I have just registered to the forum, and I am very glad I have joined.
I have a question about the syslog logging facility.
I am doing a security assessment for some servers that run on AIX. The admins have set up a syslog server and the following parameters are enabled in syslog.conf:
How can I know in detail (everything that is logged, not just a general description) which actions are being logged, by the syslog service on the syslog server?
Thank you!
Last edited by rbatte1; 06-26-2015 at 08:32 AM..
Reason: CODE tags added for file content.
Hello,
I need a few explanation about the log files for system messages:
/var/adm/messages and
/var/log/syslog.
As /var/adm/messages is empty on my machine, i need help.
First, i would like to know what the difference between these 2 files is? Do they contain different kinds of system... (3 Replies)
Hi all,
I am trying to get the authentication logs of FTP,Telnet,SSH,inetd from the syslog file. But my output for every type of authentications - success & failure keep differing everytime i view them.
The output does not show the priority code (emerg, or 0, in any case). How do I get the... (0 Replies)
We have had an issue where the mail file filled up. Is there a setting in sendmail.cf to automatically remove old emails? Say after 14 days. If not is there any way automatically to delete older mail files?? (1 Reply)
Hi,
i'm trying to configure /etc/syslog.conf for log user access.
In debian i add:
auth,authpriv.* @serverName
I don't know the correct Aix syntax for syslog :(
My @serverName get the log successfully..
I need to log correct/incorrect login attempts.
Thanks (5 Replies)
Due to a project I'm currently tasked with I'm spending my time trying to find a way to forward the syslog to a remote, in this case Red Hat, server and squeezing it into a SQL DB.
Rsyslog is doing this job quite nicely for most of our test-servers, but I couldn't find any reliable information on... (1 Reply)
How could we derive teh Next month in MON-RR format from current date ie sysdate in UNI AIX sheel script.I coould get a command but i supports only inLinux susse andnotin AIX.
I need for Unix AIX.Pls Help.
Regards
Shiv (2 Replies)
Hello,
Could you please check the below errors. I found these errors in AIX LPAR syslogs.
auth|security:err|error sshd error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key
daemon:err|error syslog: slp: 0660-059 Impossible to get local interface for distant address 10.x.x.x. errno... (2 Replies)
Dear all experts,
I would like to know where can I find the hostname located as when I receive the syslog, I can only see as below : (showing in localhost instead of the hostname)
Feb 6 15:31:31 localhost syslog:info syslogd: restart
Feb 6 15:31:50 localhost syslog:info syslogd: restart
Feb... (13 Replies)
Hi everyone,
I am trying to configure AIX 6.1 using syslogd to send syslog event to syslog server configured on RHEL. However, RHEL never receives the events.
I have tried to redirect the syslog event on AIX to a local file and successful. Only forwarding to remote server fails.
Firewall... (10 Replies)
Discussion started by: michael_hoang
10 Replies
LEARN ABOUT CENTOS
logger
LOGGER(1) User Commands LOGGER(1)NAME
logger - a shell command interface to the syslog(3) system log module
SYNOPSIS
logger [options] [message]
DESCRIPTION
logger makes entries in the system log. It provides a shell command interface to the syslog(3) system log module.
OPTIONS -n, --server server
Write to the specified remote syslog server instead of to the builtin syslog routines. Unless --udp or --tcp is specified the log-
ger will first try to use UDP, but if it fails a TCP connection is attempted.
-d, --udp
Use datagram (UDP) only. By default the connection is tried to syslog port defined in /etc/services, which is often 514.
-T, --tcp
Use stream (TCP) only. By default the connection is tried to syslog-conn port defined in /etc/services, which is often 601.
-P, --port port
Use the specified port.
-i, --id
Log the process ID of the logger process with each line.
-f, --file file
Log the contents of the specified file. This option cannot be combined with a command-line message.
-h, --help
Display a help text and exit.
-p, --priority priority
Enter the message into the log with the specified priority. The priority may be specified numerically or as a facility.level pair.
For example, -p local3.info logs the message as informational in the local3 facility. The default is user.notice.
-s, --stderr
Output the message to standard error as well as to the system log.
-t, --tag tag
Mark every line to be logged with the specified tag.
-u, --socket socket
Write to the specified socket instead of to the builtin syslog routines.
-V, --version
Display version information and exit.
-- End the argument list. This is to allow the message to start with a hyphen (-).
message
Write the message to log; if not specified, and the -f flag is not provided, standard input is logged.
The logger utility exits 0 on success, and >0 if an error occurs.
Valid facility names are: auth, authpriv (for security information of a sensitive nature), cron, daemon, ftp, kern (can't be generated from
user process), lpr, mail, news, security (deprecated synonym for auth), syslog, user, uucp, and local0 to local7, inclusive.
Valid level names are: alert, crit, debug, emerg, err, error (deprecated synonym for err), info, notice, panic (deprecated synonym for
emerg), warning, warn (deprecated synonym for warning). For the priority order and intended purposes of these levels, see syslog(3).
EXAMPLES
logger System rebooted
logger -p local0.notice -t HOSTIDM -f /dev/idmc
logger -n loghost.example.com System rebooted
SEE ALSO syslog(3), syslogd(8)STANDARDS
The logger command is expected to be IEEE Std 1003.2 ("POSIX.2") compatible.
AVAILABILITY
The logger command is part of the util-linux package and is available from Linux Kernel Archive <ftp://ftp.kernel.org/pub/linux/utils/util-
linux/>.
util-linux April 2013 LOGGER(1)