topic Re: syslog and facility level in Operating System - HP-UX

syslog and facility level

tash S — Tue, 22 Aug 2006 06:06:01 GMT

Hello All,

Our application prints the syslog the following format on Solaris.
aaa [xxxx user.info] zzz

But when we try to migrate the application on HP-UX 11i from Solaris, the syslog can not generate the facility level that means like "use.info".

We add the syslog.conf and
/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

==================
...
*.err /var/adm/syslog/syslog.log
*.info /var/adm/syslog/syslog.log

==================

Is this the same mechanism between Solaris and HP-UX 11i?
or do we miss something procedure ?

Thanks,
-tash S

Re: syslog and facility level

Peter Godron — Tue, 22 Aug 2006 06:29:41 GMT

Hi,
what happens in the /var/adm/syslog/syslog.log file if you do:
logger -p user.info -t USER_INFO TESTINGINFO
logger -p user.warn -t USER_WARN TESTWARNING

Re: syslog and facility level

Bill Hassell — Tue, 22 Aug 2006 08:15:51 GMT

The facility and priority names are documented in the man page for syslog. There is no facility called "use". You probably mean "user.info" which you can generate using logger and see the result in syslog.log:

logger -p user.info "This is a test"

Here are the facility names in HP-UX:
KERN
USER
MAIL
DAEMON
AUTH
SYSLOG
LPR
NEWS
UUCP
CRON
LOCAL0-7

And these are the priority names:
EMERG
ALERT
CRIT
ERR
WARNING
NOTICE
INFO
DEBUG

Re: syslog and facility level

florin_10 — Tue, 22 Aug 2006 22:25:57 GMT

Hi Tash

Between facitily level and logging file HAVE to use TABs ONLY; spaces will not work.
Also sendig a -HUP to syslogd (or starting/stopping as you did) after any change in the sys.conf file is neccesary.
The concept is identical between the two UNIX flavors.

Cheers
Florin

Re: syslog and facility level

tash S — Tue, 22 Aug 2006 23:21:17 GMT

Hi All,

The question is that How to show facility level which is similar to Solaris?

# logger -p user.info "This is a test"

===================
Aug 23 3:14:11 xxx-hp root: This is a test
===================

Here is Solaris running example.

# logger -p user.info "This is a test"
===================
Aug 23 3:22:41 xxxx root: [ID 702911 user.info] This is a test
===================

You can see ID and "use.info"

Thanks,
-tash S

Re: syslog and facility level

Bill Hassell — Wed, 23 Aug 2006 09:47:20 GMT

The syslogd man page will help. The option is -v which will add the facility and priority level in front of the hostname for each message. NOTE: This is a simple 2-character code like 6D which means: DAEMON:INFO or 2A which is KERN:CRIT. You can manually decode the these characters with the syslog man page or use the attached script. It reports only those lines in the file that have the codes added. It will also read any other file including a compressed syslog file.

Re: syslog and facility level

florin_10 — Tue, 19 Sep 2006 22:40:20 GMT

The following is an extract from http://docs.hp.com/en/B2355-60105/logger.1.html

Send output from the users command (see users(1) to the syslogd daemon, marked as level info and facility local0. The message is tagged with the string USERS:

users | logger -p local0.info -t USERS

cheers
florin