Update man pages with new per-rule options and fix old paths
Signed-off-by: Joachim Nilsson <troglobit@gmail.com>
This commit is contained in:
@@ -193,22 +193,28 @@ version and exit.
|
||||
.Sh CONFIGURATION FILE SYNTAX DIFFERENCES
|
||||
.Nm
|
||||
uses a slightly different syntax for its configuration file than the
|
||||
original BSD sources. Originally all messages of a specific priority
|
||||
and above were forwarded to the log file.
|
||||
original BSD sources. First, rules may now also have a third field
|
||||
.Cm ;OPTION .
|
||||
Several options are supported, comma separated, that control formatting
|
||||
and log rotation, for more on this see
|
||||
.Xr syslog.conf 5 .
|
||||
Second, originally all messages of a specific priority and above were
|
||||
forwarded to the log file.
|
||||
.Pp
|
||||
For example the following line caused ALL output from daemons using
|
||||
the daemon facilities (debug is the lowest priority, so every higher
|
||||
will also match) to go into
|
||||
.Pa /usr/adm/daemons :
|
||||
For example the following line send all output from daemons using the
|
||||
daemon facilities (debug is the lowest priority, so every higher will
|
||||
also match) to go into
|
||||
.Pa /var/log/daemons :
|
||||
.Bd -literal -offset indent
|
||||
# Sample syslog.conf
|
||||
daemon.debug /usr/adm/daemons
|
||||
daemon.debug /var/log/daemons
|
||||
.Ed
|
||||
.Pp
|
||||
Under the new scheme this behavior remains the same. The difference is
|
||||
the addition of four new specifiers, the asterisk ('*') wildcard, the
|
||||
equation sign ('='), the exclamation mark ('!'), and the minus sign
|
||||
('-').
|
||||
With
|
||||
.Nm
|
||||
this behavior remains the same. The difference is the addition of four
|
||||
additional specifiers, the asterisk ('*') wildcard, the equation sign
|
||||
('='), the exclamation mark ('!'), and the minus sign ('-').
|
||||
.Pp
|
||||
The '*' specifies that all messages for the specified facility are to be
|
||||
directed to the destination. Note that this behavior is degenerate with
|
||||
@@ -220,13 +226,14 @@ class. This allows, for example, routing only debug messages to a
|
||||
particular logging source.
|
||||
.Pp
|
||||
For example, the following line in
|
||||
.Pa syslog.conf
|
||||
.Pa /etc/syslog.conf
|
||||
directs debug messages from all sources to the
|
||||
.Pa /usr/adm/debug
|
||||
file.
|
||||
.Pa /var/log/debug
|
||||
file in RFC5424 format, with log rotation every 512 kiB, saving only 20
|
||||
files in total (including the non-rotated file):
|
||||
.Bd -literal -offset indent
|
||||
# Sample syslog.conf
|
||||
*.=debug /usr/adm/debug
|
||||
*.=debug -/var/log/debug ;RFC5424,rotate=512k:20
|
||||
.Ed
|
||||
.Pp
|
||||
.\" The '!' as the first character of a priority inverts the above
|
||||
@@ -241,22 +248,24 @@ log all messages of facility
|
||||
except those with priority
|
||||
.Ql info
|
||||
to the
|
||||
.Pa /usr/adm/mail
|
||||
.Pa /var/log/mail
|
||||
file. All messages from
|
||||
.Ql news.info
|
||||
(including) to
|
||||
.Ql news.crit
|
||||
(excluding) are logged to the
|
||||
.Pa /usr/adm/news
|
||||
.Pa /var/log/news
|
||||
file.
|
||||
.Bd -literal -offset indent
|
||||
# Sample syslog.conf
|
||||
mail.*;mail.!=info /usr/adm/mail
|
||||
news.info;news.!crit /usr/adm/news
|
||||
mail.*;mail.!=info /var/log/mail
|
||||
news.info;news.!crit /var/log/news
|
||||
.Ed
|
||||
.Pp
|
||||
You may use it intuitively as an exception specifier. The above
|
||||
mentioned interpretation is simply inverted. Doing that you may use
|
||||
mentioned interpretation is simply inverted. For example, to skip
|
||||
every message with facility
|
||||
.Ar mail :
|
||||
.Bd -literal -offset indent
|
||||
mail.none
|
||||
.Ed
|
||||
@@ -269,19 +278,8 @@ or
|
||||
mail.!debug
|
||||
.Ed
|
||||
.Pp
|
||||
to skip every message that comes with a mail facility. There is much
|
||||
room to play with it. :-)
|
||||
.Pp
|
||||
The '-' may only be used to prefix a filename if you want to omit
|
||||
sync'ing the file after every write to it.
|
||||
.Pp
|
||||
This may take some acclimatization for those individuals used to the
|
||||
pure BSD behavior but testers have indicated that this syntax is
|
||||
somewhat more flexible than the BSD behavior. Note that these changes
|
||||
do not affect standard
|
||||
.Xr syslog.conf 5
|
||||
files. You must specifically modify the configuration files to obtain
|
||||
the new features.
|
||||
.Sh REMOTE LOGGING
|
||||
The following modifications provide network support to the
|
||||
.Nm
|
||||
@@ -335,7 +333,7 @@ entry:
|
||||
.Bd -literal -offset indent
|
||||
# Sample syslogd configuration file to forward all message
|
||||
# messages to a remote host using RFC5424 style formatting
|
||||
*.* @hostname;RFC5424
|
||||
*.* @hostname;RFC5424
|
||||
.Ed
|
||||
.Pp
|
||||
To forward all
|
||||
@@ -400,9 +398,9 @@ The following configuration file routes debug messages from the kernel
|
||||
to a FIFO:
|
||||
.Bd -literal -offset indent
|
||||
# Sample configuration to route kernel debugging
|
||||
# messages ONLY to /usr/adm/debug which is a
|
||||
# messages ONLY to /var/log/debug which is a
|
||||
# named pipe.
|
||||
kern.=debug |/usr/adm/debug
|
||||
kern.=debug |/var/log/debug
|
||||
.Ed
|
||||
.Sh CONCERNS
|
||||
There is probably one important consideration when installing this
|
||||
|
Reference in New Issue
Block a user