The Syslog channel allows the logging server to log events to a specific syslog facility on any syslog host.
It is also capable of creating localized logs. If the logging applications have localized Log Schema files and if those files are added to their respective Application objects, the Syslog channel can write the log files in the language designated in the Syslog Channel object.
NOTE: The Log Schema catalogs the events that may be logged for a given application. It may also provide event descriptions and labels for the event fields. For more information, see Log Schema Files.
The logging server can use the Syslog channel to write the central data store or create filtered log files. For sample configurations, refer to the Novell Nsure Audit Administration Guide.
At startup, the Syslog driver, lgdsys.*, loads each applications log schema. If a logging application has multiple language versions of its log schema, the Syslog channel loads the schema for the language designated in the Syslog Channel object.
NOTE: Nsure Audit stores the log schema files as attributes in their respective Application object. For further information, see Log Schema Files.
NOTE: If the File and Syslog Channel objects reference the same language, the drivers independently load the log schema in their own memory. The only time the log schema is shared is between multiple instances of the same driver. For example, if you have two Syslog channels configured to write log files in English, the English log schema for each application is only loaded once.
When it writes events to the syslog facility, the Syslog driver uses the EventID to look up each event in the corresponding applications log schema, and it writes the event description to the data store. If the log schema isnt available, or if there isnt a descriptive entry for the current event, the Syslog channel defaults to the following format:
$DC $TC,$SO,$NI,$NL,$NG,$N1,$N2,$SS,$ST\n
(Client Date and Time Stamp, Component, Event ID, Log Level, Group ID, Value1, Value2, Text1, Text2) For an explanation of these variables, see Event Variables.
Because it uses the log schema to log events, the Syslog driver is also capable of creating localized logs. If a logging application has localized log schema files and if those files are added to their respective Application object, the Syslog driver uses the log schema for the language designated in the Syslog Channel object to write the event descriptions.
For more information on the Syslog channels language attribute,
see Syslog Channel Configuration.
For information on localized log schema files, see Log
Schema Files.
For information on configuring a Syslog Channel object, see Syslog Channel Configuration.
For more information on using Nsure Audit, see Nsure Audit Help.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.