head	1.28;
access;
symbols
	netbsd-9-4-RELEASE:1.25
	netbsd-10-0-RELEASE:1.26
	netbsd-10-0-RC6:1.26
	netbsd-10-0-RC5:1.26
	netbsd-10-0-RC4:1.26
	netbsd-10-0-RC3:1.26
	netbsd-10-0-RC2:1.26
	netbsd-10-0-RC1:1.26
	netbsd-10:1.26.0.2
	netbsd-10-base:1.26
	netbsd-9-3-RELEASE:1.25
	cjep_sun2x-base1:1.25
	cjep_sun2x:1.25.0.14
	cjep_sun2x-base:1.25
	cjep_staticlib_x-base1:1.25
	netbsd-9-2-RELEASE:1.25
	cjep_staticlib_x:1.25.0.12
	cjep_staticlib_x-base:1.25
	netbsd-9-1-RELEASE:1.25
	phil-wifi-20200421:1.25
	phil-wifi-20200411:1.25
	is-mlppp:1.25.0.10
	is-mlppp-base:1.25
	phil-wifi-20200406:1.25
	netbsd-8-2-RELEASE:1.24
	netbsd-9-0-RELEASE:1.25
	netbsd-9-0-RC2:1.25
	netbsd-9-0-RC1:1.25
	phil-wifi-20191119:1.25
	netbsd-9:1.25.0.8
	netbsd-9-base:1.25
	phil-wifi-20190609:1.25
	netbsd-8-1-RELEASE:1.24
	netbsd-8-1-RC1:1.24
	pgoyette-compat-merge-20190127:1.25
	pgoyette-compat-20190127:1.25
	pgoyette-compat-20190118:1.25
	pgoyette-compat-1226:1.25
	pgoyette-compat-1126:1.25
	pgoyette-compat-1020:1.25
	pgoyette-compat-0930:1.25
	pgoyette-compat-0906:1.25
	netbsd-7-2-RELEASE:1.21
	pgoyette-compat-0728:1.25
	netbsd-8-0-RELEASE:1.24
	phil-wifi:1.25.0.6
	phil-wifi-base:1.25
	pgoyette-compat-0625:1.25
	netbsd-8-0-RC2:1.24
	pgoyette-compat-0521:1.25
	pgoyette-compat-0502:1.25
	pgoyette-compat-0422:1.25
	netbsd-8-0-RC1:1.24
	pgoyette-compat-0415:1.25
	pgoyette-compat-0407:1.25
	pgoyette-compat-0330:1.25
	pgoyette-compat-0322:1.25
	pgoyette-compat-0315:1.25
	netbsd-7-1-2-RELEASE:1.21
	pgoyette-compat:1.25.0.4
	pgoyette-compat-base:1.25
	netbsd-7-1-1-RELEASE:1.21
	matt-nb8-mediatek:1.24.0.6
	matt-nb8-mediatek-base:1.24
	perseant-stdc-iso10646:1.25.0.2
	perseant-stdc-iso10646-base:1.25
	netbsd-8:1.24.0.4
	netbsd-8-base:1.24
	prg-localcount2-base3:1.24
	prg-localcount2-base2:1.24
	prg-localcount2-base1:1.24
	prg-localcount2:1.24.0.2
	prg-localcount2-base:1.24
	pgoyette-localcount-20170426:1.24
	bouyer-socketcan-base1:1.24
	pgoyette-localcount-20170320:1.24
	netbsd-7-1:1.21.0.10
	netbsd-7-1-RELEASE:1.21
	netbsd-7-1-RC2:1.21
	netbsd-7-nhusb-base-20170116:1.21
	bouyer-socketcan:1.22.0.4
	bouyer-socketcan-base:1.22
	pgoyette-localcount-20170107:1.22
	netbsd-7-1-RC1:1.21
	pgoyette-localcount-20161104:1.22
	netbsd-7-0-2-RELEASE:1.21
	localcount-20160914:1.22
	netbsd-7-nhusb:1.21.0.8
	netbsd-7-nhusb-base:1.21
	pgoyette-localcount-20160806:1.22
	pgoyette-localcount-20160726:1.22
	pgoyette-localcount:1.22.0.2
	pgoyette-localcount-base:1.22
	netbsd-7-0-1-RELEASE:1.21
	netbsd-7-0:1.21.0.6
	netbsd-7-0-RELEASE:1.21
	netbsd-7-0-RC3:1.21
	netbsd-7-0-RC2:1.21
	netbsd-7-0-RC1:1.21
	netbsd-5-2-3-RELEASE:1.13
	netbsd-5-1-5-RELEASE:1.13
	netbsd-6-0-6-RELEASE:1.18
	netbsd-6-1-5-RELEASE:1.18
	netbsd-7:1.21.0.4
	netbsd-7-base:1.21
	yamt-pagecache-base9:1.21
	yamt-pagecache-tag8:1.18.6.1
	netbsd-6-1-4-RELEASE:1.18
	netbsd-6-0-5-RELEASE:1.18
	tls-earlyentropy:1.21.0.2
	tls-earlyentropy-base:1.21
	riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.21
	riastradh-drm2-base3:1.21
	netbsd-6-1-3-RELEASE:1.18
	netbsd-6-0-4-RELEASE:1.18
	netbsd-5-2-2-RELEASE:1.13
	netbsd-5-1-4-RELEASE:1.13
	netbsd-6-1-2-RELEASE:1.18
	netbsd-6-0-3-RELEASE:1.18
	netbsd-5-2-1-RELEASE:1.13
	netbsd-5-1-3-RELEASE:1.13
	netbsd-6-1-1-RELEASE:1.18
	riastradh-drm2-base2:1.19
	riastradh-drm2-base1:1.19
	riastradh-drm2:1.19.0.2
	riastradh-drm2-base:1.19
	netbsd-6-1:1.18.0.16
	netbsd-6-0-2-RELEASE:1.18
	netbsd-6-1-RELEASE:1.18
	netbsd-6-1-RC4:1.18
	netbsd-6-1-RC3:1.18
	agc-symver:1.19.0.4
	agc-symver-base:1.19
	netbsd-6-1-RC2:1.18
	netbsd-6-1-RC1:1.18
	yamt-pagecache-base8:1.19
	netbsd-5-2:1.13.0.42
	netbsd-6-0-1-RELEASE:1.18
	yamt-pagecache-base7:1.19
	netbsd-5-2-RELEASE:1.13
	netbsd-5-2-RC1:1.13
	matt-nb6-plus-nbase:1.18
	yamt-pagecache-base6:1.19
	netbsd-6-0:1.18.0.14
	netbsd-6-0-RELEASE:1.18
	netbsd-6-0-RC2:1.18
	tls-maxphys:1.18.0.12
	tls-maxphys-base:1.21
	matt-nb6-plus:1.18.0.10
	matt-nb6-plus-base:1.18
	netbsd-6-0-RC1:1.18
	yamt-pagecache-base5:1.18
	yamt-pagecache-base4:1.18
	netbsd-6:1.18.0.8
	netbsd-6-base:1.18
	netbsd-5-1-2-RELEASE:1.13
	netbsd-5-1-1-RELEASE:1.13
	yamt-pagecache-base3:1.18
	yamt-pagecache-base2:1.18
	yamt-pagecache:1.18.0.6
	yamt-pagecache-base:1.18
	cherry-xenmp:1.18.0.4
	cherry-xenmp-base:1.18
	bouyer-quota2-nbase:1.18
	bouyer-quota2:1.18.0.2
	bouyer-quota2-base:1.18
	matt-mips64-premerge-20101231:1.18
	matt-nb5-mips64-premerge-20101231:1.13
	matt-nb5-pq3:1.13.0.40
	matt-nb5-pq3-base:1.13
	netbsd-5-1:1.13.0.38
	netbsd-5-1-RELEASE:1.13
	netbsd-5-1-RC4:1.13
	matt-nb5-mips64-k15:1.13
	netbsd-5-1-RC3:1.13
	netbsd-5-1-RC2:1.13
	netbsd-5-1-RC1:1.13
	netbsd-5-0-2-RELEASE:1.13
	matt-nb5-mips64-premerge-20091211:1.13
	matt-premerge-20091211:1.16
	matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.13
	matt-nb4-mips64-k7-u2a-k9b:1.13
	matt-nb5-mips64-u1-k1-k5:1.13
	matt-nb5-mips64:1.13.0.36
	netbsd-5-0-1-RELEASE:1.13
	jym-xensuspend-nbase:1.16
	netbsd-5-0:1.13.0.34
	netbsd-5-0-RELEASE:1.13
	netbsd-5-0-RC4:1.13
	netbsd-5-0-RC3:1.13
	netbsd-5-0-RC2:1.13
	jym-xensuspend:1.15.0.2
	jym-xensuspend-base:1.16
	netbsd-5-0-RC1:1.13
	netbsd-5:1.13.0.32
	netbsd-5-base:1.13
	matt-mips64-base2:1.13
	matt-mips64:1.13.0.30
	mjf-devfs2:1.13.0.28
	mjf-devfs2-base:1.13
	netbsd-4-0-1-RELEASE:1.13
	wrstuden-revivesa-base-3:1.13
	wrstuden-revivesa-base-2:1.13
	wrstuden-fixsa-newbase:1.13
	wrstuden-revivesa-base-1:1.13
	yamt-pf42-base4:1.13
	yamt-pf42-base3:1.13
	hpcarm-cleanup-nbase:1.13
	yamt-pf42-baseX:1.13
	yamt-pf42-base2:1.13
	wrstuden-revivesa:1.13.0.26
	wrstuden-revivesa-base:1.13
	yamt-pf42:1.13.0.24
	yamt-pf42-base:1.13
	keiichi-mipv6-nbase:1.13
	keiichi-mipv6:1.13.0.22
	keiichi-mipv6-base:1.13
	matt-armv6-nbase:1.13
	matt-armv6-prevmlocking:1.13
	wrstuden-fixsa-base-1:1.13
	netbsd-4-0:1.13.0.20
	netbsd-4-0-RELEASE:1.13
	cube-autoconf:1.13.0.18
	cube-autoconf-base:1.13
	netbsd-4-0-RC5:1.13
	netbsd-4-0-RC4:1.13
	netbsd-4-0-RC3:1.13
	netbsd-4-0-RC2:1.13
	netbsd-4-0-RC1:1.13
	matt-armv6:1.13.0.16
	matt-armv6-base:1.13
	matt-mips64-base:1.13
	hpcarm-cleanup:1.13.0.14
	hpcarm-cleanup-base:1.13
	netbsd-3-1-1-RELEASE:1.13
	netbsd-3-0-3-RELEASE:1.13
	wrstuden-fixsa:1.13.0.12
	wrstuden-fixsa-base:1.13
	abandoned-netbsd-4-base:1.13
	abandoned-netbsd-4:1.13.0.6
	netbsd-3-1:1.13.0.8
	netbsd-3-1-RELEASE:1.13
	netbsd-3-0-2-RELEASE:1.13
	netbsd-3-1-RC4:1.13
	netbsd-3-1-RC3:1.13
	netbsd-3-1-RC2:1.13
	netbsd-3-1-RC1:1.13
	netbsd-4:1.13.0.10
	netbsd-4-base:1.13
	netbsd-3-0-1-RELEASE:1.13
	netbsd-3-0:1.13.0.4
	netbsd-3-0-RELEASE:1.13
	netbsd-3-0-RC6:1.13
	netbsd-3-0-RC5:1.13
	netbsd-3-0-RC4:1.13
	netbsd-3-0-RC3:1.13
	netbsd-3-0-RC2:1.13
	netbsd-3-0-RC1:1.13
	netbsd-2-0-3-RELEASE:1.11
	netbsd-2-1:1.11.0.8
	netbsd-2-1-RELEASE:1.11
	netbsd-2-1-RC6:1.11
	netbsd-2-1-RC5:1.11
	netbsd-2-1-RC4:1.11
	netbsd-2-1-RC3:1.11
	netbsd-2-1-RC2:1.11
	netbsd-2-1-RC1:1.11
	netbsd-2-0-2-RELEASE:1.11
	netbsd-3:1.13.0.2
	netbsd-3-base:1.13
	netbsd-2-0-1-RELEASE:1.11
	netbsd-2:1.11.0.6
	netbsd-2-base:1.11
	netbsd-2-0-RELEASE:1.11
	thorpej-syslogd-hack-branch:1.11.0.4
	thorpej-syslogd-hack-base:1.11
	netbsd-2-0-RC5:1.11
	netbsd-2-0-RC4:1.11
	netbsd-2-0-RC3:1.11
	netbsd-2-0-RC2:1.11
	netbsd-2-0-RC1:1.11
	netbsd-2-0:1.11.0.2
	netbsd-2-0-base:1.11
	netbsd-1-6-PATCH002-RELEASE:1.9
	netbsd-1-6-PATCH002:1.9
	netbsd-1-6-PATCH002-RC4:1.9
	netbsd-1-6-PATCH002-RC3:1.9
	netbsd-1-6-PATCH002-RC2:1.9
	netbsd-1-6-PATCH002-RC1:1.9
	netbsd-1-6-PATCH001:1.9
	netbsd-1-6-PATCH001-RELEASE:1.9
	netbsd-1-6-PATCH001-RC3:1.9
	netbsd-1-6-PATCH001-RC2:1.9
	netbsd-1-6-PATCH001-RC1:1.9
	fvdl_fs64_base:1.9
	netbsd-1-6-RELEASE:1.9
	netbsd-1-6-RC3:1.9
	netbsd-1-6-RC2:1.9
	netbsd-1-6-RC1:1.9
	netbsd-1-6:1.9.0.2
	netbsd-1-6-base:1.9
	netbsd-1-5-PATCH003:1.7.4.1
	netbsd-1-5-PATCH002:1.7.4.1
	netbsd-1-5-PATCH001:1.7.4.1
	netbsd-1-5-RELEASE:1.7
	netbsd-1-5-BETA2:1.7
	netbsd-1-5-BETA:1.7
	netbsd-1-4-PATCH003:1.5
	netbsd-1-5-ALPHA2:1.7
	netbsd-1-5:1.7.0.4
	netbsd-1-5-base:1.7
	minoura-xpg4dl-base:1.7
	minoura-xpg4dl:1.7.0.2
	netbsd-1-4-PATCH002:1.5
	wrstuden-devbsize-19991221:1.6
	wrstuden-devbsize:1.5.0.8
	wrstuden-devbsize-base:1.6
	comdex-fall-1999:1.5.0.6
	comdex-fall-1999-base:1.5
	netbsd-1-4-PATCH001:1.5
	netbsd-1-4-RELEASE:1.5
	netbsd-1-4:1.5.0.4
	netbsd-1-4-base:1.5
	netbsd-1-3-PATCH003:1.5
	netbsd-1-3-PATCH003-CANDIDATE2:1.5
	netbsd-1-3-PATCH003-CANDIDATE1:1.5
	netbsd-1-3-PATCH003-CANDIDATE0:1.5
	netbsd-1-3-PATCH002:1.5
	netbsd-1-3-PATCH001:1.5
	netbsd-1-3-RELEASE:1.5
	netbsd-1-3-BETA:1.5
	netbsd-1-3:1.5.0.2
	netbsd-1-3-base:1.5
	netbsd-1-2-PATCH001:1.4
	netbsd-1-2-RELEASE:1.4
	netbsd-1-2-BETA:1.4
	netbsd-1-2:1.4.0.4
	netbsd-1-2-base:1.4
	netbsd-1-1-PATCH001:1.3
	lite-2:1.1.1.2
	CSRG:1.1.1
	netbsd-1-1-RELEASE:1.3
	netbsd-1-1:1.3.0.2
	netbsd-1-1-base:1.3
	netbsd-1-0-PATCH06:1.2
	netbsd-1-0-PATCH05:1.2
	netbsd-1-0-PATCH04:1.2
	netbsd-1-0-PATCH03:1.2
	netbsd-1-0-PATCH02:1.2
	netbsd-1-0-PATCH1:1.2
	netbsd-1-0-PATCH0:1.2
	netbsd-1-0-RELEASE:1.2
	netbsd-1-0:1.2.0.2
	netbsd-1-0-base:1.2
	netbsd-0-9-RELEASE:1.1.1.1
	netbsd-0-9-BETA:1.1.1.1
	netbsd-0-9-ALPHA2:1.1.1.1
	netbsd-0-9-ALPHA:1.1.1.1
	netbsd-0-9:1.1.1.1.0.2
	netbsd-0-9-base:1.1.1.1
	netbsd-0-8:1.1.1.1
	netbsd-alpha-1:1.1.1.1
	patchkit-0-2-2:1.1.1.1
	WFJ-386bsd-01:1.1.1.1
	WFJ-920714:1.1.1;
locks; strict;
comment	@.\" @;


1.28
date	2023.12.31.23.39.27;	author uwe;	state Exp;
branches;
next	1.27;
commitid	WWoNRdLSTH6ZUFSE;

1.27
date	2023.12.31.19.41.22;	author uwe;	state Exp;
branches;
next	1.26;
commitid	vUyp8jbaTPliBESE;

1.26
date	2021.09.01.13.44.02;	author andvar;	state Exp;
branches;
next	1.25;
commitid	p9awv7UjpNLAYf7D;

1.25
date	2017.07.03.21.35.32;	author wiz;	state Exp;
branches;
next	1.24;
commitid	GDcvPnLuEcjBtPXz;

1.24
date	2017.02.21.18.36.39;	author abhinav;	state Exp;
branches;
next	1.23;
commitid	SkOdNKm3VOoMIQGz;

1.23
date	2017.02.21.18.28.28;	author abhinav;	state Exp;
branches;
next	1.22;
commitid	dDtFMGSrzVZrGQGz;

1.22
date	2016.01.05.00.41.30;	author khorben;	state Exp;
branches
	1.22.2.1
	1.22.4.1;
next	1.21;
commitid	9m83GNMu4w7y3GPy;

1.21
date	2013.11.10.00.13.50;	author wiz;	state Exp;
branches;
next	1.20;
commitid	KC1zpAtZydqtaFcx;

1.20
date	2013.11.09.19.00.18;	author christos;	state Exp;
branches;
next	1.19;
commitid	wTRVXAmCYBOPqDcx;

1.19
date	2012.10.05.16.15.45;	author msaitoh;	state Exp;
branches;
next	1.18;

1.18
date	2010.01.01.21.44.07;	author wiz;	state Exp;
branches
	1.18.6.1
	1.18.12.1;
next	1.17;

1.17
date	2010.01.01.21.26.18;	author mbalmer;	state Exp;
branches;
next	1.16;

1.16
date	2009.04.09.02.41.44;	author joerg;	state Exp;
branches;
next	1.15;

1.15
date	2008.11.07.07.36.38;	author minskim;	state Exp;
branches
	1.15.2.1;
next	1.14;

1.14
date	2008.10.31.16.12.19;	author christos;	state Exp;
branches;
next	1.13;

1.13
date	2004.11.19.18.48.43;	author wiz;	state Exp;
branches;
next	1.12;

1.12
date	2004.11.19.02.18.11;	author thorpej;	state Exp;
branches;
next	1.11;

1.11
date	2003.08.07.11.25.44;	author agc;	state Exp;
branches
	1.11.4.1;
next	1.10;

1.10
date	2003.07.02.08.33.22;	author wiz;	state Exp;
branches;
next	1.9;

1.9
date	2002.02.02.01.58.52;	author wiz;	state Exp;
branches;
next	1.8;

1.8
date	2001.04.03.11.29.47;	author wiz;	state Exp;
branches;
next	1.7;

1.7
date	2000.04.12.16.38.58;	author kim;	state Exp;
branches
	1.7.4.1;
next	1.6;

1.6
date	99.11.30.12.08.49;	author ad;	state Exp;
branches;
next	1.5;

1.5
date	97.10.17.13.46.09;	author lukem;	state Exp;
branches
	1.5.8.1;
next	1.4;

1.4
date	96.01.02.17.41.46;	author perry;	state Exp;
branches;
next	1.3;

1.3
date	95.06.20.22.43.19;	author jtc;	state Exp;
branches;
next	1.2;

1.2
date	93.08.01.07.23.27;	author mycroft;	state Exp;
branches;
next	1.1;

1.1
date	93.03.21.09.45.37;	author cgd;	state Exp;
branches
	1.1.1.1;
next	;

1.22.2.1
date	2017.03.20.06.58.09;	author pgoyette;	state Exp;
branches;
next	;
commitid	jjw7cAwgyKq7RfKz;

1.22.4.1
date	2017.04.21.16.54.19;	author bouyer;	state Exp;
branches;
next	;
commitid	dUG7nkTKALCadqOz;

1.18.6.1
date	2012.10.30.19.00.52;	author yamt;	state Exp;
branches;
next	1.18.6.2;

1.18.6.2
date	2014.05.22.11.43.10;	author yamt;	state Exp;
branches;
next	;
commitid	wmvImESqVQCgMwBx;

1.18.12.1
date	2012.11.20.03.03.05;	author tls;	state Exp;
branches;
next	1.18.12.2;

1.18.12.2
date	2014.08.20.00.05.18;	author tls;	state Exp;
branches;
next	;
commitid	jTnpym9Qu0o4R1Nx;

1.15.2.1
date	2009.05.13.19.20.41;	author jym;	state Exp;
branches;
next	;

1.11.4.1
date	2004.11.14.23.04.18;	author thorpej;	state Exp;
branches;
next	1.11.4.2;

1.11.4.2
date	2004.11.15.00.17.00;	author thorpej;	state Exp;
branches;
next	1.11.4.3;

1.11.4.3
date	2004.11.15.15.07.02;	author thorpej;	state Exp;
branches;
next	1.11.4.4;

1.11.4.4
date	2004.11.15.17.16.10;	author thorpej;	state Exp;
branches;
next	1.11.4.5;

1.11.4.5
date	2004.11.16.22.20.56;	author thorpej;	state Exp;
branches;
next	1.11.4.6;

1.11.4.6
date	2004.11.17.01.27.26;	author thorpej;	state Exp;
branches;
next	1.11.4.7;

1.11.4.7
date	2004.11.17.03.23.09;	author thorpej;	state Exp;
branches;
next	1.11.4.8;

1.11.4.8
date	2004.11.17.06.24.03;	author thorpej;	state Exp;
branches;
next	1.11.4.9;

1.11.4.9
date	2004.11.17.16.39.09;	author wiz;	state Exp;
branches;
next	1.11.4.10;

1.11.4.10
date	2004.11.18.20.51.40;	author thorpej;	state Exp;
branches;
next	1.11.4.11;

1.11.4.11
date	2004.11.18.21.23.17;	author thorpej;	state Exp;
branches;
next	;

1.7.4.1
date	2001.04.04.16.41.13;	author he;	state Exp;
branches;
next	;

1.5.8.1
date	99.12.27.18.38.10;	author wrstuden;	state Exp;
branches;
next	;

1.1.1.1
date	93.03.21.09.45.37;	author cgd;	state Exp;
branches;
next	1.1.1.2;

1.1.1.2
date	95.12.28.16.58.29;	author perry;	state Exp;
branches;
next	;


desc
@@


1.28
log
@syslog.conf(5): add back .Pp lost in previous
@
text
@.\"	$NetBSD: syslog.conf.5,v 1.27 2023/12/31 19:41:22 uwe Exp $
.\"
.\" Copyright (c) 1990, 1991, 1993
.\"	The Regents of the University of California.  All rights reserved.
.\"
.\" Redistribution and use in source and binary forms, with or without
.\" modification, are permitted provided that the following conditions
.\" are met:
.\" 1. Redistributions of source code must retain the above copyright
.\"    notice, this list of conditions and the following disclaimer.
.\" 2. Redistributions in binary form must reproduce the above copyright
.\"    notice, this list of conditions and the following disclaimer in the
.\"    documentation and/or other materials provided with the distribution.
.\" 3. Neither the name of the University nor the names of its contributors
.\"    may be used to endorse or promote products derived from this software
.\"    without specific prior written permission.
.\"
.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
.\"     from: @@(#)syslog.conf.5	8.1 (Berkeley) 6/9/93
.\"
.Dd November 9, 2013
.Dt SYSLOG.CONF 5
.Os
.Sh NAME
.Nm syslog.conf
.Nd
.Xr syslogd 8
configuration file
.Sh DESCRIPTION
The
.Nm
file is the configuration file for the
.Xr syslogd 8
program.
It consists of extended options
.Po
lines with one
.Ar key\^ Ns Li = Ns Ar value
assignment
.Pc
and blocks of lines separated by
.Em program
and
.Em hostname
specifications, with each line containing two fields: the
.Em selector
field which specifies the types of messages and priorities to which the
line applies, and an
.Em action
field which specifies the action to be taken if a message
.Xr syslogd 8
receives matches the selection criteria.
The
.Em selector
field is separated from the
.Em action
field by one or more tab characters.
.Pp
Blank lines and lines whose first non-blank character is a hash
.Pq Ql #
character are ignored.
.\"
.Ss Selectors
.Pp
The
.Em selector Ns s
function
are encoded as a
.Em facility ,
a period
.Pq Ql \&. ,
an optional set of
.Em comparison flags
.Pq Oo Li \&! Oc Ns Op Li <=> ,
and a
.Em level ,
with no intervening white-space.
Both the
.Em facility
and the
.Em level
are case insensitive.
.Pp
The
.Em facility
describes the part of the system generating the message, and is one of
the following keywords:
.Ic auth ,
.Ic authpriv ,
.Ic cron ,
.Ic daemon ,
.Ic ftp ,
.Ic kern ,
.Ic lpr ,
.Ic mail ,
.Ic mark ,
.Ic news ,
.Ic syslog ,
.Ic user ,
.Ic uucp ,
and
.Ic local0
through
.Ic local7 .
These keywords
.Po
with the exception of
.Ic mark
.Pc
correspond to the similar
.Ql LOG_
values specified to the
.Xr openlog 3
and
.Xr syslog 3
library routines.
.Pp
The
.Em comparison flags
may be used to specify exactly what levels are logged.
If unspecified, the default comparison is
.Ql >=
.Pq greater than or equal to ,
or, if the
.Fl U
option is passed to
.Xr syslogd 8 ,
.Ql =
.Pq equal to .
Comparison flags beginning with
.Ql \&!
will have their logical sense inverted.
Thus,
.Ql !=info
means all levels except info and
.Ql !notice
has the same meaning as
.Ql <notice .
.Pp
The
.Em level
describes the severity of the message, and is a keyword from the
following ordered list (higher to lower):
.Ic emerg ,
.Ic alert ,
.Ic crit ,
.Ic err ,
.Ic warning ,
.Ic notice ,
.Ic info ,
and
.Ic debug .
These keywords correspond to the
similar
.Ql LOG_
values specified to the
.Xr syslog 3
library routine.
.Pp
Each block of lines is separated from the previous block by a
.Em program
or
.Em hostname
specification.
A block will only log messages corresponding to the most recent
.Em program
and
.Em hostname
specifications given.
Consider the case of a block that selects
.Ql pppd
as the
.Em program ,
directly followed by a block that selects messages from the
.Em hostname
.Ql dialhost .
The second block will log only messages from the
.Xr pppd 8
program from the host
.Sq dialhost .
.Pp
A
.Em program
specification of the form
.Ql #!+prog1,prog2
or
.Ql !+prog1,prog2
will cause subsequent blocks to be applied to messages logged by the
specified programs.
A
.Em program
specification of the form
.Ql #!-prog1,prog2
or
.Ql !-prog1,prog2
will cause subsequent blocks to be applied to messages logged by programs
other than the ones specified.
A
.Em program
specification of the form
.Ql #!prog1,prog2
or
.Ql !prog1,prog2
is equivalent to
.Ql !+prog1,prog2 .
Program selectors may also match kernel-generated messages.
For example, a program specification of
.Ql !+subsys
will match kernel-generated messages of the form
.Ql subsys: here is a message .
The special specification
.Ql !*
will cause subsequent blocks to apply to all programs.
.Pp
A
.Em hostname
specification of the form
.Ql #+host1,host2
or
.Ql +host1,host2
will cause subsequent blocks to be applied to messages received from
the specified hosts.
A
.Em hostname
specification of the form
.Ql #-host1,host2
or
.Ql -host1,host2
will cause subsequent blocks to be applied to messages from hosts other
than the ones specified.
If the hostname is given as
.Ql @@ ,
the local hostname will be used.
The special specification
.Ql +*
will cause subsequent blocks to apply to all hosts.
.Pp
See
.Xr syslog 3
for a further descriptions of both the
.Em facility
and
.Em level
keywords and their significance.
It is preferred that selections be made based on
.Em facility
rather than
.Em program ,
since the latter can vary in a networked environment.
However, there are cases where a
.Em facility
may be too broadly defined.
.Pp
If a received message matches the specified
.Em facility ,
and the specified
.Em level
comparison is true,
and the first word in the message after the date matches the
.Em program ,
the action specified in the
.Em action
field will be taken.
.Pp
Multiple
.Em selectors
may be specified for a single
.Em action
by separating them with semicolon
.Pq Ql \&;
characters.
It is important to note, however, that each
.Em selector
can modify the ones preceding it.
.Pp
Multiple
.Em facilities
may be specified for a single
.Em level
by separating them with comma
.Pq Ql \&,
characters.
.Pp
An asterisk
.Pq Ql \&*
can be used to specify all
.Em facilities
or all
.Em levels .
.Pp
The special
.Em facility
.Ic mark
receives a message at priority
.Ql info
every 20 minutes
.Po see
.Xr syslogd 8
.Pc .
This is not enabled by a
.Em facility
field containing an asterisk.
.Pp
The special
.Em level
.Ql none
disables a particular
.Em facility .
.\"
.Ss Actions
.Pp
The
.Em action
field of each line specifies the action to be taken when the
.Em selector
field selects a message.
There are five forms:
.Bl -bullet
.It
A pathname beginning with a leading slash
.Pq Ql \&/ .
Selected messages are appended to the file, unless
pathname points to an existing FIFO special file.
.Xr syslogd 8
treats FIFO specially by opening them in non-blocking mode and
discarding messages sent when no reader is listening on the other side.
.Pp
To ensure that kernel messages are written to disk promptly,
.Xr syslogd 8
calls
.Xr fsync 2
after writing messages from the kernel.
Other messages are not synced explicitly.
You may disable syncing of files specified to receive kernel messages
by prefixing the pathname with a minus sign
.Pq Ql \- .
Note that use of this option may cause the loss of log information in
the event of a system crash immediately following the write attempt.
However, using this option may prove to be useful if your system's
kernel is logging many messages.
.Pp
Normally the priority and version is not written to file.
In order to use syslog-sign you may prefix a pathname with the plus sign
.Pq Ql + .
If both switches are used the order has to be
.Ql +\- .
.It
A hostname preceded by an at sign
.Pq Ql @@ .
Selected messages are forwarded to the
.Xr syslogd 8
program on the named host with UDP.
.It
A hostname preceded by an at sign
.Pq Ql @@ ,
and enclosed in brackets
.Pq Ql [] .
Selected messages are forwarded with TLS to the
.Xr syslogd 8
program on the named host.
After the closing bracket a colon
.Pq Ql \&:
and a port number or service name may be appended.
Additional parameters are configured in parentheses in the form of
.Ar key\^ Ns Li = Ns Ar value .
Recognized keywords are
.Ic subject ,
.Ic fingerprint ,
.Ic cert ,
and
.Ic verify .
.It
A comma separated list of users.
Selected messages are written to those users
if they are logged in.
.It
An asterisk
.Pq Ql * .
Selected messages are written to all logged-in users.
.It
A vertical bar
.Pq Ql |
followed by a command to which to pipe the selected messages.
The command string is passed to
.Pa /bin/sh
for evaluation, so the usual shell metacharacters or input/output
redirection can occur.
.Po
Note that redirecting
.Xr stdio 3
buffered output from the invoked command can cause additional delays,
or even lost output data in case a logging subprocess exits with a
signal.
.Pc
The command itself runs with
.Va stdout
and
.Va stderr
redirected to
.Pa /dev/null .
Upon receipt of a
.Dv SIGHUP ,
.Xr syslogd 8
will close the pipe to the process.
If the process does not exit voluntarily, it will be sent a
.Dv SIGTERM
signal after a grace period of up to 60 seconds.
.Pp
The command will only be started once data arrives that should be
piped to it.
If the command exits, it will be restarted as necessary.
.Pp
If it is desired that the subprocess should receive exactly one line of
input, this can be achieved by exiting after reading and processing the
single line.
A wrapper script can be used to achieve this effect, if necessary.
Note that this method can be very resource-intensive if many log messages
are being piped through the filter.
.Pp
Unless the command is a full pipeline, it may be useful to
start the command with
.Ic exec
so that the invoking shell process does not wait for the command to
complete.
Note that the command is started with the UID of the
.Xr syslogd 8
process, normally the superuser.
.Pp
Just like with files a plus sign
.Pq Ql +
will leave the priority and version information intact.
.El
.Sh "TLS OPTIONS"
Additional options are used for TLS configuration:
.Bl -tag -width Ic
.It Ic tls_server
Enables TLS server mode.
.It Ic tls_bindport
Service name or port number to bind to.
Default is
.Ql syslog .
.Em As long as no official port is assigned this option is required
.Em for TLS servers.
.It Ic tls_bindhost
Hostname or IP to bind to.
.It Ic tls_gen_cert
Automatically generate a private key and certificate.
.It Ic tls_key
File with private key.
Default is
.Pa /etc/openssl/default.key
.It Ic tls_cert
File with certificate to use.
Default is
.Pa /etc/openssl/default.crt
.It Ic tls_ca
File with CA certificate to use.
.It Ic tls_cadir
Directory containing CA certificates.
.It Ic tls_verify
If set to
.Ql off
then certificate authentication is skipped.
.It Ic tls_allow_fingerprints
List of fingerprints of trusted client certificates.
.It Ic tls_allow_clientcerts
List of filenames with trusted client certificates.
.El
.Pp
One function of TLS is mutual authentication of client and server.
Unless authentication is disabled by setting
.Ql tls_verify=off
the following rules are used.
.Ss "Client Authentication"
A client can be configured not to check a server's certificate by
setting the
.Em action Ap s
parameter
.Ql verify
to
.Ql off .
If the server's certificate is signed by a trusted CA then it is checked
if its hostname or IP is given in its certificate
.Po
as a CommonName, as a
.Tn DNS
SubjectAltName, or as an
.Tn IP
SubjectAltName
.Pc .
If any match is found then the server is authenticated.
If a
.Ql subject
parameter is given then it is can satisfy this test as well.
This allows DNS-independent configurations using the server's IP address in the
destination and adding its hostname as
.Ql subject
to authenticate the TLS connection without having to add the IP to the X.509
certificate.
.Pp
If no CA is used or no trust path between CA and server certificate exists, then
hash value of the server's certificate is compared with the hash given in
.Ql fingerprint
and the hash of the certificate in
.Ql cert .
If the hashes are equal then the server is authenticated.
.Ss "Server Authentication"
If using a CA and the client's certificate is signed by it then the client is
authenticated.
Otherwise the hash of the client's certificate is compared with the hashes given
in
.Ql tls_allow_fingerprints ,
and the hashes of the certificates given in
.Ql tls_allow_clientcerts
options.
On any match the client is authenticated.
.Sh BUFFERING OPTIONS
.Xr syslogd 8
is able to buffer temporary not writable messages in memory.
To limit the memory consumed for this buffering the following options may be
given:
.Pp
.Bl -tag -width Ic -compact
.It Ic file_queue_length
.It Ic pipe_queue_length
.It Ic tls_queue_length
The maximum number of messages buffered for one destination of type file,
pipe, or TLS respectively.
Defaults are
1024 for files and pipes and \-1 (no limit) for TLS.
.Pp
.It Ic file_queue_size
.It Ic pipe_queue_size
.It Ic tls_queue_size
The maximum memory usage in bytes of messages buffered for one destination.
Defaults are
.Tn 1M
for files and pipes, and
.Tn 16M
for TLS.
.El
.Pp
Values for these options can be specified using the usual suffixes accepted by
.Xr dehumanize_number 3 .
.Sh SIGNING OPTIONS
.Xr syslogd 8
is able to digitally sign all processed messages.
The used protocol is defined by RFC\~5848 (syslog-sign):
at the start of a session the signing sender sends so called certificate
blocks containing its public key; after that it periodically sends a signed
message containing hashes of previous messages.
.Pp
To detect later manipulation one has to keep a copy of the key used for
signing (otherwise an attacker could alter the logs and sign them with his
own key).
If TLS is used with a DSA key then the same key will be used for signing.
This is the recommended setup because it makes it easy to have copies of
the certificate (with the public key) in backups.
Otherwise new keys are generated on every restart and for certain verification
it is necessary to have copies of all used keys.
So logging only to a local file is not secure; at least the used keys should
be logged to another host.
.Bl -tag -width Ic
.It Ic sign_sg
Enables signing.
Set this option to enable syslog-sign and select how to assign
messages to signature groups (subsets of messages that are signed together).
To enable later signature verification and detection of lost messages the
assignment should be chosen such that all messages of one signature group
are written to the same file.
Four possible values for this option are:
.Bl -tag -width Ds
.It Li 0
Use one global signature group for all messages.
.It Li 1
Use one signature group per priority.
.It Li 2
Use signature groups for ranges of priorities.
.It Li 3
Use one signature group per destination.
This is a custom strategy not defined by the standard.
With this setting one signature group is set up for
every file and network action.
.El
.It Ic sign_delim_sg2
This option is only evaluated with
.Ql sign_sg=2
and allows to configure the priority ranges for signature groups.
The parameters are numerical values used as the maximum priority for one group.
The default is to use one signature groups per facility, which is equal to
setting
.Dl sign_delim_sg2=7 15 23 31 39 ...
.El
.Sh FILES
.Bl -tag -width Pa
.It Pa /etc/syslog.conf
The
.Xr syslogd 8
configuration file.
.It Pa /usr/share/examples/syslogd/verify.pl
Example script to verify message signatures.
.Po
Requires Perl and modules not part of
.Nx .
.Pc
.El
.Sh EXAMPLES
A configuration file might appear as follows:
.Bd -literal
# Log all kernel messages, authentication messages of
# level notice or higher and anything of level err or
# higher to the console.
# Don't log private authentication messages!
*.err;kern.*;auth.notice;authpriv.none	/dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none		/var/log/messages

# Log daemon messages at debug level only
daemon.=debug				/var/log/daemon.debug

# The authpriv file has restricted access.
# Write logs with priority for later verification with syslog-sign.
authpriv.*				+/var/log/secure

# Log all the mail messages in one place.
mail.*					/var/log/maillog

# Everybody gets emergency messages, plus log them on another
# machine.
*.emerg					*
*.emerg					@@arpa.berkeley.edu

# Log all messages of level info or higher to another
# machine using TLS with an alternative portname and a
# fingerprint for authentication
*.info			@@[logserver]:1234(fingerprint="SHA1:01:02:...")

# Root and Eric get alert and higher messages.
*.alert					root,eric

# Save mail and news errors of level err and higher in a
# special file.
mail,news.err				/var/log/spoolerr

# Pipe all authentication messages to a filter.
auth.*					|exec /usr/local/sbin/authfilter

# Log kernel messages to a separate file without syncing each message.
kern.*					-/var/log/kernlog

# Save ftpd transactions along with mail and news.
!ftpd
*.*					/var/log/spoolerr

# Send all error messages from a RAID array through a filter.
!raid0
kern.err				|exec /usr/local/sbin/raidfilter

# Save pppd messages from dialhost to a separate file.
!pppd
+dialhost
*.*					/var/log/dialhost-pppd

# Save non-local log messages from all programs to a separate file.
!*
-@@
*.*					/var/log/foreign

# Generate digital signatures for all messages
# to each file or network destination.
sign_sg=3
.Ed
.Sh SEE ALSO
.Xr syslog 3 ,
.Xr syslogd 8
.Sh HISTORY
The
.Nm
file appeared in
.Bx 4.3 ,
along with
.Xr syslogd 8 .
.Sh BUGS
The effects of multiple selectors are sometimes not intuitive.
For example
.Ql mail.crit;*.err
will select
.Ql mail
facility messages at
the level of
.Ql err
or higher, not at the level of
.Ql crit
or higher.
@


1.27
log
@syslog.conf(5): improve markup

Use tagged lists, mark up literals, be consistent about options
(global): vs parameters (of a TLS action), fold TLS authentication
description into the TLS options section.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.26 2021/09/01 13:44:02 andvar Exp $
d480 1
d484 1
a484 1
the following rules are used:
@


1.26
log
@s/optons/options/
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.25 2017/07/03 21:35:32 wiz Exp $
d46 6
a51 1
It consists of extended options (lines with one key="value" assignment)
d70 6
d77 1
a77 1
.Em Selectors
d82 4
a85 3
.Pq Sq \&. ,
an optional set of comparison flags
.Pq Bo ! Bc Bq <=> ,
d98 25
a122 5
the following keywords: auth, authpriv, cron, ftp, daemon, kern, lpr,
mail, mark, news, syslog, user, uucp and local0 through local7.
These keywords (with the exception of mark) correspond to the
similar
.Dq Dv LOG_
d133 1
a133 1
.Sq >=
d139 1
a139 1
.Sq =
d142 1
a142 1
.So ! Sc
d145 1
a145 1
.Sq !=info
d147 1
a147 1
.Sq !notice
d149 1
a149 1
.Sq <notice .
d154 10
a163 2
following ordered list (higher to lower): emerg, alert, crit, err,
warning, notice, info and debug.
d166 1
a166 1
.Pq Dv LOG_
d281 1
a281 1
.Pq Sq \&;
d292 1
a292 1
.Pq Sq \&,
d296 1
a296 1
.Pq Sq \&*
d304 1
a304 1
.Dq mark
d306 1
a306 1
.Dq info
d308 3
a310 2
(see
.Xr syslogd 8 ) .
d317 1
a317 1
.Dq none
d320 2
d331 2
a332 1
A pathname (beginning with a leading slash).
d347 1
a347 1
.Ql - .
d355 1
a355 1
.Ql + .
d357 1
a357 1
.Ql +- .
d359 2
a360 3
A hostname (preceded by an at
.Pq Sq @@
sign).
d365 4
a368 5
A hostname preceded by an at
.Pq Sq @@
sign and enclosed in brackets
.Pq Sq []
.
d373 4
a376 3
.Pq Sq \&:
and a port or service name may be appended.
Additional options are configured in parentheses in the form of key="value".
d378 3
a380 3
.Ar subject ,
.Ar fingerprint ,
.Ar cert ,
d382 1
a382 1
.Ar verify .
d388 2
a389 1
An asterisk.
d393 1
a393 1
.Pq Sq |
d399 2
a400 1
(Note that redirecting
d404 2
a405 1
signal.)
d407 1
a407 1
.Em stdout
d409 1
a409 1
.Em stderr
d433 1
a433 1
.Em exec
d441 1
a441 1
.Ql +
a443 4
.Pp
Blank lines and lines whose first non-blank character is a hash
.Pq Sq #
character are ignored.
d446 2
a447 2
.Bl -ohang
.It Em tls_server
d449 1
a449 1
.It Em tls_bindport
d452 1
a452 1
.Sq syslog .
d455 1
a455 1
.It Em tls_bindhost
d457 1
a457 1
.It Em tls_gen_cert
d459 1
a459 1
.It Em tls_key
d462 2
a463 2
.Sq /etc/openssl/default.key
.It Em tls_cert
d466 2
a467 2
.Sq /etc/openssl/default.crt
.It Em tls_ca
d469 1
a469 1
.It Em tls_cadir
d471 1
a471 1
.It Em tls_verify
d473 1
a473 1
.Sq off
d475 1
a475 1
.It Em tls_allow_fingerprints
d477 1
a477 1
.It Em tls_allow_clientcerts
a479 1
.Sh "TLS AUTHENTICATION"
d482 1
a482 1
.Sq tls_verify=off
d484 4
a487 2
.Ss "As client:"
A client can be configured not to check a server's certificate by setting the
d489 1
a489 1
.Ar verify
d491 1
a491 1
.Sq off .
d493 8
a500 2
if its hostname or IP is given in its certificate (as a CommonName, as a
DNS SubjectAltName, or as an IP SubjectAltName).
d503 1
a503 1
.Ar subject
d507 1
a507 1
.Ar subject
d513 1
a513 1
.Ar fingerprint
d515 1
a515 1
.Ar cert .
d517 1
a517 1
.Ss "As server:"
d522 1
a522 1
.Ar tls_allow_fingerprints
d524 2
a525 1
.Ar tls_allow_clientcerts .
d527 1
a527 1
.Sh BUFFERING
d532 7
a538 6
.Bl -ohang
.It Em file_queue_length
.It Em pipe_queue_length
.It Em tls_queue_length
The maximum number of messages buffered for one destination of type tls, file,
or pipe respectively.
d540 5
a544 8
.Sq 1024 ,
.Sq 1024 ,
and
.Sq -1
(no limit).
.It Em file_queue_size
.It Em pipe_queue_size
.It Em tls_queue_size
d547 4
a550 4
.Sq 1M ,
.Sq 1M ,
and
.Sq 16M .
d552 4
a555 1
.Sh SIGNING
d558 1
a558 1
The used protocol is defined by RFC 5848 (syslog-sign):
d573 2
a574 2
.Bl -ohang
.It Em sign_sg
d582 2
a583 2
.Bl -hang -offset indent
.It Em 0
d585 1
a585 1
.It Em 1
d587 1
a587 1
.It Em 2
d589 1
a589 1
.It Em 3
d595 1
a595 1
.It Em sign_delim_sg2
d597 1
a597 1
.Sq sign_sg=2
d602 1
a602 1
.Sq sign_delim_sg2=7 15 23 31 39 ... .
d605 1
a605 1
.Bl -tag -width /etc/syslog.conf -compact
d612 4
a615 1
(Requires Perl and modules not part of NetBSD.)
d698 1
a698 1
.Dq mail.crit;*.err
d700 1
a700 1
.Dq mail
d703 1
a703 1
.Dq err
d705 1
a705 1
.Dq crit
@


1.25
log
@Remove workaround for ancient HTML generation code.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.24 2017/02/21 18:36:39 abhinav Exp $
d480 1
a480 1
To limit the memory consumed for this buffering the following optons may be
@


1.24
log
@Remove duplicate word from the sentence.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.23 2017/02/21 18:28:28 abhinav Exp $
d73 1
a73 1
.Pq Bo ! Bc Bq \*[Lt]=\*[Gt] ,
d101 1
a101 1
.Sq \*[Gt]=
d117 1
a117 1
.Sq \*[Lt]notice .
@


1.23
log
@Fix typos.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.22 2016/01/05 00:41:30 khorben Exp $
d514 1
a514 1
his own key).
@


1.22
log
@Typo
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.21 2013/11/10 00:13:50 wiz Exp $
d333 1
a333 1
Additional options are configured in parantheses in the form of key="value".
d479 1
a479 1
is able to buffer temporary not writeable messages in memory.
d593 1
a593 1
# fingerprint for athentication
@


1.22.4.1
log
@Sync with HEAD
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.24 2017/02/21 18:36:39 abhinav Exp $
d333 1
a333 1
Additional options are configured in parentheses in the form of key="value".
d479 1
a479 1
is able to buffer temporary not writable messages in memory.
d514 1
a514 1
own key).
d593 1
a593 1
# fingerprint for authentication
@


1.22.2.1
log
@Sync with HEAD
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.24 2017/02/21 18:36:39 abhinav Exp $
d333 1
a333 1
Additional options are configured in parentheses in the form of key="value".
d479 1
a479 1
is able to buffer temporary not writable messages in memory.
d514 1
a514 1
own key).
d593 1
a593 1
# fingerprint for authentication
@


1.21
log
@Bump date for FIFO support.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.20 2013/11/09 19:00:18 christos Exp $
d300 1
a300 1
Other messages are not synced explcitly.
@


1.20
log
@add support for outputting to FIFO's (Anthony Mallet)
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.19 2012/10/05 16:15:45 msaitoh Exp $
d32 1
a32 1
.Dd October 16, 2012
@


1.19
log
@RFC 5848
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.18 2010/01/01 21:44:07 wiz Exp $
d289 5
a293 1
Selected messages are appended to the file.
@


1.18
log
@Fix previous: Dd argument and lost Em markup.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.17 2010/01/01 21:26:18 mbalmer Exp $
d32 1
a32 1
.Dd January 1, 2010
d503 1
a503 1
The used protocol is defined by RFC nnnn (syslog-sign):
@


1.18.12.1
log
@Resync to 2012-11-19 00:00:00 UTC
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.19 2012/10/05 16:15:45 msaitoh Exp $
d32 1
a32 1
.Dd October 16, 2012
d503 1
a503 1
The used protocol is defined by RFC 5848 (syslog-sign):
@


1.18.12.2
log
@Rebase to HEAD as of a few days ago.
@
text
@d1 1
a1 1
.\"	$NetBSD$
d32 1
a32 1
.Dd November 9, 2013
d289 1
a289 5
Selected messages are appended to the file, unless
pathname points to an existing FIFO special file.
.Xr syslogd 8
treats FIFO specially by opening them in non-blocking mode and
discarding messages sent when no reader is listening on the other side.
@


1.18.6.1
log
@sync with head
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.18 2010/01/01 21:44:07 wiz Exp $
d32 1
a32 1
.Dd October 16, 2012
d503 1
a503 1
The used protocol is defined by RFC 5848 (syslog-sign):
@


1.18.6.2
log
@sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.18.6.1 2012/10/30 19:00:52 yamt Exp $
d32 1
a32 1
.Dd November 9, 2013
d289 1
a289 5
Selected messages are appended to the file, unless
pathname points to an existing FIFO special file.
.Xr syslogd 8
treats FIFO specially by opening them in non-blocking mode and
discarding messages sent when no reader is listening on the other side.
@


1.17
log
@fold long lines.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.16 2009/04/09 02:41:44 joerg Exp $
d32 1
a32 1
.Dd January 1st, 2010
d407 2
a408 2
.Em As long as no official port is assigned this option is required for TLS
servers.
@


1.16
log
@.br -> .Pp, capitalize subsection titles
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.15 2008/11/07 07:36:38 minskim Exp $
d32 1
a32 1
.Dd August 8, 2008
d407 2
a408 1
.Em As long as no official port is assigned this option is required for TLS servers.
d590 1
a590 1
*.info					@@[logserver]:1234(fingerprint="SHA1:01:02:...")
@


1.15
log
@Remove trailing whitespace.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.14 2008/10/31 16:12:19 christos Exp $
d438 1
a438 1
.Ss "as client:"
d456 1
a456 1
.br
d463 1
a463 1
.Ss "as server:"
@


1.15.2.1
log
@Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.16 2009/04/09 02:41:44 joerg Exp $
d438 1
a438 1
.Ss "As client:"
d456 1
a456 1
.Pp
d463 1
a463 1
.Ss "As server:"
@


1.14
log
@Import syslogd SoC project by Martin Schuette:
	- new syslog protocol api syslogp(3) that supports structured data
	  and draft-rfc timestamps
	- reliable tcp connections with queueing
	- encrypted connections
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.13 2004/11/19 18:48:43 wiz Exp $
d480 1
a480 1
.It Em tls_queue_length 
d486 1
a486 1
and 
@


1.13
log
@Make HTML-save.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.12 2004/11/19 02:18:11 thorpej Exp $
d32 1
a32 1
.Dd November 18, 2004
d46 2
a47 1
It consists of blocks of lines separated by
d304 6
d316 9
d326 10
d389 4
d398 150
d554 3
d575 2
a576 1
authpriv.*				/var/log/secure
d586 5
d621 4
@


1.12
log
@Merge the thorpej-syslogd-hack-branch down to the trunk.  Enhancements
include:

- Extend the syntax of syslog.conf to allow selections of log destinations
  by comma-separated lists of program name (including kernel-generated
  messages) and originating host name.
- Ability to pipe selected messages through arbitrary filter commands.
- Ability to specify priority comparison operations.
- Improvements to domain name handling.
- Conversion to use kqueue for communication and signal events, eliminating
  all unsafe signal handlers.
- Allow spaces as well as tabs in syslog.conf.
- Log kernel printfs at LOG_NOTICE instad of LOG_CRIT.
- Ability to log facility/priority with a log message.
- Reliability improvements.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.11 2004/11/18 21:23:17 thorpej Exp $
d72 1
a72 1
.Pq Bo ! Bc Bq <=> ,
d100 1
a100 1
.Sq >=
d116 1
a116 1
.Sq <notice .
@


1.11
log
@Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22366, verified by myself.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.10 2003/07/02 08:33:22 wiz Exp $
d32 1
a32 1
.Dd June 9, 1993
d46 5
a50 1
It consists of lines with two fields: the
d71 2
d97 22
d130 78
d215 8
d225 2
a226 2
.Em facility
and is of the specified
d228 3
a230 1
.Em (or a higher level) ,
d284 1
a284 1
There are four forms:
d289 14
d317 46
d388 3
d392 1
a392 1
authpriv.*						/var/log/secure
d395 1
a395 1
mail.*							/var/log/maillog
d399 2
a400 2
*.emerg							*
*.emerg							@@arpa.berkeley.edu
d403 1
a403 1
*.alert							root,eric
d407 25
a431 1
mail,news.err						/var/log/spoolerr
@


1.11.4.1
log
@Extend the syntax of syslog.conf to allow selections of log destinations
by program name.

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11 2003/08/07 11:25:44 agc Exp $
d32 1
a32 1
.Dd November 14, 2004
d46 1
a46 3
It consists of blocks of lines separated by
.Em program
specifications, with each line containing two fields: the
a101 11
Each block of lines is separated from the previous block by a tag.
The tag is a line beginning with
.Em #!prog
or
.Em !prog
(the former is for compatbility with older versions of
.Xr syslogd 8 ,
which will interpret the tag as a comment)
and each block will be associated with log messages from the program
specified by the tag.
.Pp
a108 8
It is preferred that selections be made based on
.Em facility
rather than
.Em program ,
since the latter can vary in a networked environment.
However, there are cases where a
.Em facility
may be too broadly defined.
a114 2
and the first word in the message after the date matches the
.Em program ,
d141 1
a141 3
.Em programs ,
all
.Em facilities ,
a228 4

# Save ftpd transactions along with mail and news
!ftpd
*.*							/var/log/spoolerr
@


1.11.4.2
log
@Add the ability to pipe selected messages through an arbitrary filtering
command.

From FreeBSD, who in turn took the idea from IRIX.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.1 2004/11/14 23:04:18 thorpej Exp $
d193 1
a193 1
There are five forms:
a211 39
.It
A vertical bar
.Pq Sq |
followed by a command to which to pipe the selected messages.
The command string is passed to
.Pa /bin/sh
for evaluation, so the usual shell metacharacters or input/output
redirection can occur.
(Note that redirecting
.Xr stdio 3
buffered output from the invoked command can cause additional delays,
or even lost output data in case a logging subprocess exits with a
signal.)
The command itself runs with
.Em stdout
and
.Em stderr
redirected to
.Pa /dev/null .
Upon receipt of a
.Dv SIGHUP ,
.Xr syslogd 8
will close the pipe to the process.
If the process does not exit voluntarily, it will be sent a
.Dv SIGTERM
signal after a grace period of up to 40 seconds.
.Pp
The command will only be started once data arrives that should be
piped to it.
If the command exits, it will be restarted as necessary.
.Pp
Unless the command is a full pipeline, it may be useful to
start the command with
.Em exec
so that the invoking shell process does not wait for the command to
complete.
Note that the command is started with the UID of the
.Xr syslogd 8
process, normally the superuser.
a254 3
# Pipe all authentication messages to a filter.
auth.*					|exec /usr/local/sbin/authfilter

@


1.11.4.3
log
@Further elaborate on the pipe-to-filter support.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.2 2004/11/15 00:17:00 thorpej Exp $
d237 1
a237 1
signal after a grace period of up to 60 seconds.
a242 7
If it is desired that the subprocess should receive exactly one line of
input, this can be achieved by exiting after reading and processing the
single line.
A wrapper script can be used to achieve this effect, if necessary.
Note that this method can be very resource-intensive if many log messages
are being piped through the filter.
.Pp
@


1.11.4.4
log
@Extend the syslog.conf syntax to allow selecting messages based on
the originating host.  "+hostname" selects messages from the specified
host, and "-hostname" selects messages from hosts other than the specified
host.

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.3 2004/11/15 15:07:02 thorpej Exp $
d32 1
a32 1
.Dd November 15, 2004
a47 2
and
.Em hostname
d104 3
a106 2
Each block of lines is separated from the previous block by a
.Em program
d108 1
a108 25
.Em hostname
specification.
A block will only log messages corresponding to the most recent
.Em program
and
.Em hostname
specifications given.
Consider the case of a block that selects
.Ql pppd
as the
.Em program ,
directly followed by a block that selects messages from the
.Em hostname
.Ql dialhost .
The second block will log only messages from the
.Xr pppd 8
program from the host
.Sq dialhost .
.Pp
A
.Em program
specification is a line beginning with
.Ql #!prog
or
.Ql !prog
d112 2
a113 28
and will cause subsequent blocks to be applied to messages logged by
the specified program.
The special specifcation
.Ql !*
will cause subsequent blocks to apply to all programs.
.Pp
A
.Em hostname
specification of the form
.Ql #+hostname
or
.Ql +hostname
will cause subsequent blocks to be applied to messages received from
the specified host.
A
.Em hostname
specification of the form
.Ql #-hostname
or
.Ql -hostname
will cause subsequent blocks to be applied to messages from hosts other
than the one specified.
If the hostname is given as
.Ql @@ ,
the local hostname will be used.
The special specification
.Ql +*
will cause subsequent blocks to apply to all hosts.
d164 3
a166 1
.Em facilities
d284 1
a284 1
authpriv.*				/var/log/secure
d287 1
a287 1
mail.*					/var/log/maillog
d291 2
a292 2
*.emerg					*
*.emerg					@@arpa.berkeley.edu
d295 1
a295 1
*.alert					root,eric
d299 1
a299 1
mail,news.err				/var/log/spoolerr
d304 1
a304 1
# Save ftpd transactions along with mail and news.
d306 1
a306 11
*.*					/var/log/spoolerr

# Save pppd messages from dialhost to a separate file.
!pppd
+dialhost
*.*					/var/log/dialhost-pppd

# Save non-local log messages from all programs to a separate file.
!*
-@@
*.*					/var/log/foreign
@


1.11.4.5
log
@Extend the !prog syntax to allow !+prog and !-prog, similar to the +hostname
and -hostname functionality.

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.4 2004/11/15 17:16:10 thorpej Exp $
d130 1
a130 17
specification of the form
.Ql #!+prog
or
.Ql !+prog
will cause subsequent blocks to be applied to messages logged by the
specified program.
A
.Em program
specification of the form
.Ql #!-prog
or
.Ql !-prog
will cause subsequent blocks to be applied to messages logged by programs
other than the one specified.
A
.Em program
specification of the form
d134 5
a138 2
is equivalent to
.Ql !+prog .
@


1.11.4.6
log
@Extend the program and hostname specification syntax to allow comma-separated
lists of programs and hostnames.

Inspired by a similar change in FreeBSD, but implemented differently.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.5 2004/11/16 22:20:56 thorpej Exp $
d131 1
a131 1
.Ql #!+prog1,prog2
d133 1
a133 1
.Ql !+prog1,prog2
d139 1
a139 1
.Ql #!-prog1,prog2
d141 1
a141 1
.Ql !-prog1,prog2
d147 1
a147 1
.Ql #!prog1,prog2
d149 1
a149 1
.Ql !prog1,prog2
d151 1
a151 1
.Ql !+prog1,prog2 .
d159 1
a159 1
.Ql #+host1,host2
d161 1
a161 1
.Ql +host1,host2
d167 1
a167 1
.Ql #-host1,host2
d169 1
a169 1
.Ql -host1,host2
@


1.11.4.7
log
@If a log file name is prefixed with a - (e.g. "-/var/log/somefile"),
don't sync it after writing kernel log messages to it.  Syntax compatible
with Linux syslogd.

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.6 2004/11/17 01:27:26 thorpej Exp $
a259 14
.Pp
To ensure that kernel messages are written to disk promptly,
.Xr syslogd 8
calls
.Xr fsync 2
after writing messages from the kernel.
Other messages are not synced explcitly.
You my disable syncing of files specified to receive kernel messages
by prefixing the pathname with a minus sign
.Ql - .
Note that use of this option may cause the loss of log information in
the event of a system crash immediately following the write attempt.
However, using this option may improve be useful if your system's
kernel is logging many messages.
a365 3
# Log kernel messages to a separate file without syncing each message.
kern.*					-/var/log/kernlog

@


1.11.4.8
log
@Allow !prog specifications to apply to kernel messages.  For example,
if you wanted to match messages of the form:

raid0: disk exploded into tiny pieces

you could use:

!raid0
kern.err			/var/log/raid0-errors

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.7 2004/11/17 03:23:09 thorpej Exp $
a151 5
Program selectors may also match kernel-generated messages.
For example, a program specification of
.Ql !+subsys
will match kernel-generated messages of the form
.Ql subsys: here is a message .
a386 4
# Send all error messages from a RAID array through a filter.
!raid0
kern.err				|exec /usr/local/sbin/raidfilter

@


1.11.4.9
log
@Grammar and typo fixes.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.8 2004/11/17 06:24:03 thorpej Exp $
d135 1
a135 1
specified programs.
d143 1
a143 1
other than the ones specified.
d157 1
a157 1
The special specification
d168 1
a168 1
the specified hosts.
d176 1
a176 1
than the ones specified.
d272 1
a272 1
You may disable syncing of files specified to receive kernel messages
d277 1
a277 1
However, using this option may prove to be useful if your system's
@


1.11.4.10
log
@Add the ability to specify how the priority should be compared in
syslog.conf, e.g.:

*.<notice
*.=err
*.>=debug

Add a -U option that changes the default comparison from ">=" to "=".

Add a -v option that causes the facility and priority to be logged with
the message.  One -v logs it numerically, a second -v logs it by name.

From FreeBSD, with the exception of changing the unique priority option
to -U (we already have a -u).
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.9 2004/11/17 16:39:09 wiz Exp $
d32 1
a32 1
.Dd November 18, 2004
a70 2
an optional set of comparison flags
.Pq Bq <=> ,
a94 13
.Em comparison flags
may be used to specify exactly what levels are logged.
If unspecified, the default comparison is
.Sq >=
.Pq greater than or equal to ,
or, if the
.Fl U
option is passed to
.Xr syslogd 8 ,
.Sq =
.Pq equal to .
.Pp
The
d201 2
a202 2
.Em facility ,
and the specified
d204 1
a204 1
comparison is true,
a363 3
# Log daemon messages at debug level only
daemon.=debug				/var/log/daemon.debug

@


1.11.4.11
log
@Make the -U option treat "*" as "all levels" by explcitiy setting
comparison flags for it internally.  Also extend the syntax to allow
"!level" or "!=level", similar to Linux's syslogd.

From FreeBSD.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.11.4.10 2004/11/18 20:51:40 thorpej Exp $
d72 1
a72 1
.Pq Bo ! Bc Bq <=> ,
a107 9
Comparison flags beginning with
.So ! Sc
will have their logical sense inverted.
Thus,
.Sq !=info
means all levels except info and
.Sq !notice
has the same meaning as
.Sq <notice .
@


1.10
log
@Match example code with example comment; multiple selectors should be
separated by semicolons (in BUGS section); from jmc@@openbsd.
While here, use more macros.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.9 2002/02/02 01:58:52 wiz Exp $
d14 1
a14 5
.\" 3. All advertising materials mentioning features or use of this software
.\"    must display the following acknowledgement:
.\"	This product includes software developed by the University of
.\"	California, Berkeley and its contributors.
.\" 4. Neither the name of the University nor the names of its contributors
@


1.9
log
@Drop a .Pp, sort sections.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.8 2001/04/03 11:29:47 wiz Exp $
d69 3
a71 1
a period (``.''), and a
d127 3
a129 1
by separating them with semicolon (``;'') characters.
d138 7
a144 3
by separating them with comma (``,'') characters.
.Pp
An asterisk (``*'') can be used to specify all
d151 4
a154 1
``mark'' receives a message at priority ``info'' every 20 minutes
d163 2
a164 1
``none'' disables a particular
d178 3
a180 1
A hostname (preceded by an at (``@@'') sign).
d193 2
a194 1
Blank lines and lines whose first non-blank character is a hash (``#'')
d232 1
a232 1
uucp,news.crit						/var/log/spoolerr
d246 10
a255 2
For example ``mail.crit,*.err'' will select ``mail'' facility messages at
the level of ``err'' or higher, not at the level of ``crit'' or higher.
@


1.8
log
@Add sections to some xrefs.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.7 2000/04/12 16:38:58 kim Exp $
d181 7
a188 1
.Pp
a218 11
.Sh FILES
.Bl -tag -width /etc/syslog.conf -compact
.It Pa /etc/syslog.conf
The
.Xr syslogd 8
configuration file.
.El
.Sh BUGS
The effects of multiple selectors are sometimes not intuitive.
For example ``mail.crit,*.err'' will select ``mail'' facility messages at
the level of ``err'' or higher, not at the level of ``crit'' or higher.
d229 4
@


1.7
log
@The "ftp" facility was not listed.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.6 1999/11/30 12:08:49 ad Exp $
d56 1
a56 1
.Xr syslogd
d101 1
a101 1
.Xr syslog
d168 1
a168 1
.Xr syslogd
@


1.7.4.1
log
@Pull up revision 1.8 (requested by wiz):
  Add sections to some xrefs.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.7 2000/04/12 16:38:58 kim Exp $
d56 1
a56 1
.Xr syslogd 8
d101 1
a101 1
.Xr syslog 3
d168 1
a168 1
.Xr syslogd 8
@


1.6
log
@- Fix location of RCS Id string.
- It's now syslogd.pid, not syslog.pid.
@
text
@d1 1
a1 1
.\"	$NetBSD: syslog.conf.5,v 1.5 1997/10/17 13:46:09 lukem Exp $
d81 2
a82 2
the following keywords: auth, authpriv, cron, daemon, kern, lpr, mail,
mark, news, syslog, user, uucp and local0 through local7.
@


1.5
log
@minor .Nm cleanup
@
text
@d1 2
a34 1
.\"	$NetBSD: syslog.conf.5,v 1.4 1996/01/02 17:41:46 perry Exp $
@


1.5.8.1
log
@Pull up to last week's -current.
@
text
@a0 2
.\"	$NetBSD: syslog.conf.5,v 1.6 1999/11/30 12:08:49 ad Exp $
.\"
d33 1
@


1.4
log
@Merge/sync with 4.4lite2. Fixed HISTORY line for syslog.conf.5. Note
that the claim in the HISTORY line for syslogd.8 that it appeared in
4.3BSD is probably bogus -- I remember it being a lot older.
@
text
@d33 1
a33 1
.\"	$NetBSD: $
d45 1
a45 1
.Nm syslog.conf
@


1.3
log
@document 'info' level; pr#1137 from Kenneth Stailey
@
text
@d1 2
a2 2
.\" Copyright (c) 1990, 1991 The Regents of the University of California.
.\" All rights reserved.
d32 2
a33 2
.\"     from: @@(#)syslog.conf.5	5.3 (Berkeley) 5/10/91
.\"	$Id: syslog.conf.5,v 1.2 1993/08/01 07:23:27 mycroft Exp $
d35 1
a35 1
.Dd May 10, 1991
d228 5
a232 3
.Nm syslog.conf
file format is
.Ud .
@


1.2
log
@Add RCS indentifiers.
@
text
@d33 1
a33 1
.\"	$Id: $
d95 1
a95 1
warning, notice and debug.
@


1.1
log
@Initial revision
@
text
@d32 2
a33 1
.\"     @@(#)syslog.conf.5	5.3 (Berkeley) 5/10/91
@


1.1.1.1
log
@initial import of 386bsd-0.1 sources
@
text
@@


1.1.1.2
log
@imported from 44lite2
@
text
@d1 2
a2 2
.\" Copyright (c) 1990, 1991, 1993
.\"	The Regents of the University of California.  All rights reserved.
d32 1
a32 1
.\"     @@(#)syslog.conf.5	8.1 (Berkeley) 6/9/93
d34 1
a34 1
.Dd June 9, 1993
d225 5
@