AIX 5L Problem Determination - IBM Redbooks

Each entry in the /etc/syslog.conf file must consist of two parts:
► A selector field to determine the message priorities to which the line applies
► An action
Each line can contain an optional part:
► Rotation
The fields must be separated by one or more tabs or spaces.
The selector field names a facility and a priority level. Separate facility names
with a comma. Separate the facility and priority-level portions of the selector field
with a period. Separate multiple entries in the same selector field with a
semicolon (;). To select all facilities, use an asterisk (*).
The Action field identifies a destination (file, host, or user) to receive the
messages. If routed to a remote host, the remote system will handle the
message as indicated in its own configuration file. To display messages on a
user's terminal, the Destination field must contain the name of a valid, logged-in
system user.
The Rotation field identifies how rotation is used. If the Action field is a file, then
rotation can be based on size or time, or both. You can also compress and
archive the rotated files.
Each message is one line. A message can contain a priority code, marked by a
digit enclosed in angle braces (< >) at the beginning of the line. Messages longer
than 900 bytes may be truncated.
Use the following system facility names in the Selector field:
kern Kernel
user User level
mail Mail subsystem
daemon System daemons
auth Security or authorization
syslog syslogd daemon
lpr Line-printer subsystem
news News subsystem
uucp uucp subsystem
* All facilities
Chapter 6. Error reports 131