svcadm(1M)을 검색하려면 섹션에서 1M 을 선택하고, 맨 페이지 이름에 svcadm을 입력하고 검색을 누른다.
syslogd(8)
System Administration Commands syslogd(8)
NAME
syslogd - log system messages
SYNOPSIS
/usr/sbin/syslogd [-d] [-f configfile] [-m markinterval]
[-p path] [-t | -T]
DESCRIPTION
syslogd reads and forwards system messages to the appropriate log files
or users, depending upon the priority of a message and the system
facility from which it originates. The configuration file /etc/sys‐
log.conf (see syslog.conf(5)) controls where messages are forwarded.
syslogd logs a mark (timestamp) message every markinterval minutes
(default 20) at priority LOG_INFO to the facility whose name is given
as mark in the syslog.conf file.
A system message consists of a single line of text, which may be pre‐
fixed with a priority code number enclosed in angle-brackets (<>); pri‐
orities are defined in <sys/syslog.h>.
syslogd reads from the STREAMS log driver, /dev/log, and from any
transport provider specified in /etc/netconfig, /etc/net/trans‐
port/hosts, and /etc/net/transport/services.
syslogd reads the configuration file when it starts up, and again when‐
ever it receives a HUP signal (see signal.h(3HEAD), at which time it
also closes all files it has open, re-reads its configuration file, and
then opens only the log files that are listed in that file. syslogd
exits when it receives a TERM signal.
As it starts up, syslogd creates the file /var/run/syslog.pid, if pos‐
sible, containing its process identifier (PID).
If message ID generation is enabled (see log(4D)), each message will be
preceded by an identifier in the following format: [ID msgid facil‐
ity.priority]. msgid is the message's numeric identifier described in
msgid(8). facility and priority are described in syslog.conf(5).
[ID 123456 kern.notice] is an example of an identifier when message ID
generation is enabled.
If the message originated in a loadable kernel module or driver, the
kernel module's name (for example, ufs) will be displayed instead of
unix. See EXAMPLES for sample output from syslogd with and without mes‐
sage ID generation enabled.
In an effort to reduce visual clutter, message IDs are not displayed
when writing to the console; message IDs are only written to the log
file. See EXAMPLES.
The /etc/default/syslogd file contains the default parameter settings,
which are in effect if neither the -t nor -T option is selected.
The recommended way to allow or disallow message logging is through the
use of the service management facility (smf(7)) instance svc:/sys‐
tem/system-log:default property:
config/log_from_remote
This property specifies whether remote messages are logged.
log_from_remote=true is equivalent to the -t command-line option and
false is equivalent to the -T command-line option. The default value
for log_from_remote is false. See NOTES.
LOG_FROM_REMOTE
Specifies whether remote messages are logged. LOG_FROM_REMOTE=NO is
equivalent to the -t command-line option. The default value for
LOG_FROM_REMOTE is YES.
OPTIONS
The following options are supported:
-d
Turn on debugging. This option should only be used interactively in
a root shell once the system is in multi-user mode. It should not
be used in the system start-up scripts, as this will cause the sys‐
tem to hang at the point where syslogd is started.
-f configfile
Specify an alternate configuration file.
-m markinterval
Specify an interval, in minutes, between mark messages.
-p path
Specify an alternative log device name. The default is /dev/log.
-T
Enable the syslogd UDP port to turn on logging of remote messages.
This is the default behavior.
-t
Disable the syslogd UDP port to turn off logging of remote mes‐
sages.
EXAMPLES
Example 1 syslogd Output Without Message ID Generation Enabled
The following example shows the output from syslogd when message ID
generation is not enabled:
Sep 29 21:41:18 cathy unix: alloc /: file system full
Example 2 syslogd Output with ID generation Enabled
The following example shows the output from syslogd when message ID
generation is enabled. The message ID is displayed when writing to log
file/var/adm/messages.
Sep 29 21:41:18 cathy ufs: [ID 845546 kern.notice] alloc /: file system full
Example 3 syslogd Output with ID Generation Enabled
The following example shows the output from syslogd when message ID
generation is enabled when writing to the console. Even though message
ID is enabled, the message ID is not displayed at the console.
Sep 29 21:41:18 cathy ufs: alloc /: file system full
Example 4 Enabling Acceptance of UDP Messages from Remote Systems
The following commands enable syslogd to accept entries from remote
systems.
# svccfg -s svc:/system/system-log:default setprop \
config/log_from_remote=true
# svcadm restart svc:/system/system-log
FILES
/etc/syslog.conf
Configuration file
/var/run/syslog.pid
Process ID
/etc/default/syslogd
Contains default settings. You can override some of the settings by
command-line options.
/dev/log
STREAMS log driver
/etc/netconfig
Transport providers available on the system
/etc/net/transport/hosts
Network hosts for each transport
/etc/net/transport/services
Network services for each transport
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
tab() box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) ATTRIBUTE TYPEAT‐
TRIBUTE VALUE _ Availabilitysystem/core-os
SEE ALSO
logger(1), svcs(1), syslog(3C), signal.h(3HEAD), log(4D), sys‐
log.conf(5), attributes(7), smf(7), msgid(8), svcadm(8), svccfg(8)
NOTES
The mark message is a system time stamp, and so it is only defined for
the system on which syslogd is running. It can not be forwarded to
other systems.
When syslogd receives a HUP signal, it attempts to complete outputting
pending messages, and close all log files to which it is currently log‐
ging messages. If, for some reason, one (or more) of these files does
not close within a generous grace period, syslogd discards the pending
messages, forcibly closes these files, and starts reconfiguration. If
this shutdown procedure is disturbed by an unexpected error and syslogd
cannot complete reconfiguration, syslogd sends a mail message to the
superuser on the current system stating that it has shut down, and
exits.
Care should be taken to ensure that each window displaying messages
forwarded by syslogd (especially console windows) is run in the system
default locale (which is syslogd's locale). If this advice is not fol‐
lowed, it is possible for a syslog message to alter the terminal set‐
tings for that window, possibly even allowing remote execution of arbi‐
trary commands from that window.
The syslogd service is managed by the service management facility,
smf(7), under the service identifier:
svc:/system/system-log:default
Administrative actions on this service, such as enabling, disabling, or
requesting restart, can be performed using svcadm(8). The service's
status can be queried using the svcs(1) command.
When syslogd is started by means of svcadm(8), if a value is specified
for LOG_FROM_REMOTE in the /etc/defaults/syslogd file, the SMF instance
svc:/system/system-log:default property config/log_from_remote is set
to correspond to the LOG_FROM_REMOTE value and the /etc/default/syslogd
file is modified to replace the LOG_FROM_REMOTE specification with the
following comment:
# LOG_FROM_REMOTE is now set using svccfg(8), see syslogd(8).
If neither LOG_FROM_REMOTE nor SMF instance svc:/system/system-
log:default property config/log_from_remote are defined, the default is
to log remote messages.
On installation, the initial value of SMF instance svc:/system/system-
log:default property config/log_from_remote is false.
Oracle Solaris 11.4 6 Mar 2020 syslogd(8)