Seth Woolley's Man Viewer

syslogd(8) - syslogd - log systems messages - man 8 syslogd

([section] manual, -k keyword, -K [section] search, -f whatis)
man plain no title

SYSLOGD(8)                                                          SYSLOGD(8)

       syslogd - log systems messages

       syslogd [ -fconfigfile ] [ -mmarkinterval ] [ -d ]

       Syslogd  reads  and  logs messages into a set(7,n,1 builtins) of files described by the
       configuration file(1,n) /etc/syslog.conf.  Each message is one line.  A mes-
       sage can contain a priority code, marked by a number in(1,8) angle braces at
       the beginning of the line.  Priorities are defined  in(1,8)  <sys/syslog.h>.
       Syslogd  reads  from  the UNIX domain socket(2,7,n) /dev/log, from an Internet
       domain socket(2,7,n) specified in(1,8) /etc/services, and from the  special  device
       /dev/klog (to read(2,n,1 builtins) kernel messages).

       Syslogd  configures when it starts up and whenever it receives a hangup
       signal.  Lines in(1,8) the configuration file(1,n) have a selector  to  determine
       the  message  priorities  to which the line applies and an action.  The
       action field are separated from the selector by one or more tabs.

       Selectors are semicolon separated lists of priority  specifiers.   Each
       priority  has  a facility describing the part of the system that gener-
       ated the message, a dot, and a level indicating  the  severity  of  the
       message.   Symbolic names may be used.  An asterisk selects all facili-
       ties.  All messages of the specified level or higher (greater severity)
       are  selected.   More than one facility may be selected using commas to
       separate them.  For example:


       Selects all facilities at the emerg  level  and  the  mail(1,8)  and  daemon
       facilities at the crit level.

       Known  facilities  and levels recognized by syslogd are those listed in(1,8)
       syslog(2,3,5,3 Sys::Syslog)(3)  without  the  leading  ``LOG_''.   The  additional  facility
       ``mark'' has a message at priority LOG_INFO sent to it every 20 minutes
       (this may be changed with the -m flag).  The ``mark'' facility  is  not
       enabled by a facility field containing an asterisk.  The level ``none''
       may be used to disable a particular facility.  For example,


       Sends all messages except mail(1,8) messages to the selected file.

       The second part of each line describes  where  the  message  is  to  be
       logged if(3,n) this line is selected.  There are four forms:

         A  filename  (beginning  with  a  leading  slash).  The file(1,n) will be
          opened in(1,8) append mode.

         A hostname preceeded by an at sign (``@'').  Selected  messages  are
          forwarded to the syslogd on the named(5,8) host.

         A  comma  separated list of users.  Selected messages are written to
          those users(1,5) if(3,n) they are logged in.

         An asterisk.  Selected messages are written to all logged-in  users.

       Blank lines and lines beginning with `#' are ignored.

       For example, the configuration file:

           kern,mark.debug        /dev/console(4,n)
           *.notice;     /var/log/maillog
           *.crit                 /var/log/critical
           kern.err               @ucbarpa
           *.emerg                *
           *.alert                eric,kridle
           *.alert;auth.warning   ralph

       logs  all  kernel messages and 20 minute marks onto the system console(4,n),
       all notice (or higher) level messages  and  all  mail(1,8)  system  messages
       except  debug messages into the file(1,n) /var/log/maillog, and all critical
       messages into /var/log/critical; kernel messages of error(8,n)  severity  or
       higher  are  forwarded  to  ucbarpa.  All users(1,5) will be informed of any
       emergency messages, the users(1,5) ``eric'' and ``kridle'' will be  informed
       of  any  alert messages, and the user ``ralph'' will be informed of any
       alert message, or any warning message (or higher) from  the  authoriza-
       tion system.

       The flags are:

       -f   Specify an alternate configuration file.

       -m   Select the number of minutes between mark messages.

       -d   Turn on debugging.

       Syslogd creates the file(1,n) /var/run/, if(3,n) possible, containing a
       single line with its process id.  This can be used to kill(1,2,1 builtins) or reconfig-
       ure syslogd.

       To  bring syslogd down, it should be sent a terminate signal(2,7) (e.g. kill(1,2,1 builtins)
       `cat /var/run/`).

       /etc/syslog.conf    the configuration file(1,n)
       /var/run/ the process id
       /dev/log            Name of the UNIX domain datagram log socket(2,7,n)
       /dev/klog           The kernel log device

       logger(1), syslog(2,3,5,3 Sys::Syslog)(3)

4.2 Berkeley Distribution        June 27, 1990                      SYSLOGD(8)

References for this manual (incoming links)