Solved Looking for the instructions !!!

[Twiglets]

I am looking for the instructions for adding a new filter ?

Just playing but copying files, hacking contents and renaming etc does not seem to work (Yes, I did restart scribe !!!)

Help !!!!

 

[Twiglets]

Found an external 'syslog-ng site' ...
(I can translate the functionality to scribe if I can understand it !!!)
[https://syslog-ng.github.io/admin-guide/README]

BUT it is the worse structure for documentation I have seen, page by page paragraphs that meander towards the information !!!
Very pretty design but not focused on 'information transfer' looks more like a marketing device !!!
My patience ran out ... I want the answer now or at least this millenium !!!!

 

[Ripshod]

Perhaps you can find a filter that fits your needs in the examples provided on your router
/opt/share/syslog-ng/examples/

 

[Twiglets]

Perhaps you can find a filter that fits your needs in the examples provided on your router
/opt/share/syslog-ng/examples/

I used the existing filters as a template but when i added the files to the directories and restarted scribe it ignored the new filters and overwrote the '/jffs/addons/uiScribe.d/.logs' as an example back to its original version.

Namely, which files do I need to edit/add to enable a new filter ???

Thanks in advance.

 

[Ripshod]

I used the existing filters as a template but when i added the files to the directories and restarted scribe it ignored the new filters and overwrote the '/jffs/addons/uiScribe.d/.logs' as an example back to its original version.

Namely, which files do I need to edit/add to enable a new filter ???

Thanks in advance.

Grab a suitable file from the examples, edit it to your needs and add it to /opt/etc/syslog-ng.d directory. Restart syslog-ng. I've never had issues with this. Post an example of your edited file.

As an example, here's my httpd filter

# log all httpd logs to httpd.log

destination d_httpd {
    file("/opt/var/log/httpd.log");
};

filter f_httpd {
    program("HTTPD") or
    program("httpd") or
    program("httpds");
};

log {
    source(src);
    filter(f_httpd);
    destination(d_httpd);
    flags(final);
};

#eof

 

[Twiglets]

Thanks, you have answered my question !!!

The contents of the filter file was not the issue ... it was changing the wrong files.

I was getting carried away editing more files than I needed to !!!

As my signature states == 'fudges, hacks & terrible abuses galore' ... sometimes they work, sometimes they don't !!!

 

[Martinski]

I am looking for the instructions for adding a new filter ?

Just playing but copying files, hacking contents and renaming etc does not seem to work (Yes, I did restart scribe !!!)

Once you have created the configuration file and placed it in the "/opt/etc/syslog-ng.d" directory, go to the Scribe CLI menu and select to restart syslog-ng ('rs' option). Then go to "su) scribe utilities" menu and select the "lc) Show loaded syslog-ng config" option to double-check that your new filtering configuration is now listed there.

For uiScribe to show the new filtered log file, go to the uiScribe CLI menu and select the "1) Customise list of logs displayed by uiScribe" option to make sure the new filtered log file is included.

HTH

 

[Twiglets]

Once you have created the configuration file and placed it in the "/opt/etc/syslog-ng.d" directory, go to the Scribe CLI menu and select to restart syslog-ng ('rs' option). Then go to "su) scribe utilities" menu and select the "lc) Show loaded syslog-ng config" option to double-check that your new filtering configuration is now listed there.

View attachment 69891

For uiScribe to show the new filtered log file, go to the uiScribe CLI menu and select the "1) Customise list of logs displayed by uiScribe" option to make sure the new filtered log file is included.

View attachment 69892

HTH

Thanks ... solved now ... LESSON: Don't edit too many files !!!???

 

[Tech9]

As my signature states == 'fudges, hacks & terrible abuses galore'

You may want to play with this one:

ModSyslogUI v1.0.0 [RELEASED] - add-on providing System Log page UI filtering capabilities

Production Release 10-Jan-2026. Beta testers be sure to uninstall, then reinstall to ensure you have the production code installed. Thank you all for input and feedback!! Source Code Change Log ModSyslogUI - Customize router's "System Log" page with custom filtering capabilities About...

www.snbforums.com

 

[Ripshod]

N.B.
For anyone copying this ...
The line ' destination(log_server);' may cause a few problems ... obviously an 'extra' Log Server !!!
Remove it for the file to work ... OR ... set up a 'destination log_server {<useful_stuff>};' line as you see fit.

Good catch. Line deleted.

 

[Twiglets]

You may want to play with this one:

ModSyslogUI v1.0.0 [RELEASED] - add-on providing System Log page UI filtering capabilities

Production Release 10-Jan-2026. Beta testers be sure to uninstall, then reinstall to ensure you have the production code installed. Thank you all for input and feedback!! Source Code Change Log ModSyslogUI - Customize router's "System Log" page with custom filtering capabilities About...

www.snbforums.com

FYI:
From the intro text ...

IT IS NOT RECOMMENDED TO INSTALL THIS SCRIPT AND SCRIBE AT THE SAME TIME. CHOOSE ONE OR THE OTHER

Thanks for the thought !!!

 

[Tech9]

You may find it easier to use/configure. You may also provide feedback and help in making it better.

 

[Twiglets]

Not against the new script, it looks very clever & useful.

I have just started to use scribe and will stick with it for now.

I don't need to do a lot with the logs on a daily basis BUT it is useful to be able to 'pull' out things of interest as and when I need.
I now know how to quickly add/delete a filter which works well.

Thanks all.