=91059.0):

The GUI for managing syslog-ng doesn't provide a means to sort/order any user-generated rules relative to the failover default rules. Although initial attempts to order rules using a naming convention (the default rules are all named "_DEFAULT"), the GUI nevertheless always places the default rules at the top of each object class. This prevents a user from being able to isolate specific syslog traffic from the default log file, which is a desirable feature and a common workflow.

While full manual sorting/validation of the rules would be a desirable end-goal, a minimal capability could be achieved by any of the following:
1. providing a checkbox that forced the three (3) default rules to be placed at the end of the syslog-ng config file,
2. providing a new free-text field in the Advanced tab which would be added to the beginning of the config file.
Such basic measures, while not "perfect" and certainly not satisfying all users, would provide a great deal of flexibility that users could take advantage of to satisfy most(?) workflows.

Actions #1

Updated by William Bedard almost 10 years ago

After a bit more research, I would now suggest simply changing the name of the default rules (i.e. "_DEFAULT) to "zDEFAULT" instead. This allows the normal alphabetic sort of the rules into the syslog-ng config file to accommodate user-defined rules that can override the default rules. No change to the php interface code would be required. I have tested this via manually editing the file "/usr/local/pkg/syslog-ng.inc" and the result is completely satisfactory.

Actions #3

Updated by Renato Botelho about 8 years ago

  • Status changed from New to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

I've pushed a fix

Actions #4

Updated by Kill Bill about 8 years ago

Thanks, that's a better solution. ;)

Actions #5

Updated by Kill Bill about 8 years ago

Works.

Actions #6

Updated by Renato Botelho about 8 years ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF