This is an old revision of the document!
# shutdown -p 17:30 # logger -t kernel -p kern.emerg 'Kernel Panic' # logger -t sendmail -p mail.info 'Message from sendmail'
# cat /etc/syslog.conf
... local0.* /var/log/cisco.log !ppp ...
# touch /var/log/cisco.log # /etc/rc.d/syslogd reload # tail -f /var/log/cisco.log
# cat /etc/rc.conf
... syslogd_flags="-a 192.168.X.0/24:*" ...
# /etc/rc.d/syslogd restart
[cisco:~] # cat /etc/syslog.conf
... *.* @logserver !ppp ...
[cisco:~] # /etc/rc.d/syslogd reload
# cat /root/syslog.sh
#!/bin/sh while read m do if expr "$m" : '.*login.*' > /dev/null then echo $m | mail -s login root fi done
# chmod +x syslog.sh # cat /etc/syslog.conf
... auth.* | /root/syslog.sh !ppp ...