
UC-8100-LX Software Manual
General Debian Package Usage
5-3
NOTE
Click the following link for more information on cron.
http://www.debian-administration.org/articles/56
39B
Rocket-Fast System for Log Processing: rsyslog
Rsyslog
is an enhanced, multi-threaded log reporting utility with a focus on security and reliability. It offers
support for on-demand disk buffering, log reports and alarms delvered over TCP, SSL, TLS and RELP, writing
to databases, and email alerting. It is a drop-in replacement for syslogd.
Rsyslog is installed but disabled by default.
Enable rsyslog manually
/etc/init.d/rsyslog start
Disable rsyslog manually
/etc/init.d/rsyslog stop
Enable rsyslog
insserv -d rsyslog
Disable rsyslog
insserv -r rsyslog
91B
Rsyslog’s Configuration File
The syntax of the
/etc/rsyslog.conf
file is detailed in the rsyslog.conf(5) manual page, but there is also HTML
documentation available in the rsyslog-doc package
(/usr/share/doc/rsyslog-doc/html/index.html)
.
The overall principle is to write “selector” and “action” pairs. The selector defines all relevant messages, and the
actions describe how to deal with them.
Each message is associated with an application, called a
facility
in rsyslog documentation
auth and authpriv
for authentication
cron
comes from task scheduling services, cron and atd
daemon
affects a daemon without any special classification (DNS, NTP, etc.)
ftp
concerns the FTP server
kern
message coming from the kernel
lpr
comes from the printing subsystem
comes from the e-mail subsystem
news
Usenet subsystem message (especially from an NNTP — Network News Transfer
Protocol — server that manages newsgroups)
syslog
messages from the syslogd server, itself
user
user messages (generic)
uucp
messages from the UUCP server (Unix to Unix Copy Program, an old protocol notably
used to distribute e-mail messages)
local0 to local7
reserved for local use
Each message is also associated with a priority level. Here is the list in decreasing order:
emerg
Help!
There's an emergency, the system is probably unusable.
alert
hurry up, any delay can be dangerous, action must be taken immediately
crit
conditions are critical
err
error
warn
warning (potential error)
notice
conditions are normal, but the message is important
info
informative message
debug
debugging message
92B
Syntax of the Selector
The selector is a semicolon-separated list of
subsystem
.
priority
pairs (example: auth.notice;mail.info). An
asterisk may represent all subsystems or all priorities (examples: *.alert or mail.*). Several subsystems can be
grouped, by separating them with a comma (example: auth,mail.info). The priority indicated also covers
Содержание UC-8100-LX
Страница 8: ...UC 8100 LX Software Getting Started 2 2...
Страница 38: ...UC 8100 LX Software Manual Security On UC 8100 LX 4 2...