Avatar of Edgar Cole
Edgar Cole
Flag for United States of America asked on

The syslog.conf on my AIX 6.1 System

I have the following entries in the /etc/syslog.conf file on an AIX 6.1 system...

kern.debug      /var/adm/syslog/kern    rotate files 12 time 1m
user.debug      /var/adm/syslog/user    rotate files 12 time 1m
mail.debug      /var/adm/syslog/mail    rotate files 12 time 1m
daemon.debug    /var/adm/syslog/daemon  rotate files 12 time 1m
auth.debug      /var/adm/syslog/auth    rotate files 12 time 1m
syslog.debug    /var/adm/syslog/syslog  rotate files 12 time 1m
lpr.debug       /var/adm/syslog/lpr     rotate files 12 time 1m
news.debug      /var/adm/syslog/news    rotate files 12 time 1m
uucp.debug      /var/adm/syslog/uucp    rotate files 12 time 1m
*.debug @xxx.xxx.xxx.xxx

Open in new window

My understanding is that the last statement will send all .debug messages to the syslog daemon running on the system at the address specified by xxx.xxx.xxx.xxx. Furthermore, the preceding nine lines have no bearing on the last line. In other words, the last line does not require the preceding lines. Is that correct?
Unix OS

Avatar of undefined
Last Comment
woolmilkporc

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
woolmilkporc

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Edgar Cole

ASKER
I just have a follow-up question...

Do the files defined in the syslog.conf file as destinations need to be created before they can be used, or will the syslog daemon create them on-the-fly?
woolmilkporc

Yes, that's mandatory!

You must create the logfiles ("touch", for example) before restarting syslogd, else nothing will be written at all.
Your help has saved me hundreds of hours of internet surfing.
fblack61