When logging kernel messages rsyslogd appears to consider them to be<br />
in facility user. It logs them not under whatever was configured for<br />
'kern.*' but under whatever was configured for 'user.*', and when<br />
forwarding them to another machine via at least UDP it identifies them<br />
as facility 'user' messages (verified both on the other machine and by<br />
tcpdump of UDP traffic from a CentOS 7 preliminary test machine).<br />
<br />
I don't think that the kernel is at fault here, as 'dmesg -f kern'<br />
shows all the kernel messages while 'dmesg -f user' shows nothing.
↧
