Index for Section 4

Alphabetical listing for S

Bottom of page

syslog_evm.conf(4)
NAME
  syslog_evm.conf - EVM syslog subscription configuration file

SYNOPSIS
  facility.priority

DESCRIPTION
  The syslog_evm.conf file is a text file that specifies what syslog messages
  will be forwarded from the syslog daemon to the Event Manager, EVM,in the
  form of EVM events.  Those syslog messages are posted to the EVM daemon
  evmd by syslogd if the syslogd forwarding function is turned on with the -e
  flag.	 Events are posted with the EVM name of sys.unix.syslog.facility-
  name.

  This configuration file is read every time syslogd starts, or is restarted
  by a SIGHUP signal.  If the file does not exist, or if it exists but
  contains no subscription lines, no syslog messages will be posted to EVM.

  Each line in the file controls the forwarding of one syslog event.  Lines
  beginning with the # character are considered comments and are ignored.
  Only one subscription per line is permitted.	Mixing a subscription and a
  comment on the same line is not allowed.

  Each line has the format facility.priority[+].

  facility
      Specifies the part of the system that generated the message.  Legal
      values are the following:

      *	  All messages.

      kern
	  Messages generated by the kernel.

      user
	  Messages generated by user processes.

      mail
	  Messages generated by the mail system.

      daemon
	  Messages generated by system daemons.

      auth
	  Messages generated by the authorization system.

      syslog
	  Messages generated internal to the syslog system.

      lpr Messages generated by the line printer spooling system.

      news
	  Messages generated by the system news command.

      uucp
	  Messages generated by the UNIX to UNIX copy system.

      cron
	  Messages generated by the system clock daemon.

      megasafe

      rfs Messages generated by remote file systems.

      local0 - local7
	  Available for local use.

  priority
      Indicates the priority of the message.  If the priority is followed by
      a + character, events which are of the specified priority or higher are
      forwarded; otherwise only events which exactly match the priority are
      forwarded.

      The priority level must be one of the following:

      *	  Forward messages of any priority.

      emerg
	  Forward messages of emergency priority.

      alert
	  Forward messages of alert priority.

      crit
	  Forward messages of critical priority.

      err Forward messages of error priority.

      warning
	  Forward messages of warning priority.

      notice
	  Forward messages of notice priority.

      info
	  Forward messages of information priority.

      debug
	  Forward messages of debug priority.

EXAMPLES
  This example causes syslogd to forward events to EVM as follows:

   1.  All messages of emergency priority are forwarded.

   2.  All messages generated in the kernel which have a priority of info or
       greater are forwarded.

   3.  All messages generated by users, by the mail subsystem or by the
       system daemons which have a priority of info or greater are forwarded.

       *.emerg
       kern.info+
       user.notice+
       mail.notice+
       daemon.notice+

FILES
  /etc/syslog.conf
	     Location of the system logger configuration file.

  /etc/syslog_evm.conf
	     Location of the EVM syslog subscription configuration file.

  /etc/evmlogger.conf
	     Location of the EVM logger configuration file.

SEE ALSO
  Commands: evmd(8), evmlogger(8), syslog(1), syslogd(8)

  Routines: syslog(3)

  Event Management: EVM(5)

Index for Section 4

Alphabetical listing for S

Top of page