SYNTAX

       [default values]

       <section title :>
       <section values>

       <section 2 title :>
       <section 2 values>

       <etc.>

DESCRIPTION

       [default values] will be used if you do not redefine them in a section.
       You can choose <section title> as you wish. It doesn't  mean  anything,
       just allow you to keep an easy to read config file.

       Values names can be one of the following:


       maxsize
              maxsize = <value>. Once a logfile has exceeded the value defined
              (in bytes), it will be rotated. If maxfile is equal to zero,  it
              disables  log rotation. Defining a default value is a good idea.


       maxtime
              maxtime = <value>. Once  a  logfile  is  older  than  the  value
              defined  (in  seconds),  it  will be rotated. Defining a default
              value is a good idea.

              NB: a logfile is rotated when either maxsize or maxtime limit is
              reached.  If either one or both is equal 0, then log rotation is
              disabled.


       maxfiles
              maxfiles = <value>. This value indicates the maximum  number  of
              rotated  files  kept.  So you'll have x rotated files (log-date-
              string filename type), plus the file named current.


       facility
              facility = "name". Only records a  message  if  the  application
              that  issued  it uses syslog facility <facility>. Facility names
              are :  "auth",  "authpriv",  "cron",  "daemon",  "ftp",  "kern",
              "lpr",  "mail",  "news",  "security",  "syslog", "user", "uucp",
              "local0", "local1" ... "local7" . All kernel messages are logged
              with  facility  "kern".  A  section can have several "facility =
              ..." lines to match more than one  facility.  If  <facility>  is
              "*", it'll match all the facilities.


              one,  while  level  '7' is for debugging messages. 'minimum = 5'
              will strip all non-important messages. The default minimum level
              is 7 (ie. keep all messages).


       maximum
              maximum  = <level> : don't log if the message level exceeds that
              value. By default, maximum is the largest possible level.


       logdir logdir =  "/path/where/logs/will/be/written"  :  files  will  be
              written in /path/where/logs/will/be/written.


       program
              program = "name". Can be used when a facility is useless. Remem-
              ber to use the executable name.


       regex  regex = "perl compatible regular expression". Can be  used  when
              you want to log given patterns, like invalid, fail etc to get in
              a given directory everything that failed or was invalid. Several
              regex can be defined in a section.


       neg_regex
              neg_regex  =  "perl  compatible regular expression". Can be used
              when you want to log the opposite  of  given  patterns.  Several
              neg_regex can be defined in a section.


       program_regex
              program_regex  =  "perl  compatible  regular expression". Can be
              used when you have, for example a familly of programs having the
              same  pattern  in their names, and you want to get logs central-
              ized in a given path.


       command
              command = "/path/to/program/to/execute". If something is  logged
              in a given section, you can automatically launch a program.

FILES

       /usr/local/etc/metalog.conf

AUTHORS

       Laurent Wandrebeck (low) <wandre.l@free.fr>
       Leo Lipelis <aeoo@gentoo.org>
       Hendrik Visage <hvisage@users.sourceforge.net>
       Frank DENIS (Jedi/Sector One) <j@pureftpd.org>

SEE ALSO