syslog.conf(5)                 DG/UX R4.11MU05                syslog.conf(5)


NAME
       syslog.conf - configuration file for syslogd system log server

SYNOPSIS
       /etc/syslog.conf

DESCRIPTION
       The file /etc/syslog.conf contains information used by the system log
       server (daemon), syslogd(1M), to forward a system message to
       appropriate log files and/or users.

       A configuration entry is composed of two TAB-separated fields:

              selector       action

       The selector field contains a semicolon-separated list of priority
       specifications of the form:

              facility.level[;facility.level]

       where facility is a system facility, or comma-separated list of
       facilities, and level is an indication to log messages of severity
       level and greater.  Recognized values for facility include:

              user      Messages generated by user processes.  This is the
                        default priority for messages from programs or
                        facilities not listed in this file.

              kern      Messages generated by the kernel.

              mail      Reserved for the mail system.

              daemon    System servers, such as ftpd(1M).

              auth      Messages generated by the system's authorization
                        services.

              lpr       Messages generated by the lpr/lpd line printer
                        spooling system.

              news      Reserved for the USENET network news system.

              uucp      Reserved for the UUCP system; it does not currently
                        use the syslog mechanism.

              cron      Reserved for the cron system; it does not currently
                        use the syslog mechanism.

              local0-7  Reserved for local use.

              mark      For timestamp messages produced internally by
                        syslogd.

              *         An asterisk indicates all facilities except for the
                        mark facility.

       Recognized values for level are (in descending order of severity):

              emerg     For halt conditions that would normally be broadcast
                        to all users.

              alert     For conditions that should be corrected immediately,
                        such as a corrupted system database.

              crit      For warnings about critical conditions, such as hard
                        device errors.

              err       For other errors.

              warning   For warning messages.

              notice    For conditions that are not error conditions, but
                        may require special handling.

              info      Informational messages.

              debug     For messages that are normally used only when
                        debugging a program.

              none      Do not send messages from the indicated facility to
                        the selected file.  For example, a selector of

                             *.debug;mail.none

                        will send all messages except mail messages to the
                        selected file.

       The action field indicates where to forward the message.  Values for
       this field can have one of four forms:

              ·  A filename, beginning with a leading slash, which indicates
                 that messages specified by the selector are to be written
                 to the specified file.  The file will be opened in append
                 mode.  Selecting /dev/console will cause /dev/syscon to be
                 opened by syslogd instead.  The messages will still appear
                 on the screen known as /dev/console.  This change is made
                 to accommodate secure systems.

              ·  The name of a remote host, prefixed with an @, as with:
                 @server, which indicates that messages specified by the
                 selector are to be forwarded to the syslogd on the named
                 host.

              ·  A comma-separated list of usernames, which indicates that
                 messages specified by the selector are to be written to the
                 named users if they are logged in.

              ·  An asterisk, which indicates that messages specified by the
                 selector are to be written to all logged-in users.

              Blank lines are ignored.  Lines for which the first nonwhite
              character is a `#' are treated as comments.

EXAMPLE
       With the following configuration file:

            *.notice;mail.info     /usr/adm/notice
            *.crit                 /usr/adm/critical
            kern,mark.debug        /dev/console
            kern.err               @server
            *.emerg                *
            *.alert                root,operator
            *.alert;auth.warning   /usr/adm/auth

       syslogd will log all mail system messages except debug messages and
       all notice (or higher) messages into a file named /usr/adm/notice.
       It logs all critical messages into /usr/adm/critical, and all kernel
       messages and 20-minute marks onto the system console.

       Kernel messages of err (error) severity or higher are forwarded to
       the machine named server.  Emergency messages are forwarded to all
       users.  The users "root" and "operator" are informed of any alert
       messages.  All messages from the authorization system of warning
       level or higher are logged in the file /usr/adm/auth.

SEE ALSO
       logger(1), syslogd(1M), syslog(3C).


Licensed material--property of copyright holder(s)