Firewall (pf) logs duplicated?
-
I have pfSense configured for remote syslogging to a Linux box where I use logwatch to parse the logs.
I recently upgraded from pfSense 1.2.3 to 2.0, and have noticed that the format of pf logs to syslog has changed.
While trying to update my logwatch scripts to accommodate this, I noticed that every log from pf seems to appear in the syslog twice. I'm not sure whether this is new since 2.0 or not, as I no longer have saved logs from prior to the upgrade.
Is this a known issue, or am I just misunderstanding something?
MV
-
Figured it out myself, see http://forum.pfsense.org/index.php/topic,43223.0.html for solution
-
Hi,
Sorry to tag on the end but you mentioned updated logwatch scripts, I'm trying to find some. Are you able to share yours?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.