IBM AIX Continuous Availability Features - IBM Redbooks

configuration file. Whenever you change this configuration file, you need to refresh the
syslogd subsystem, as follows:
refresh -s syslogd
The syslogd daemon reads a datagram socket and sends each message line to a destination
described by the /etc/syslog.conf configuration file. The syslogd daemon reads the
configuration file when it is activated and when it receives a hang-up signal.
Each message is one line. A message can contain a priority code marked by a digit enclosed
in angle braces (< >) at the beginning of the line. Messages longer than 900 bytes may be
truncated.
The /usr/include/sys/syslog.h include file defines the facility and priority codes used by the
configuration file. Locally-written applications use the definitions contained in the syslog.h file
to log messages using the syslogd daemon. For example, a configuration file that contains
the following line is often used when a daemon process causes a problem:
daemon.debug /tmp/syslog.debug
This line indicates that a facility daemon should be controlled. All messages with the priority
level debug and higher should be written to the file /tmp/syslog.debug.
Note: The file /tmp/syslog.debug must exist.
The daemon process that causes problems (in our example, the inetd) is started with option
-d to provide debug information. This debug information is collected by the syslogd daemon,
which writes the information to the log file /tmp/syslog.debug.
Logging can also improve security on your system by adding additional logging to the
syslog.conf file. You can then increase system logging by adding extra logging for your
system by editing inetd.conf and adding logging into each of the demons as required.
Example 2-5 shows a sample of syslog.conf settings.
Example 2-5 syslog settings
bianca:/etc/#vi syslog.conf
*.info /var/adm/syslog/syslog.log
*.alert /var/adm/syslog/syslog.log
*.notice /var/adm/syslog/syslog.log
*.warning /var/adm/syslog/syslog.log
*.err /var/adm/syslog/syslog.log
*.crit /var/adm/syslog/syslog.log rotate time 1d files 9
The last line in Example 2-5 indicates that this will create only 9 files and use a rotation on
syslog. A file designated for storing syslog messages must exist; otherwise, the logging will
not start. Remember to refresh syslog after any changes are made to the syslog configuration
file.
Extra logging on demons controlled by inetd.conf can be configured as shown in Example 2-6
(ftpd is shown).
Example 2-6 Verbose logging for ftpd
bianca:/etc/#vi inetd.con
ftp stream tcp6 nowait root /usr/sbin/ftpd ftpd -l
Chapter 2. AIX continuous availability features 33