NAME

syslog_evm.conf − EVM syslog subscription configuration file

SYNOPSIS

facility.priority

DESCRIPTION

The syslog_evm.conf file is a text file that specifies what syslog messages will be forwarded from the syslog daemon to the Event Manager, EVM,in the form of EVM events.  Those syslog messages are posted to the EVM daemon evmd by syslogd if the syslogd forwarding function is turned on with the -e flag.  Events are posted with the EVM name of sys.unix.syslog.facility-name. 

This configuration file is read every time syslogd starts, or is restarted by a SIGHUP signal.  If the file does not exist, or if it exists but contains no subscription lines, no syslog messages will be posted to EVM. 

Each line in the file controls the forwarding of one syslog event.  Lines beginning with the # character are considered comments and are ignored.  Only one subscription per line is permitted.  Mixing a subscription and a comment on the same line is not allowed. 

Each line has the format facility.priority[+]. 

facilitySpecifies the part of the system that generated the message.  Legal values are the following:

∗All messages. 

kernMessages generated by the kernel. 

userMessages generated by user processes. 

mailMessages generated by the mail system. 

daemonMessages generated by system daemons. 

authMessages generated by the authorization system. 

syslogMessages generated internal to the syslog system. 

lprMessages generated by the line printer spooling system. 

newsMessages generated by the system news command. 

uucpMessages generated by the UNIX to UNIX copy system. 

cronMessages generated by the system clock daemon. 

megasafe

rfsMessages generated by remote file systems. 

local0 - local7
Available for local use.

priorityIndicates the priority of the message.  If the priority is followed by a + character, events which are of the specified priority or higher are forwarded; otherwise only events which exactly match the priority are forwarded. 

The priority level must be one of the following:

∗Forward messages of any priority. 

emergForward messages of emergency priority. 

alertForward messages of alert priority. 

critForward messages of critical priority. 

errForward messages of error priority. 

warning
Forward messages of warning priority.

noticeForward messages of notice priority. 

infoForward messages of information priority. 

debugForward messages of debug priority. 

EXAMPLES

This example causes syslogd to forward events to EVM as follows:

     1.All messages of emergency priority are forwarded. 

     2.All messages generated in the kernel which have a priority of info or greater are forwarded. 

     3.All messages generated by users, by the mail subsystem or by the system daemons which have a priority of info or greater are forwarded. 

∗.emerg
kern.info+
user.notice+
mail.notice+
daemon.notice+

FILES

/etc/syslog.confLocation of the system logger configuration file. 

/etc/syslog_evm.conf
Location of the EVM syslog subscription configuration file.

/etc/evmlogger.confLocation of the EVM logger configuration file. 

SEE ALSO

Commands: evmd(8), evmlogger(8), syslog(1), syslogd(8)

Routines: syslog(3)

Event Management: EVM(5)