Chapter 14. Syslog and Auditing Utilities

Terms you'll need to understand:

  • The syslog facility

  • The syslog source facilities

  • The syslog severity levels

  • m4 macros

  • The logger command

  • The who, whodo, and lastlogins commands

Techniques you'll need to master:

  • Configuring the syslog facility

  • Enabling syslog messages to track use of the root login account

  • Using the who, whodo, and last commands to audit login account usage

The first part of this chapter covers the Solaris 8 syslog facility. This mechanism provides the ability to log user and system messages in one or more files on the local or a remote system. This chapter covers the Solaris Syslog test objectives.

The second part of this chapter describes three commands (who, whodo, and last) for auditing ...

Get Solaris™ 8 System Administrator Exam Cram™ 2 (Exams CX-310-011 and CX-310-012) now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.