Differences

This shows you the differences between two versions of the page.

--- eduardo:linux:syslog [2010/07/29 04:36] – created eduardo
+++ eduardo:linux:syslog [2024/02/23 08:20] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
+====== Syslog ======
+  * Syslog Facilities
+^  **Severity Level**  ^  **Keyword**  ^ **Description** ^
+|  0  |  emergencies  | System unusable |
+|  1  |  alerts  | Immediate action required |
+|  2  |  critical  | Critical condition |
+|  3  |  errors  | Error conditions |
+|  4  |  warnings  | Warning conditions |
+|  5  |  notifications  | Normal but significant conditions |
+|  6  |  informational  | Informational messages |
+|  7  |  debugging  | Debugging messages |
+===== Configuration (Ubuntu/Debian) =====
+  * Modify config file /etc/syslog.conf
+==== Remote Syslog ====
+  * By default syslog doesn't expect to receive messages from remote clients. Here's how to configure your Linux server to start listening for these messages.
+  * Edit /etc/default/syslogd directly and make the SYSLOGD variable definition become "-r".
+  * Restart syslog server
+<code>
+# Options for start/restart the daemons
+# For remote UDP logging use SYSLOGD="-r"
+#
+#SYSLOGD="-u syslog"
+SYSLOGD="-r"
+</code>
+==== Restart Syslog ====
+  * Restart syslog server (Ubuntu/Debian)
+<code>
+sudo /etc/init.d/sysklogd restart
+</code>
+===== Configuration (Redhat) =====
+  * Modify config file /etc/syslog.conf
+==== Remote Syslog ====
+  * By default syslog doesn't expect to receive messages from remote clients. Here's how to configure your Linux server to start listening for these messages.
+  * On Redhat, Syslog will not listen for remote messages unless the SYSLOGD_OPTIONS variable in this file has a -r included in it as shown below.
+  * Restart syslog server
+<code>
+# Options to syslogd
+# -m 0 disables ’MARK’ messages.
+# -r enables logging from remote machines
+# -x disables DNS lookups on messages received with -r
+# See syslogd(8) for more details
+SYSLOGD_OPTIONS="-m 0 -r"
+# Options to klogd
+# -2 prints all kernel oops messages twice; once for klogd to decode, and
+# once for processing with ’ksymoops’
+# -x disables all klogd processing of oops messages entirely
+# See klogd(8) for more details
+KLOGD_OPTIONS="-2"
+</code>
+==== Restart Syslog ====
+  * Restart syslog server (Redhat)
+<code>
+service syslog restart
+</code>