# # /etc/syslog.conf syslog configuration file. # # This file is processed by m4 so be careful to quote (`') names # that match m4 reserved words. Also, within ifdef's, arguments # containing commas must be quoted. # # History: <1> Oct.12'2000 Sean Boran # New example for workstations and small servers # Use /var/adm/messages rather that separate files per facility. # # Facilities: kern Priorities: emerg # user (highest first) alert # mail crit # daemon err # auth warning # syslog notice # lpr info # mark (timestamps) debug # news # uucp # cron none # local0..7 [don't send any messages] # # Funnies: 0. 'mail.info' logs all mail messages of priority # 'info' OR HIGHER (i.e. not just priority 'info')! # 1. you can do *.priority but not facility.* !! # 2. do "m4 syslog.conf" to check preprossing # 3. Must use tabs (not spaces) between selection and action # 4. "kern,mail.info" logs kern & mail messages of # at least priority info. The same for other combinations. # 5. Long lines don't work. # 6. You can have MAXIMUM 20 (non comment) lines in this file. # (The rest are silently ignored..) # # Debugging: . start syslogd with "-d" to enable debug output # . send a HUP to syslogd each time you change this file # . use /usr/ucb/logger to send test messages to # each facility.priority, for axample: # /usr/ucb/logger -p mail.warn "test from sean" # ### 1. What do we want logged on the console? # For lots of messages on the console uncomment this: #*.err;kern.warning;auth.err;daemon.err /dev/console # For minimal console messages, such as "SU": auth.err /dev/console ### 2. What do we want written to logged on user's terminals? # To alert logged on root or operator user to important events: #*.alert;kern.err;daemon.err operator #*.alert root # display emergencies on all terminals (uses WALL) *.emerg * ### 3. Are regular timstamps needed? # print time on console every 20mins (not needed if you have contool) #mark.* /dev/console ### 4. What do we want logged locally, if no remote logserver? # Log ALL messages, except debug stuff to /var/adm/message, # unless there is a loghost #*.info ifdef(`LOGHOST', /var/adm/messages, @loghost) ### 5. What do we want to log locally, even if there is a remote ### logserver? # Log ALL errors: *.debug /var/adm/messages ## eof