[tac_plus] accounting to syslog. tac_plus F4.0.4.19

Gert Elnegaard geeln at tdc.dk
Wed Oct 31 14:24:35 UTC 2012


Hi,

tac_plus version F4.0.4.19
so sending accounting to syslog should be supported.

running on FreeBSD 8.3-RELEASE-p4

having following config:

accounting syslog;
accounting file = /var/log/tac_plus.acct

logging = local6

and syslogd.conf

local6.*                                        /var/log/tac_plus.log


accounting logs go OK to /var/log/tac_plus.acct. We have used that for
many years.

and I see, for example, following types of messages in
/var/log/tac_plus.log:

Oct 31 14:15:02 login20 tac_plus[23136]: connect from 62.135.173.4
[62.135.173.4]

So basic syslog'ing from tac_plus to syslog local6 facility works ok.
but I do not get any accounting records in tac_plus.log
I would like to see command accounting logs in tac_plus.log, similar to
those we see in tac_plus.acct:

Wed Oct 31 14:18:55 2012        213.236.195.47  nothowan        ttyp1
195.249.15.10   stop    task_id=1       service=shell
elapsed_time=3606       process*mgd[27460]      cmd=logout

Do you have any idea what the problem is?

Regards
Gert Elnegaard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20121031/b750a35f/attachment.html>


More information about the tac_plus mailing list