Re: Question on syslogd and syslog

[david]

the mechanism for putting all the logs with a paticular facility in a 
different logfile if the filtering that I mentioned. if you use anything 
other than sysklogd, you can filter things into files based on anything in 
the message, not just the facility.
David Lang

 On Sun, 3 Jul 2011, Sri Ram Vemulpali 
wrote:

> Facilities of syslogd are associated to a particular file. So, in my
> application there are 20 tasks which needs to have a separate log file
> for every task. So, mapping every task to one facility fills my
> requirement. So, this is the reason I want to extend the facilities of
> level LOGLOCAL0-7.
>
> Coming to previous question, the purpose is to fulfill the above requirement.
>
> Thanks,
> Sri.
>
> On Sat, Jul 2, 2011 at 1:23 PM,  <david@xxxxxxx> wrote:
> > the problem is that in the syslog spec, the facility and severity get
> > combined into one 8 bit field (one of the two only has 12 values defined
> > instead of 16, but I don't remember off the top of my head which one)
> >
> > so extending this is creating a new protocol.
> >
> > also, the reason I was talking about filtering is that other than filtering,
> > what purpose is there in settng the facility?
> >
> > David Lang
> >
> > On Sat, 2 Jul 2011, Sri Ram Vemulpali wrote:
> >
> > > Thanks for the replies. My question is more on how to extend
> > > facilities, rather on how to filter the messages. It seems there is a
> > > code in the toolchain syslog.h where the array representing the
> > > facilities needs to be extended. Please correct me if I am wrong.
> > >
> > > Sri.
> > >
> > > On Tue, Jun 28, 2011 at 3:41 PM,  <david@xxxxxxx> wrote:
> > > > you would be creating a completely different over-the-wire protocol for
> > > > your
> > > > syslog messages.
> > > >
> > > > however, note that newer syslog daemons (syslog-ng and rsyslog for
> > > > example)
> > > > allow you to do filtering on just about anything in the message, not just
> > > > the facility and severity.
> > > >
> > > > David Lang
> > > >
> > > > On Tue, 28 Jun 2011, Sri Ram Vemulpali wrote:
> > > >
> > > > > Date: Tue, 28 Jun 2011 14:11:59 -0400
> > > > > From: Sri Ram Vemulpali <sri.ram.gmu06@xxxxxxxxx>
> > > > > To: linux-kernel-mail <linux-kernel@xxxxxxxxxxxxxxx>,
> > > > >    linux-newbie@xxxxxxxxxxxxxxx
> > > > > Subject: Question on syslogd and syslog
> > > > >
> > > > > Hello All,
> > > > >
> > > > >   I am looking to modify number of facilities available in syslog so
> > > > > that for my application I can have much more array of them at disposal
> > > > > of my need. So currently only LOG_LOCAL0 - LOG_LOCAL7 are defined for
> > > > > user, what if I want to extend them, is there a way I can extend them.
> > > > > Or should I go ahead and modify the source code of syslog. Can any
> > > > > please point me in right direction and where can I get syslogd and
> > > > > syslog source code. Thanks in advance.