The Syslog Channel object stores the information the Syslog driver needs to write events to syslog.
IMPORTANT: You must restart the logging server to effect any changes in Channel object configuration. For more information on restarting the logging server, refer to the Novell Nsure Audit Administration Guide.
The following provides a description of each Channel object attribute:
Configuration |
|
|
|
Syslog Host |
The host name or IP address of the syslog server. If a host name is specified, only the first address associated with that name is used. IMPORTANT: The syslog server must be running a syslog daemon that allows remote connections for log drop-off. UNIX syslog daemons accept remote connections by default; however, Linux system daemons do not. Therefore, the startup script for Linux syslog daemons must be altered to explicitly allow remote connections. This is done using the -r switch on syslogd.
|
|
Facility |
The syslog facility to which the logging server writes events.
|
|
Log Language |
The language in which events are written to syslog. If logging applications have localized Log Schema files and if those files are added to their respective Application object, the Syslog channel can write log files in the selected language. If there isnt a log schema for the selected language, the channel defaults to English. NOTE: Log Schema files (*.lsc) catalog the events that may be logged for a given application. They may also provide event descriptions and labels for the event fields. For more information, see Log Schema Files. If the log schema isnt available, or if there isnt a descriptive entry for the current event, the Syslog channel defaults to the following format: $DC $TC,$SO,$NI,$NL,$NG,$N1,$N2,$SS,$ST\n (Client Date and Time Stamp, Component, Event ID, Log Level, Group ID, Value1, Value2, Text1, Text2) For an explanation of these variables, see Event Variables. Technically, only English is allowed since syslog is a 7 bit protocol. However, most syslog implementations support 8 bit, so all 8 bit languages may be selected; however, it is doubtful that some 8 bit languages, such as Russian, look very usable in syslog. No 16 bit languages are allowed. NOTE: You can create parallel logs in multiple languages by defining multiple Syslog Channel objects with different languages and having a single notification filter pass all events to those channels. For a sample configuration, see the Novell Nsure Audit Administration Guide.
|
Status |
By default, all Channel objects are enabled. This means that the logging server loads the Channel objects configuration in memory at startup. If the Channel object is disabled, the logging server does not load that objects configuration at startup. IMPORTANT: The Channel object must be located in a supported Channel container for the logging server to find it. See Creating and Configuring Channel Objects for more information. |
For more information on the Syslog channel, see Syslog Channel.
For general information on configuring Channel objects, see Creating and Configuring Channel Objects.
For more information on using Nsure Audit, see Nsure Audit Help.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.