Sponsored Content
Full Discussion: UNIX - AIX - Syslog messages
Operating Systems AIX UNIX - AIX - Syslog messages Post 302948145 by Bersecul on Friday 26th of June 2015 06:47:08 AM
Old 06-26-2015
IBM UNIX - AIX - Syslog messages

Dear Community,

I have just registered to the forum, and I am very glad I have joined.

I have a question about the syslog logging facility.

I am doing a security assessment for some servers that run on AIX. The admins have set up a syslog server and the following parameters are enabled in syslog.conf:

Code:
local0.crit /dev/console
local0.info /var/hacmp/adm/cluster.log
user.notice /var/hacmp/adm/cluster.log
daemon.notice /var/hacmp/adm/cluster.log

How can I know in detail (everything that is logged, not just a general description) which actions are being logged, by the syslog service on the syslog server?

Thank you!

Last edited by rbatte1; 06-26-2015 at 08:32 AM.. Reason: CODE tags added for file content.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

system messages log (Sun and AIX)

Hello, I need a few explanation about the log files for system messages: /var/adm/messages and /var/log/syslog. As /var/adm/messages is empty on my machine, i need help. First, i would like to know what the difference between these 2 files is? Do they contain different kinds of system... (3 Replies)
Discussion started by: VeroL
3 Replies

2. AIX

AIX 5.2 Syslog : Help needed

Hi all, I am trying to get the authentication logs of FTP,Telnet,SSH,inetd from the syslog file. But my output for every type of authentications - success & failure keep differing everytime i view them. The output does not show the priority code (emerg, or 0, in any case). How do I get the... (0 Replies)
Discussion started by: kamadana
0 Replies

3. Solaris

which is the best unix? solaris? aix ? hp-unix?

which is the best unix? solaris? aix ? hp-unix? I want to study unix system ? Anyone tell me which is the best? (2 Replies)
Discussion started by: mac2008
2 Replies

4. AIX

AIX auto delete old mail messages

We have had an issue where the mail file filled up. Is there a setting in sendmail.cf to automatically remove old emails? Say after 14 days. If not is there any way automatically to delete older mail files?? (1 Reply)
Discussion started by: daveisme
1 Replies

5. AIX

AIX Syslog login/logout User

Hi, i'm trying to configure /etc/syslog.conf for log user access. In debian i add: auth,authpriv.* @serverName I don't know the correct Aix syntax for syslog :( My @serverName get the log successfully.. I need to log correct/incorrect login attempts. Thanks (5 Replies)
Discussion started by: hankBuck
5 Replies

6. AIX

Forwarding AIX syslog/errorlog to remote SQL DB

Due to a project I'm currently tasked with I'm spending my time trying to find a way to forward the syslog to a remote, in this case Red Hat, server and squeezing it into a SQL DB. Rsyslog is doing this job quite nicely for most of our test-servers, but I couldn't find any reliable information on... (1 Reply)
Discussion started by: Skleindl
1 Replies

7. AIX

Get Next month in AIX from curent date in unix AIX

How could we derive teh Next month in MON-RR format from current date ie sysdate in UNI AIX sheel script.I coould get a command but i supports only inLinux susse andnotin AIX. I need for Unix AIX.Pls Help. Regards Shiv (2 Replies)
Discussion started by: SHIV75
2 Replies

8. AIX

I see some errors in syslog files in AIX. can these be ignored ?

Hello, Could you please check the below errors. I found these errors in AIX LPAR syslogs. auth|security:err|error sshd error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key daemon:err|error syslog: slp: 0660-059 Impossible to get local interface for distant address 10.x.x.x. errno... (2 Replies)
Discussion started by: Kumar7997
2 Replies

9. AIX

AIX Syslog where the hostname sit

Dear all experts, I would like to know where can I find the hostname located as when I receive the syslog, I can only see as below : (showing in localhost instead of the hostname) Feb 6 15:31:31 localhost syslog:info syslogd: restart Feb 6 15:31:50 localhost syslog:info syslogd: restart Feb... (13 Replies)
Discussion started by: kwliew999
13 Replies

10. AIX

Cannot send syslog event from AIX 6.1 to RHEL Syslog server

Hi everyone, I am trying to configure AIX 6.1 using syslogd to send syslog event to syslog server configured on RHEL. However, RHEL never receives the events. I have tried to redirect the syslog event on AIX to a local file and successful. Only forwarding to remote server fails. Firewall... (10 Replies)
Discussion started by: michael_hoang
10 Replies
LOGGER(1)							   User Commands							 LOGGER(1)

NAME
logger - a shell command interface to the syslog(3) system log module SYNOPSIS
logger [options] [message] DESCRIPTION
logger makes entries in the system log. It provides a shell command interface to the syslog(3) system log module. OPTIONS
-n, --server server Write to the specified remote syslog server instead of to the builtin syslog routines. Unless --udp or --tcp is specified the log- ger will first try to use UDP, but if it fails a TCP connection is attempted. -d, --udp Use datagram (UDP) only. By default the connection is tried to syslog port defined in /etc/services, which is often 514. -T, --tcp Use stream (TCP) only. By default the connection is tried to syslog-conn port defined in /etc/services, which is often 601. -P, --port port Use the specified port. -i, --id Log the process ID of the logger process with each line. -f, --file file Log the contents of the specified file. This option cannot be combined with a command-line message. -h, --help Display a help text and exit. -p, --priority priority Enter the message into the log with the specified priority. The priority may be specified numerically or as a facility.level pair. For example, -p local3.info logs the message as informational in the local3 facility. The default is user.notice. -s, --stderr Output the message to standard error as well as to the system log. -t, --tag tag Mark every line to be logged with the specified tag. -u, --socket socket Write to the specified socket instead of to the builtin syslog routines. -V, --version Display version information and exit. -- End the argument list. This is to allow the message to start with a hyphen (-). message Write the message to log; if not specified, and the -f flag is not provided, standard input is logged. The logger utility exits 0 on success, and >0 if an error occurs. Valid facility names are: auth, authpriv (for security information of a sensitive nature), cron, daemon, ftp, kern (can't be generated from user process), lpr, mail, news, security (deprecated synonym for auth), syslog, user, uucp, and local0 to local7, inclusive. Valid level names are: alert, crit, debug, emerg, err, error (deprecated synonym for err), info, notice, panic (deprecated synonym for emerg), warning, warn (deprecated synonym for warning). For the priority order and intended purposes of these levels, see syslog(3). EXAMPLES
logger System rebooted logger -p local0.notice -t HOSTIDM -f /dev/idmc logger -n loghost.example.com System rebooted SEE ALSO
syslog(3), syslogd(8) STANDARDS
The logger command is expected to be IEEE Std 1003.2 ("POSIX.2") compatible. AVAILABILITY
The logger command is part of the util-linux package and is available from Linux Kernel Archive <ftp://ftp.kernel.org/pub/linux/utils/util- linux/>. util-linux April 2013 LOGGER(1)
All times are GMT -4. The time now is 11:30 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy