Some Features of syslogd :
- Unix Domain Sockets (/dev/log)
- Internet Sockets (UDP:514)
- Ability to log to local and remote targets
Primary configuration file: /etc/syslog.conf
Standard syslog.conf file contains:
1. Rules (Types of Log and Applications)
a.facilities -> applications/daemons/network device/etc.
b. levels -> Importance of message
Range: 0-7
- 7 = emergency (less information)
- 6 = alert
- 5 = critical
- 4 = error
- 3 = warning
- 2 = notice
- 1 = info
- 0 = debug (more information)
a. file - /var/log/messages
b. tty - /dev/console
c. remote hosts - @IP_ADDR_of_REMOTE_HOST (for remote logging)
'*' = catchall/wildcard to mean any facility or level
'.none' = exclusion rule
'man syslog.conf' to learn about the support facilities and Levels