syslog
Log information using syslog(3) via rule sets V8.10 and later
The syslog
database-map type allows you to log messages
directly from inside rule sets. If you are
unfamiliar with syslog, see
Log with syslog on page 513 for
a general discussion of
syslog-style logging.
The syslog type is
declared like this:
Kname syslog switches
The name is the database-map name you will use in rule sets. The switches are selected from those shown in Table 23-27.
Table 23-27. The syslog database-map type K command switches
|
Switch |
§ |
Description |
|---|---|---|
|
|
-D on page 887 |
Don’t use this database map if |
|
|
The -L syslog database-map switch on page 940 |
The logging level at which to log. |
|
|
-S on page 890 |
Space replacement character. |
In rule sets, the syslog type is used, for example, like
this:
R $* $: $(name what to log $)The information in the position of the key is logged as is via
the syslog facility. An empty
workspace is returned as a result of logging. That
is, for the syslog type, the $( and $) expressions evaluate
to an empty string.
Any use of defined macros in the message should use
the $& prefix
so that the current value is logged. For example,
the following might be used to log the load
average:
Kdolog syslog
R $* $: $(dolog The cutoff was caused by a load average of $&{load_average}. $)If you need to have a sendmail
macro or positional macro literally logged as is,
just prefix it with an extra $ character. For example, the following shows the macro and logs its value: ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access