Syslog: Difference between revisions

From ICO wiki
Jump to navigationJump to search
Line 18: Line 18:




<table class="wikitable">
The list of Facilities available:
<tr>
<th>Facility code</th>
0             kernel messages
<th>Keyword</th>
1             user-level messages
<th>Description</th>
2             mail system
</tr>
3             system daemons
<tr>
4             security/authorization messages
<td>0</td>
5             messages generated internally by syslogd
<td>kern</td>
6             line printer subsystem
<td>kernel messages</td>
7             network news subsystem
</tr>
8             UUCP subsystem
<tr>
9             clock daemon
<td>1</td>
10           security/authorization messages
<td>user</td>
11           FTP daemon
<td>user-level messages</td>
12           NTP subsystem
</tr>
13           log audit
<tr>
14           log alert
<td>2</td>
15           clock daemon
<td>mail</td>
16           local use 0 (local0)
<td>mail system</td>
17           local use 1 (local1)
</tr>
18           local use 2 (local2)
<tr>
19           local use 3 (local3)
<td>3</td>
20           local use 4 (local4)
<td>daemon</td>
21           local use 5 (local5)
<td>system daemons</td>
22           local use 6 (local6)
</tr>
23           local use 7 (local7)
<tr>
<td>4</td>
<td>auth</td>
<td>security/authorization messages</td>
</tr>
<tr>
<td>5</td>
<td>syslog</td>
<td>messages generated internally by syslogd</td>
</tr>
<tr>
<td>6</td>
<td>lpr</td>
<td>line printer subsystem</td>
</tr>
<tr>
<td>7</td>
<td>news</td>
<td>network news subsystem</td>
</tr>
<tr>
<td>8</td>
<td>uucp</td>
<td>UUCP subsystem</td>
</tr>
<tr>
<td>9</td>
<td></td>
<td>clock daemon</td>
</tr>
<tr>
<td>10</td>
<td>authpriv</td>
<td>security/authorization messages</td>
</tr>
<tr>
<td>11</td>
<td>ftp</td>
<td>FTP daemon</td>
</tr>
<tr>
<td>12</td>
<td>-</td>
<td>NTP subsystem</td>
</tr>
<tr>
<td>13</td>
<td>-</td>
<td>log audit</td>
</tr>
<tr>
<td>14</td>
<td>-</td>
<td>log alert</td>
</tr>
<tr>
<td>15</td>
<td>cron</td>
<td>scheduling daemon</td>
</tr>
<tr>
<td>16</td>
<td>local0</td>
<td>local use 0 (local0)</td>
</tr>
<tr>
<td>17</td>
<td>local1</td>
<td>local use 1 (local1)</td>
</tr>
<tr>
<td>18</td>
<td>local2</td>
<td>local use 2 (local2)</td>
</tr>
<tr>
<td>19</td>
<td>local3</td>
<td>local use 3 (local3)</td>
</tr>
<tr>
<td>20</td>
<td>local4</td>
<td>local use 4 (local4)</td>
</tr>
<tr>
<td>21</td>
<td>local5</td>
<td>local use 5 (local5)</td>
</tr>
<tr>
<td>22</td>
<td>local6</td>
<td>local use 6 (local6)</td>
</tr>
<tr>
<td>23</td>
<td>local7</td>
<td>local use 7 (local7)</td>
</tr>
</table>


= Probleemide raskusastmed =
= Probleemide raskusastmed =

Revision as of 15:03, 23 November 2015

Autor

Kaari Zalite A31 2015/2016

Sissejuhatus

Syslog

Syslog on utiliit, mis genereerib logifailid ning saadab need Linxi süsteemi logifaili, mis asub /var/log/ kaustas, kus neid omakorda analüüsitakse. Syslog'i teateid saadavad välja erinevad võrguseadmed: ruuterid, switchid jms. Syslog'i teated sisaldavad tavaliselt informatsiooni: kus, millal ja miks teade saadeti.

Facility

The Facility value is a way of determining which process of the machine created the message. Since the Syslog protocol was originally written on BSD Unix, the Facilities reflect the names of Unix processes and Daemons. The priority value is calculated using the following formula: Priority = Facility * 8 + Level


The list of Facilities available:

0 kernel messages 1 user-level messages 2 mail system 3 system daemons 4 security/authorization messages 5 messages generated internally by syslogd 6 line printer subsystem 7 network news subsystem 8 UUCP subsystem 9 clock daemon 10 security/authorization messages 11 FTP daemon 12 NTP subsystem 13 log audit 14 log alert 15 clock daemon 16 local use 0 (local0) 17 local use 1 (local1) 18 local use 2 (local2) 19 local use 3 (local3) 20 local use 4 (local4) 21 local use 5 (local5) 22 local use 6 (local6) 23 local use 7 (local7)

Probleemide raskusastmed

Väärtus Raskusaste Võtmesõna Kirjeldus Näited
0 Emergency emerg Süsteem on kasutuskõlbmatu This level should not be used by applications.
1 Alert alert Tuleb koheselt korda teha Loss of the primary ISP connection.
2 Critical crit Kriitiline seisund A failure in the system's primary application.
3 Error err Error conditions An application has exceeded its file storage limit and attempts to write are failing.
4 Warning warning May indicate that an error will occur if action is not taken. A non-root file system has only 2GB remaining.
5 Notice notice Events that are unusual, but not error conditions.
6 Informational info Normal operational messages that require no action. An application has started, paused or ended successfully.
7 Debug debug Information useful to developers for debugging the application.

Kasutatud materjalid