Logging logins/logouts (and /dev/console) to syslog?

From: Shane Presley (shane.presley_at_gmail.com)
Date: 07/27/05

  • Next message: Mike O: "setenv disk-led-assoc question" 
    Date: Wed, 27 Jul 2005 12:42:51 -0400
To: sunmanagers@sunmanagers.org

     Hello,

    I was wondering if there was a way to record every login/logout to
    syslog? Well more particularly, to a log server, through syslog?
    I'd also like to record ANYTHING that would go to /dev/console

    Here is my current /etc/syslog.conf:

    #ident "@(#)syslog.conf 1.5 98/12/14 SMI" /* SunOS 5.0 */
    #
    # Copyright (c) 1991-1998 by Sun Microsystems, Inc.
    # All rights reserved.
    #
    # syslog configuration file.
    #
    # This file is processed by m4 so be careful to quote (`') names
    # that match m4 reserved words. Also, within ifdef's, arguments
    # containing commas must be quoted.
    #
    *.err;kern.notice;auth.notice /dev/sysmsg
    *.err;kern.debug;daemon.notice;mail.crit /var/adm/messages

    *.alert;kern.err;daemon.err operator
    *.alert root

    *.emerg *

    # if a non-loghost machine chooses to have authentication messages
    # sent to the loghost machine, un-comment out the following line:
    #auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)

    mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)

    #
    # non-loghost machines will use the following lines to cause "user"
    # log messages to be logged locally.
    #
    ifdef(`LOGHOST', ,
    user.err /dev/sysmsg
    user.err /var/adm/messages
    user.alert `root, operator'
    user.emerg *
    )

    # Push to log server
    # syslog-ng handles prioritization/alerting
    *.warn;*.alert;*.emerg;*.err;*.info @mylogserver.mydomain.com
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers

  • Next message: Mike O: "setenv disk-led-assoc question"

    Relevant Pages

    • Re: sendmail log file
      ... up in syslog ... Thx alot.. ... # if a non-loghost machine chooses to have authentication messages ...
      (comp.unix.solaris)
    • Whats wrong with this in /etc/syslog.conf ?
      ... I am have written a C program to dump my file systems onto tape from my Ultra 80 running Solaris 10 update 1. ... The program writes some diagnostic information, such as barcodes via syslog. ... local1 is a valid facility, and debug is a valid severity as defined in RFC 3164 - The BSD Syslog Protocol. ... # if a non-loghost machine chooses to have authentication messages ...
      (comp.unix.solaris)
    • Re: sendmail log file
      ... # if a non-loghost machine chooses to have authentication messages ... # log messages to be logged locally. ... I can see at least 3 places where mail.* selectors exist above: ... Note that when a message priority exists in a syslog message selector, ...
      (comp.unix.solaris)
    • /var/adm/messages stops, dissapears.
      ... interesting problem with my syslog. ... On one system I have the /var/adm/messages file keeps disapearing ... Unusual System Events ... # if a non-loghost machine chooses to have authentication messages ...
      (SunManagers)
    • Re: Whats wrong with this in /etc/syslog.conf ?
      ... Dave wrote: ... Ultra 80 running Solaris 10 update 1. ... severity as defined in RFC 3164 - The BSD Syslog Protocol. ... # if a non-loghost machine chooses to have authentication messages ...
      (comp.unix.solaris)