Print this page
4211 Some syslog facility names and symbols are missing
3232 syslogd shouldn't sync after each LOG_KERN line
1762 Syslogd man page: missing reference.
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/man/man4/syslog.conf.4
+++ new/usr/src/man/man4/syslog.conf.4
1 1 '\" te
2 +.\" Copyright (c) 2013 Gary Mills
2 3 .\" Copyright (c) 2003 Sun Microsystems, Inc. All Rights Reserved.
3 4 .\" Copyright (c) 1983 Regents of the University of California. All rights reserved. The Berkeley software License Agreement specifies the terms and conditions for redistribution.
4 -.TH SYSLOG.CONF 4 "Apr 26, 2006"
5 +.TH SYSLOG.CONF 4 "Oct 17, 2013"
5 6 .SH NAME
6 7 syslog.conf \- configuration file for syslogd system log daemon
7 8 .SH SYNOPSIS
8 9 .LP
9 10 .nf
10 11 \fB/etc/syslog.conf\fR
11 12 .fi
12 13
13 14 .SH DESCRIPTION
14 15 .sp
15 16 .LP
16 17 The file \fB/etc/syslog.conf\fR contains information used by the system log
17 18 daemon, \fBsyslogd\fR(1M), to forward a system message to appropriate log files
18 19 and/or users. \fBsyslogd\fR preprocesses this file through \fBm4\fR(1) to
19 20 obtain the correct information for certain log files, defining \fBLOGHOST\fR if
20 21 the address of "loghost" is the same as one of the addresses of the host that
21 22 is running \fBsyslogd\fR.
22 23 .sp
23 24 .LP
24 25 A configuration entry is composed of two TAB-separated fields:
25 26 .sp
26 27 .in +2
27 28 .nf
28 29 \fIselector action\fR
29 30 .fi
30 31 .in -2
31 32
32 33 .sp
33 34 .LP
34 35 The \fIselector\fR field contains a semicolon-separated list of priority
35 36 specifications of the form:
36 37 .sp
37 38 .in +2
38 39 .nf
39 40 \fIfacility\fR\fB\&.\fR\fIlevel\fR [ \fB;\fR \fIfacility\fR\fB\&.\fR\fIlevel\fR ]
40 41 .fi
|
↓ open down ↓ |
26 lines elided |
↑ open up ↑ |
41 42 .in -2
42 43
43 44 .sp
44 45 .LP
45 46 where \fIfacility\fR is a system facility, or comma-separated list of
46 47 facilities, and \fIlevel\fR is an indication of the severity of the condition
47 48 being logged. Recognized values for \fIfacility\fR include:
48 49 .sp
49 50 .ne 2
50 51 .na
51 -\fB\fBuser\fR\fR
52 +\fB\fBkern\fR\fR
52 53 .ad
53 54 .RS 12n
54 -Messages generated by user processes. This is the default priority for messages
55 -from programs or facilities not listed in this file.
55 +Messages generated by the kernel.
56 56 .RE
57 57
58 58 .sp
59 59 .ne 2
60 60 .na
61 -\fB\fBkern\fR\fR
61 +\fB\fBuser\fR\fR
62 62 .ad
63 63 .RS 12n
64 -Messages generated by the kernel.
64 +Messages generated by user processes. This is the default priority for messages
65 +from programs or facilities not listed in this file.
65 66 .RE
66 67
67 68 .sp
68 69 .ne 2
69 70 .na
70 71 \fB\fBmail\fR\fR
71 72 .ad
72 73 .RS 12n
73 74 The mail system.
74 75 .RE
75 76
76 77 .sp
77 78 .ne 2
78 79 .na
79 80 \fB\fBdaemon\fR\fR
80 81 .ad
81 82 .RS 12n
82 83 System daemons, such as \fBin.ftpd\fR(1M)
83 84 .RE
84 85
85 86 .sp
86 87 .ne 2
87 88 .na
88 89 \fB\fBauth\fR\fR
89 90 .ad
90 91 .RS 12n
91 92 The authorization system: \fBlogin\fR(1), \fBsu\fR(1M), \fBgetty\fR(1M), among
92 93 others.
93 94 .RE
94 95
95 96 .sp
96 97 .ne 2
97 98 .na
98 99 \fB\fBlpr\fR\fR
99 100 .ad
100 101 .RS 12n
101 102 The line printer spooling system: \fBlpr\fR(1B), \fBlpc\fR(1B), among others.
102 103 .RE
103 104
104 105 .sp
105 106 .ne 2
106 107 .na
107 108 \fB\fBnews\fR\fR
108 109 .ad
109 110 .RS 12n
110 111 Designated for the USENET network news system.
111 112 .RE
112 113
113 114 .sp
114 115 .ne 2
115 116 .na
|
↓ open down ↓ |
41 lines elided |
↑ open up ↑ |
116 117 \fB\fBuucp\fR\fR
117 118 .ad
118 119 .RS 12n
119 120 Designated for the UUCP system; it does not currently use the \fBsyslog\fR
120 121 mechanism.
121 122 .RE
122 123
123 124 .sp
124 125 .ne 2
125 126 .na
126 -\fB\fBcron\fR\fR
127 +\fB\fBbsdcron\fR\fR
127 128 .ad
128 129 .RS 12n
129 -Designated for \fBcron\fR/\fBat\fR messages generated by systems that do
130 -logging through \fBsyslog\fR. The current version of the Solaris Operating
131 -Environment does not use this facility for logging.
130 +Designated for the BSD cron/at system.
132 131 .RE
133 132
134 133 .sp
135 134 .ne 2
136 135 .na
136 +\fB\fBauthpriv\fR\fR
137 +.ad
138 +.RS 12n
139 +Designated for the BSD security/authorization system.
140 +.RE
141 +
142 +.sp
143 +.ne 2
144 +.na
145 +\fB\fBftp\fR\fR
146 +.ad
147 +.RS 12n
148 +Designated for the file transfer system.
149 +.RE
150 +
151 +.sp
152 +.ne 2
153 +.na
154 +\fB\fBntp\fR\fR
155 +.ad
156 +.RS 12n
157 +Designated for the network time system.
158 +.RE
159 +
160 +.sp
161 +.ne 2
162 +.na
137 163 \fB\fBaudit\fR\fR
138 164 .ad
139 165 .RS 12n
140 166 Designated for audit messages generated by systems that audit by means of
141 167 syslog.
142 168 .RE
143 169
170 +.sp
171 +.ne 2
172 +.na
173 +\fB\fBconsole\fR\fR
174 +.ad
175 +.RS 12n
176 +Designated for the BSD console system.
177 +.RE
178 +
179 +.sp
180 +.ne 2
181 +.na
182 +\fB\fBcron\fR\fR
183 +.ad
184 +.RS 12n
185 +Designated for \fBcron\fR/\fBat\fR messages generated by systems that do
186 +logging through \fBsyslog\fR. The current version of the Solaris Operating
187 +Environment does not use this facility for logging.
188 +.RE
189 +
144 190 .sp
145 191 .ne 2
146 192 .na
147 193 \fB\fBlocal0-7\fR\fR
148 194 .ad
149 195 .RS 12n
150 196 Designated for local use.
151 197 .RE
152 198
153 199 .sp
154 200 .ne 2
155 201 .na
156 202 \fB\fBmark\fR\fR
157 203 .ad
158 204 .RS 12n
159 205 For timestamp messages produced internally by \fBsyslogd\fR.
160 206 .RE
161 207
162 208 .sp
163 209 .ne 2
164 210 .na
165 211 \fB\fB*\fR\fR
166 212 .ad
167 213 .RS 12n
168 214 An asterisk indicates all facilities except for the \fBmark\fR facility.
169 215 .RE
170 216
171 217 .sp
172 218 .LP
173 219 Recognized values for \fIlevel\fR are (in descending order of severity):
174 220 .sp
175 221 .ne 2
176 222 .na
177 223 \fB\fBemerg\fR\fR
178 224 .ad
179 225 .RS 11n
180 226 For panic conditions that would normally be broadcast to all users.
181 227 .RE
182 228
183 229 .sp
184 230 .ne 2
185 231 .na
186 232 \fB\fBalert\fR\fR
187 233 .ad
188 234 .RS 11n
189 235 For conditions that should be corrected immediately, such as a corrupted system
190 236 database.
191 237 .RE
192 238
193 239 .sp
194 240 .ne 2
195 241 .na
196 242 \fB\fBcrit\fR\fR
197 243 .ad
198 244 .RS 11n
199 245 For warnings about critical conditions, such as hard device errors.
200 246 .RE
201 247
202 248 .sp
203 249 .ne 2
204 250 .na
205 251 \fB\fBerr\fR\fR
206 252 .ad
207 253 .RS 11n
208 254 For other errors.
209 255 .RE
210 256
211 257 .sp
212 258 .ne 2
213 259 .na
214 260 \fB\fBwarning\fR\fR
215 261 .ad
216 262 .RS 11n
217 263 For warning messages.
218 264 .RE
219 265
220 266 .sp
221 267 .ne 2
222 268 .na
223 269 \fB\fBnotice\fR\fR
224 270 .ad
225 271 .RS 11n
226 272 For conditions that are not error conditions, but may require special handling.
227 273 A configuration entry with a \fIlevel\fR value of \fBnotice\fR must appear on a
228 274 separate line.
229 275 .RE
230 276
231 277 .sp
232 278 .ne 2
233 279 .na
234 280 \fB\fBinfo\fR\fR
235 281 .ad
236 282 .RS 11n
237 283 Informational messages.
238 284 .RE
239 285
240 286 .sp
241 287 .ne 2
242 288 .na
243 289 \fB\fBdebug\fR\fR
244 290 .ad
245 291 .RS 11n
246 292 For messages that are normally used only when debugging a program.
247 293 .RE
248 294
249 295 .sp
250 296 .ne 2
251 297 .na
252 298 \fB\fBnone\fR\fR
253 299 .ad
254 300 .RS 11n
255 301 Do not send messages from the indicated \fIfacility\fR to the selected file.
256 302 For example, a \fIselector\fR of
257 303 .sp
258 304 \fB*.debug;mail.none\fR
259 305 .sp
260 306 sends all messages \fIexcept\fR mail messages to the selected file.
261 307 .RE
262 308
263 309 .sp
264 310 .LP
265 311 For a given \fIfacility\fR and \fIlevel\fR, \fBsyslogd\fR matches all messages
266 312 for that level and all higher levels. For example, an entry that specifies a
267 313 level of \fBcrit\fR also logs messages at the \fBalert\fR and \fBemerg\fR
268 314 levels.
269 315 .sp
270 316 .LP
271 317 The \fIaction\fR field indicates where to forward the message. Values for this
272 318 field can have one of four forms:
273 319 .RS +4
274 320 .TP
275 321 .ie t \(bu
276 322 .el o
277 323 A filename, beginning with a leading slash, which indicates that messages
278 324 specified by the \fIselector\fR are to be written to the specified file. The
279 325 file is opened in append mode if it exists. If the file does not exist, logging
280 326 silently fails for this action.
281 327 .RE
282 328 .RS +4
283 329 .TP
284 330 .ie t \(bu
285 331 .el o
286 332 The name of a remote host, prefixed with an \fB@\fR, as with:
287 333 \fB@\fR\fIserver\fR, which indicates that messages specified by the
288 334 \fIselector\fR are to be forwarded to the \fBsyslogd\fR on the named host. The
289 335 hostname "loghost" is treated, in the default \fBsyslog.conf\fR, as the
290 336 hostname given to the machine that logs \fBsyslogd\fR messages. Every machine
291 337 is "loghost" by default, per the hosts database. It is also possible to specify
292 338 one machine on a network to be "loghost" by, literally, naming the machine
293 339 "loghost". If the local machine is designated to be "loghost", then
294 340 \fBsyslogd\fR messages are written to the appropriate files. Otherwise, they
295 341 are sent to the machine "loghost" on the network.
296 342 .RE
297 343 .RS +4
298 344 .TP
299 345 .ie t \(bu
300 346 .el o
301 347 A comma-separated list of usernames, which indicates that messages specified by
302 348 the \fIselector\fR are to be written to the named users if they are logged in.
303 349 .RE
304 350 .RS +4
305 351 .TP
306 352 .ie t \(bu
307 353 .el o
308 354 An asterisk, which indicates that messages specified by the \fIselector\fR are
309 355 to be written to all logged-in users.
310 356 .RE
311 357 .sp
312 358 .LP
313 359 Blank lines are ignored. Lines for which the first nonwhite character is
314 360 a '\fB#\fR' are treated as comments.
315 361 .SH EXAMPLES
316 362 .LP
317 363 \fBExample 1 \fRA Sample Configuration File
318 364 .sp
319 365 .LP
320 366 With the following configuration file:
321 367
322 368 .sp
323 369
324 370 .sp
325 371 .TS
326 372 l l
327 373 l l .
328 374 \fB*.notice\fR \fB/var/log/notice\fR
329 375 \fBmail.info\fR \fB/var/log/notice\fR
330 376 \fB*.crit\fR \fB/var/log/critical\fR
331 377 \fBkern,mark.debug\fR \fB/dev/console\fR
332 378 \fBkern.err\fR \fB@server\fR
333 379 \fB*.emerg\fR \fB*\fR
334 380 \fB*.alert\fR \fBroot,operator\fR
335 381 \fB*.alert;auth.warning\fR \fB/var/log/auth\fR
336 382 .TE
337 383
338 384 .sp
339 385 .LP
340 386 \fBsyslogd\fR(1M) logs all mail system messages except \fBdebug\fR messages and
341 387 all \fBnotice\fR (or higher) messages into a file named \fB/var/log/notice\fR.
342 388 It logs all critical messages into \fB/var/log/critical\fR, and all kernel
343 389 messages and 20-minute marks onto the system console.
344 390
345 391 .sp
346 392 .LP
347 393 Kernel messages of \fBerr\fR (error) severity or higher are forwarded to the
348 394 machine named \fBserver\fR. Emergency messages are forwarded to all users. The
349 395 users \fBroot\fR and \fBoperator\fR are informed of any \fBalert\fR messages.
350 396 All messages from the authorization system of \fBwarning\fR level or higher are
351 397 logged in the file \fB/var/log/auth\fR.
352 398
353 399 .SH ATTRIBUTES
354 400 .sp
355 401 .LP
356 402 See \fBattributes\fR(5) for descriptions of the following attributes:
357 403 .sp
358 404
359 405 .sp
360 406 .TS
361 407 box;
362 408 c | c
363 409 l | l .
364 410 ATTRIBUTE TYPE ATTRIBUTE VALUE
365 411 _
366 412 Interface Stability Stable
367 413 .TE
368 414
369 415 .SH SEE ALSO
370 416 .sp
371 417 .LP
372 418 \fBat\fR(1), \fBcrontab\fR(1), \fBlogger\fR(1), \fBlogin\fR(1), \fBlp\fR(1),
373 419 \fBlpc\fR(1B), \fBlpr\fR(1B), \fBm4\fR(1), \fBcron\fR(1M), \fBgetty\fR(1M),
374 420 \fBin.ftpd\fR(1M), \fBsu\fR(1M), \fBsyslogd\fR(1M), \fBsyslog\fR(3C),
375 421 \fBhosts\fR(4), \fBattributes\fR(5)
|
↓ open down ↓ |
222 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX