syslog.conf - syslogd configuration file
facility.severity destination Where: Is part
of the system generating the message, specified in
/usr/include/sys/syslog_pri.h. See also the syslogd(8)
reference page. The severity level, which can be emerg,
alert, crit, err, warning, notice, info, or debug. See
/usr/include/sys/syslog_pri.h.
The syslogd daemon logs all messages of the specified
severity level plus all messages of greater
severity. For example, if you specify level err,
all messages of levels err, crit, alert, and emerg
or panic are logged. A local file pathname to a
log file, a host name for remote logging or a list
of users. In the latter case the users will
receive messages when they are logged in. An
asterisk (*) causes a message to be sent to all
users who are currently logged in.
The /etc/syslog.conf file is a system file that enables
you to configure or filter events that are to be logged by
syslogd. You can specify more than one facility and its
severity level by separating them with semicolons.
You can specify more than one facility logs to the same
file by separating the facilities with commas, as shown in
the EXAMPLES section.
The syslogd daemon ignores blank lines and lines that
begin with an octothorpe (#). You can specify # as the
first character in a line to include comments in the file
or to disable an entry. The facility and severity level
are separated from the destination by one or more tab
characters or spaces.
If you want the syslogd daemon to use a configuration file
other than the default, you must specify the file name
with the following command: # syslogd -f config_file
Daily Log Files [Toc] [Back]
You can specify in the /etc/syslog.conf file that the syslogd
daemon create daily log files. To create daily log
files, use the following syntax to specify the path name
of the message destination: /var/adm/syslog.dated/ { file}
The file variable specifies the name of the log file, for
example, mail.log or kern.log. If you specify a
/var/adm/syslog.dated/file path name destination, each day
the syslogd daemon creates a sub-directory under the
/var/adm/syslog.dated directory and a log file in the subdirectory,
using the following syntax: /var/adm/syslog.dated/
date / file Where: The date variable specifies
the day, month, and time that the log file was created.
The file variable specifies the name of the log file you
previously specified in the /etc/syslog.conf file. The
syslogd daemon automatically creates a new date directory
every 24 hours and also when you boot the system. The current
directory is a link to the latest date directory. To
get the latest logs, you only need to reference the
/var/adm/syslog.dated/current directory.
The following is a sample /etc/syslog.conf file: # syslogd
config file # # facilities: kern user mail daemon auth
syslog lpr binary # priorities: emerg alert crit err warning
notice info debug kern.debug
/var/adm/syslog.dated/kern.log user.debug
/var/adm/syslog.dated/user.log mail.debug
/var/adm/syslog.dated/mail.log daemon.debug
/var/adm/syslog.dated/daemon.log auth.debug
/var/adm/syslog.dated/auth.log syslog.debug
/var/adm/syslog.dated/syslog.log lpr.info
/var/adm/syslog.dated/lpr.log
msgbuf.err /var/adm/crash/msgbuf.savecore
kern.debug /var/adm/messages kern.debug
/dev/console *.emerg *
/etc/syslog.conf
/etc/syslog.auth - Authorization file for remote logging.
/usr/include/sys/syslog_pri.h - Common components of a
syslog event log record.
Commands: /usr/sbin/syslogd(8), /usr/sbin/binlogd(8)
System Administration delim off
syslog.conf(4)
[ Back ] |