cancel
Showing results for 
Search instead for 
Did you mean: 

recommended syslogd messages

Richard Woolley
Frequent Advisor

recommended syslogd messages

Hi.

Im looking into enhancing our syslogd messages. After reading the man page it looks straightforward, but Im wondering if anyone has any suggestions, Im looking at making the level of logging by syslog higher so that i can receive more event notifications.

any help received appreciated!

cheers,

mark.
4 REPLIES
Richard Woolley
Frequent Advisor

Re: recommended syslogd messages

ps, sorry this was meant to go into administration and NOT databases!
Steve Steel
Honored Contributor

Re: recommended syslogd messages

Hi

1)man syslogd


syslogd(1M) syslogd(1M)

NAME
syslogd - log system messages

SYNOPSIS
/usr/sbin/syslogd [-d] [-D] [-f configfile] [-m markinterval]

DESCRIPTION
The syslogd command reads and logs messages into a set of files
described by the configuration file /etc/syslog.conf.



2)You can log own messages using the logger command


steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)
Colin Topliss
Esteemed Contributor

Re: recommended syslogd messages

I'd be a little cautious. You may well end up with way more going into your syslog than you intended. This can have a knock on effect, as your syslog could grow at an extremely fast rate.

If you're going to do this, keep an eye on how much disk space you have free (so you don't fill up your lvol and cause other problems) and look closely at your log rotation periods (assuming that you have implemented some form of log rotation that is).
Steve Steel
Honored Contributor

Re: recommended syslogd messages

Hi

The space advice is well put

cat /etc/syslog.conf
# @(#) $Revision: 74.1 $
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *

You can always use different files by moving the syslog out everyday. reducing it to 0 and backing up the days copy.


Steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)