Print this page
4211 Some syslog facility names and symbols are missing
1762 Syslogd man page: missing reference.
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/man/man4/syslog.conf.4
+++ new/usr/src/man/man4/syslog.conf.4
1 1 '\" te
2 +.\" Copyright (c) 2013 Gary Mills
2 3 .\" Copyright (c) 2003 Sun Microsystems, Inc. All Rights Reserved.
3 4 .\" Copyright (c) 1983 Regents of the University of California. All rights reserved. The Berkeley software License Agreement specifies the terms and conditions for redistribution.
4 -.TH SYSLOG.CONF 4 "Apr 26, 2006"
5 +.TH SYSLOG.CONF 4 "Nov 19, 2013"
5 6 .SH NAME
6 7 syslog.conf \- configuration file for syslogd system log daemon
7 8 .SH SYNOPSIS
8 9 .LP
9 10 .nf
10 11 \fB/etc/syslog.conf\fR
11 12 .fi
12 13
13 14 .SH DESCRIPTION
14 15 .sp
15 16 .LP
16 17 The file \fB/etc/syslog.conf\fR contains information used by the system log
17 18 daemon, \fBsyslogd\fR(1M), to forward a system message to appropriate log files
18 19 and/or users. \fBsyslogd\fR preprocesses this file through \fBm4\fR(1) to
19 20 obtain the correct information for certain log files, defining \fBLOGHOST\fR if
20 21 the address of "loghost" is the same as one of the addresses of the host that
21 22 is running \fBsyslogd\fR.
22 23 .sp
23 24 .LP
24 25 A configuration entry is composed of two TAB-separated fields:
25 26 .sp
26 27 .in +2
27 28 .nf
28 29 \fIselector action\fR
29 30 .fi
30 31 .in -2
31 32
32 33 .sp
33 34 .LP
34 35 The \fIselector\fR field contains a semicolon-separated list of priority
35 36 specifications of the form:
36 37 .sp
|
↓ open down ↓ |
22 lines elided |
↑ open up ↑ |
37 38 .in +2
38 39 .nf
39 40 \fIfacility\fR\fB\&.\fR\fIlevel\fR [ \fB;\fR \fIfacility\fR\fB\&.\fR\fIlevel\fR ]
40 41 .fi
41 42 .in -2
42 43
43 44 .sp
44 45 .LP
45 46 where \fIfacility\fR is a system facility, or comma-separated list of
46 47 facilities, and \fIlevel\fR is an indication of the severity of the condition
47 -being logged. Recognized values for \fIfacility\fR include:
48 +being logged.
49 +The presence of a facility name only implies that it is available.
50 +Each individual service determines which facility it will use for logging.
51 +In particular, many facilities are only useful for \fBsyslog\fR messages
52 +that are forwarded from other operating systems.
53 +Recognized values for \fIfacility\fR include:
48 54 .sp
49 55 .ne 2
50 56 .na
51 -\fB\fBuser\fR\fR
57 +\fB\fBkern\fR\fR
52 58 .ad
53 59 .RS 12n
54 -Messages generated by user processes. This is the default priority for messages
55 -from programs or facilities not listed in this file.
60 +Messages generated by the kernel.
56 61 .RE
57 62
58 63 .sp
59 64 .ne 2
60 65 .na
61 -\fB\fBkern\fR\fR
66 +\fB\fBuser\fR\fR
62 67 .ad
63 68 .RS 12n
64 -Messages generated by the kernel.
69 +Messages generated by user processes. This is the default priority for messages
70 +from programs or facilities not listed in this file.
65 71 .RE
66 72
67 73 .sp
68 74 .ne 2
69 75 .na
70 76 \fB\fBmail\fR\fR
71 77 .ad
72 78 .RS 12n
73 79 The mail system.
74 80 .RE
75 81
76 82 .sp
77 83 .ne 2
78 84 .na
79 85 \fB\fBdaemon\fR\fR
80 86 .ad
81 87 .RS 12n
82 -System daemons, such as \fBin.ftpd\fR(1M)
88 +Various system daemons.
83 89 .RE
84 90
85 91 .sp
86 92 .ne 2
87 93 .na
88 94 \fB\fBauth\fR\fR
89 95 .ad
90 96 .RS 12n
91 97 The authorization system: \fBlogin\fR(1), \fBsu\fR(1M), \fBgetty\fR(1M), among
92 98 others.
93 99 .RE
94 100
95 101 .sp
96 102 .ne 2
97 103 .na
98 104 \fB\fBlpr\fR\fR
99 105 .ad
100 106 .RS 12n
101 107 The line printer spooling system: \fBlpr\fR(1B), \fBlpc\fR(1B), among others.
102 108 .RE
103 109
104 110 .sp
105 111 .ne 2
106 112 .na
107 113 \fB\fBnews\fR\fR
108 114 .ad
109 115 .RS 12n
110 116 Designated for the USENET network news system.
111 117 .RE
112 118
113 119 .sp
114 120 .ne 2
115 121 .na
|
↓ open down ↓ |
23 lines elided |
↑ open up ↑ |
116 122 \fB\fBuucp\fR\fR
117 123 .ad
118 124 .RS 12n
119 125 Designated for the UUCP system; it does not currently use the \fBsyslog\fR
120 126 mechanism.
121 127 .RE
122 128
123 129 .sp
124 130 .ne 2
125 131 .na
126 -\fB\fBcron\fR\fR
132 +\fB\fBaltcron\fR\fR
127 133 .ad
128 134 .RS 12n
129 -Designated for \fBcron\fR/\fBat\fR messages generated by systems that do
130 -logging through \fBsyslog\fR. The current version of the Solaris Operating
131 -Environment does not use this facility for logging.
135 +Designated for the BSD cron/at system.
132 136 .RE
133 137
134 138 .sp
135 139 .ne 2
136 140 .na
141 +\fB\fBauthpriv\fR\fR
142 +.ad
143 +.RS 12n
144 +Designated for the BSD security/authorization system.
145 +.RE
146 +
147 +.sp
148 +.ne 2
149 +.na
150 +\fB\fBftp\fR\fR
151 +.ad
152 +.RS 12n
153 +Designated for the file transfer system.
154 +The current version of \fBin.ftpd\fR(1M) does not use this facility
155 +for logging.
156 +.RE
157 +
158 +.sp
159 +.ne 2
160 +.na
161 +\fB\fBntp\fR\fR
162 +.ad
163 +.RS 12n
164 +Designated for the network time system.
165 +.RE
166 +
167 +.sp
168 +.ne 2
169 +.na
137 170 \fB\fBaudit\fR\fR
138 171 .ad
139 172 .RS 12n
140 173 Designated for audit messages generated by systems that audit by means of
141 174 syslog.
142 175 .RE
143 176
177 +.sp
178 +.ne 2
179 +.na
180 +\fB\fBconsole\fR\fR
181 +.ad
182 +.RS 12n
183 +Designated for the BSD console system.
184 +.RE
185 +
186 +.sp
187 +.ne 2
188 +.na
189 +\fB\fBcron\fR\fR
190 +.ad
191 +.RS 12n
192 +Designated for \fBcron\fR/\fBat\fR messages generated by systems that do
193 +logging through \fBsyslog\fR.
194 +The current versions of \fBcron\fR and \fBat\fR do not use this facility
195 +for logging.
196 +.RE
197 +
144 198 .sp
145 199 .ne 2
146 200 .na
147 201 \fB\fBlocal0-7\fR\fR
148 202 .ad
149 203 .RS 12n
150 204 Designated for local use.
151 205 .RE
152 206
153 207 .sp
154 208 .ne 2
155 209 .na
156 210 \fB\fBmark\fR\fR
157 211 .ad
158 212 .RS 12n
159 213 For timestamp messages produced internally by \fBsyslogd\fR.
160 214 .RE
161 215
162 216 .sp
163 217 .ne 2
164 218 .na
165 219 \fB\fB*\fR\fR
166 220 .ad
167 221 .RS 12n
168 222 An asterisk indicates all facilities except for the \fBmark\fR facility.
169 223 .RE
170 224
171 225 .sp
172 226 .LP
173 227 Recognized values for \fIlevel\fR are (in descending order of severity):
174 228 .sp
175 229 .ne 2
176 230 .na
177 231 \fB\fBemerg\fR\fR
178 232 .ad
179 233 .RS 11n
180 234 For panic conditions that would normally be broadcast to all users.
181 235 .RE
182 236
183 237 .sp
184 238 .ne 2
185 239 .na
186 240 \fB\fBalert\fR\fR
187 241 .ad
188 242 .RS 11n
189 243 For conditions that should be corrected immediately, such as a corrupted system
190 244 database.
191 245 .RE
192 246
193 247 .sp
194 248 .ne 2
195 249 .na
196 250 \fB\fBcrit\fR\fR
197 251 .ad
198 252 .RS 11n
199 253 For warnings about critical conditions, such as hard device errors.
200 254 .RE
201 255
202 256 .sp
203 257 .ne 2
204 258 .na
205 259 \fB\fBerr\fR\fR
206 260 .ad
207 261 .RS 11n
208 262 For other errors.
209 263 .RE
210 264
211 265 .sp
212 266 .ne 2
213 267 .na
214 268 \fB\fBwarning\fR\fR
215 269 .ad
216 270 .RS 11n
217 271 For warning messages.
218 272 .RE
219 273
220 274 .sp
221 275 .ne 2
222 276 .na
223 277 \fB\fBnotice\fR\fR
224 278 .ad
225 279 .RS 11n
226 280 For conditions that are not error conditions, but may require special handling.
227 281 A configuration entry with a \fIlevel\fR value of \fBnotice\fR must appear on a
228 282 separate line.
229 283 .RE
230 284
231 285 .sp
232 286 .ne 2
233 287 .na
234 288 \fB\fBinfo\fR\fR
235 289 .ad
236 290 .RS 11n
237 291 Informational messages.
238 292 .RE
239 293
240 294 .sp
241 295 .ne 2
242 296 .na
243 297 \fB\fBdebug\fR\fR
244 298 .ad
245 299 .RS 11n
246 300 For messages that are normally used only when debugging a program.
247 301 .RE
248 302
249 303 .sp
250 304 .ne 2
251 305 .na
252 306 \fB\fBnone\fR\fR
253 307 .ad
254 308 .RS 11n
255 309 Do not send messages from the indicated \fIfacility\fR to the selected file.
256 310 For example, a \fIselector\fR of
257 311 .sp
258 312 \fB*.debug;mail.none\fR
259 313 .sp
260 314 sends all messages \fIexcept\fR mail messages to the selected file.
261 315 .RE
262 316
263 317 .sp
264 318 .LP
265 319 For a given \fIfacility\fR and \fIlevel\fR, \fBsyslogd\fR matches all messages
266 320 for that level and all higher levels. For example, an entry that specifies a
267 321 level of \fBcrit\fR also logs messages at the \fBalert\fR and \fBemerg\fR
268 322 levels.
269 323 .sp
270 324 .LP
271 325 The \fIaction\fR field indicates where to forward the message. Values for this
272 326 field can have one of four forms:
273 327 .RS +4
274 328 .TP
275 329 .ie t \(bu
276 330 .el o
277 331 A filename, beginning with a leading slash, which indicates that messages
278 332 specified by the \fIselector\fR are to be written to the specified file. The
279 333 file is opened in append mode if it exists. If the file does not exist, logging
280 334 silently fails for this action.
281 335 .RE
282 336 .RS +4
283 337 .TP
284 338 .ie t \(bu
285 339 .el o
286 340 The name of a remote host, prefixed with an \fB@\fR, as with:
287 341 \fB@\fR\fIserver\fR, which indicates that messages specified by the
288 342 \fIselector\fR are to be forwarded to the \fBsyslogd\fR on the named host. The
289 343 hostname "loghost" is treated, in the default \fBsyslog.conf\fR, as the
290 344 hostname given to the machine that logs \fBsyslogd\fR messages. Every machine
291 345 is "loghost" by default, per the hosts database. It is also possible to specify
292 346 one machine on a network to be "loghost" by, literally, naming the machine
293 347 "loghost". If the local machine is designated to be "loghost", then
294 348 \fBsyslogd\fR messages are written to the appropriate files. Otherwise, they
295 349 are sent to the machine "loghost" on the network.
296 350 .RE
297 351 .RS +4
298 352 .TP
299 353 .ie t \(bu
300 354 .el o
301 355 A comma-separated list of usernames, which indicates that messages specified by
302 356 the \fIselector\fR are to be written to the named users if they are logged in.
303 357 .RE
304 358 .RS +4
305 359 .TP
306 360 .ie t \(bu
307 361 .el o
308 362 An asterisk, which indicates that messages specified by the \fIselector\fR are
309 363 to be written to all logged-in users.
310 364 .RE
311 365 .sp
312 366 .LP
313 367 Blank lines are ignored. Lines for which the first nonwhite character is
314 368 a '\fB#\fR' are treated as comments.
315 369 .SH EXAMPLES
316 370 .LP
317 371 \fBExample 1 \fRA Sample Configuration File
318 372 .sp
319 373 .LP
320 374 With the following configuration file:
321 375
322 376 .sp
323 377
324 378 .sp
325 379 .TS
326 380 l l
327 381 l l .
328 382 \fB*.notice\fR \fB/var/log/notice\fR
329 383 \fBmail.info\fR \fB/var/log/notice\fR
330 384 \fB*.crit\fR \fB/var/log/critical\fR
331 385 \fBkern,mark.debug\fR \fB/dev/console\fR
332 386 \fBkern.err\fR \fB@server\fR
333 387 \fB*.emerg\fR \fB*\fR
334 388 \fB*.alert\fR \fBroot,operator\fR
335 389 \fB*.alert;auth.warning\fR \fB/var/log/auth\fR
336 390 .TE
337 391
338 392 .sp
339 393 .LP
340 394 \fBsyslogd\fR(1M) logs all mail system messages except \fBdebug\fR messages and
341 395 all \fBnotice\fR (or higher) messages into a file named \fB/var/log/notice\fR.
342 396 It logs all critical messages into \fB/var/log/critical\fR, and all kernel
343 397 messages and 20-minute marks onto the system console.
344 398
345 399 .sp
346 400 .LP
347 401 Kernel messages of \fBerr\fR (error) severity or higher are forwarded to the
348 402 machine named \fBserver\fR. Emergency messages are forwarded to all users. The
349 403 users \fBroot\fR and \fBoperator\fR are informed of any \fBalert\fR messages.
350 404 All messages from the authorization system of \fBwarning\fR level or higher are
351 405 logged in the file \fB/var/log/auth\fR.
352 406
353 407 .SH ATTRIBUTES
354 408 .sp
355 409 .LP
356 410 See \fBattributes\fR(5) for descriptions of the following attributes:
357 411 .sp
358 412
359 413 .sp
360 414 .TS
361 415 box;
362 416 c | c
363 417 l | l .
364 418 ATTRIBUTE TYPE ATTRIBUTE VALUE
365 419 _
366 420 Interface Stability Stable
367 421 .TE
368 422
369 423 .SH SEE ALSO
370 424 .sp
371 425 .LP
372 426 \fBat\fR(1), \fBcrontab\fR(1), \fBlogger\fR(1), \fBlogin\fR(1), \fBlp\fR(1),
373 427 \fBlpc\fR(1B), \fBlpr\fR(1B), \fBm4\fR(1), \fBcron\fR(1M), \fBgetty\fR(1M),
374 428 \fBin.ftpd\fR(1M), \fBsu\fR(1M), \fBsyslogd\fR(1M), \fBsyslog\fR(3C),
375 429 \fBhosts\fR(4), \fBattributes\fR(5)
|
↓ open down ↓ |
222 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX