171 lines
3.2 KiB
Plaintext
171 lines
3.2 KiB
Plaintext
@version:3.0
|
|
|
|
options {
|
|
chain_hostnames(no);
|
|
create_dirs(yes);
|
|
flush_lines(0);
|
|
keep_hostname(no);
|
|
log_fifo_size(10240);
|
|
log_msg_size(81920);
|
|
log_iw_size(10240);
|
|
log_fetch_limit(10240);
|
|
stats_freq(0);
|
|
use_dns(no);
|
|
use_fqdn(no);
|
|
dns_cache(no);
|
|
ts_format(iso);
|
|
keep_timestamp(no);
|
|
};
|
|
|
|
source src {
|
|
internal();
|
|
unix-stream("/dev/log");
|
|
};
|
|
|
|
source kernel {
|
|
file("/proc/kmsg" program_override("kernel") flags(kernel));
|
|
};
|
|
|
|
destination d_messages {
|
|
file("/tmp/messages");
|
|
};
|
|
|
|
destination proc_messages {
|
|
file("/proc/xiaoqiang/xq_syslog");
|
|
};
|
|
|
|
template t_stat { template("$MSG\n"); };
|
|
|
|
destination d_stat_points_rom {
|
|
file("/tmp/stat_points_rom.log" template(t_stat));
|
|
};
|
|
|
|
destination d_stat_points_web {
|
|
file("/tmp/stat_points_web.log" template(t_stat));
|
|
};
|
|
|
|
destination d_stat_points_privacy {
|
|
file("/tmp/stat_points_privacy.log" template(t_stat));
|
|
};
|
|
|
|
destination d_wifi_log {
|
|
file("/tmp/wifi_analysis.log");
|
|
};
|
|
|
|
destination d_dns_log {
|
|
pipe("/tmp/web_filter_list",template(t_stat));
|
|
};
|
|
|
|
filter f_luci {
|
|
level(alert .. info)
|
|
and program(luci)
|
|
and not match("stat_points_" value("MESSAGE"));
|
|
};
|
|
|
|
filter f_messages {
|
|
level(alert .. warning)
|
|
and not program(luci)
|
|
and not match("wifi_log" value("MESSAGE"))
|
|
and not match("stat_points_" value("MESSAGE"));
|
|
};
|
|
|
|
filter f_messages_d {
|
|
not program(luci)
|
|
and not match("wifi_log" value("MESSAGE"))
|
|
and not match("stat_points_" value("MESSAGE"));
|
|
};
|
|
|
|
filter f_stat_points_rom {
|
|
(match("stat_points_none" value("MESSAGE"))
|
|
or match("stat_points_instant" value("MESSAGE")))
|
|
and not program(web);
|
|
};
|
|
|
|
filter f_stat_points_web {
|
|
(match("stat_points_none" value("MESSAGE"))
|
|
or match("stat_points_instant" value("MESSAGE")))
|
|
and program(web);
|
|
};
|
|
|
|
filter f_stat_points_privacy {
|
|
match("stat_points_privacy" value("MESSAGE"));
|
|
};
|
|
|
|
filter f_wifi_log {
|
|
match("wifi_log" value("MESSAGE"))
|
|
and not program(web);
|
|
};
|
|
|
|
filter f_dns_log {
|
|
match("stat_points_dns" value("MESSAGE"))
|
|
and not program(web);
|
|
};
|
|
|
|
# user this rewrite to replace kernel timestamp
|
|
rewrite f_stat_points_kernel {
|
|
subst("^\[ *[0-9]+\.[0-9]+\] ", "", value("MESSAGE"));
|
|
};
|
|
|
|
rewrite f_stat_points_dns {
|
|
subst("stat_points_dns dns_resolve=", "", value("MESSAGE"));
|
|
};
|
|
|
|
log {
|
|
source(src);
|
|
source(kernel);
|
|
filter(f_luci);
|
|
destination(d_messages);
|
|
destination(proc_messages);
|
|
};
|
|
log {
|
|
source(src);
|
|
source(kernel);
|
|
filter(f_messages);
|
|
destination(d_messages);
|
|
destination(proc_messages);
|
|
};
|
|
log {
|
|
source(src);
|
|
filter(f_stat_points_rom);
|
|
destination(d_stat_points_rom);
|
|
};
|
|
log {
|
|
source(kernel);
|
|
rewrite(f_stat_points_kernel);
|
|
filter(f_stat_points_rom);
|
|
destination(d_stat_points_rom);
|
|
};
|
|
log {
|
|
source(src);
|
|
filter(f_stat_points_web);
|
|
destination(d_stat_points_web);
|
|
};
|
|
log {
|
|
source(src);
|
|
filter(f_stat_points_privacy);
|
|
destination(d_stat_points_privacy);
|
|
};
|
|
log {
|
|
source(kernel);
|
|
rewrite(f_stat_points_kernel);
|
|
filter(f_stat_points_privacy);
|
|
destination(d_stat_points_privacy);
|
|
};
|
|
log {
|
|
source(kernel);
|
|
rewrite(f_stat_points_kernel);
|
|
filter(f_wifi_log);
|
|
destination(d_wifi_log);
|
|
};
|
|
log {
|
|
source(src);
|
|
filter(f_wifi_log);
|
|
destination(d_wifi_log);
|
|
};
|
|
log {
|
|
source(src);
|
|
filter(f_dns_log);
|
|
rewrite(f_stat_points_dns);
|
|
destination(d_dns_log);
|
|
};
|