<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif"><a class="moz-txt-link-freetext" href="http://forums.sun.com/thread.jspa?threadID=5431426">http://forums.sun.com/thread.jspa?threadID=5431426</a><br>
This seems very relevant. It would appear that solaris wont let
anything other than the kernel write to the kern facility.<br>
</font></font><br>
Sent: Wednesday, July 21, 2010 11:36:51 AM<br>
From: Chuck <a class="moz-txt-link-rfc2396E" href="mailto:chuck.carson@gmail.com"><chuck.carson@gmail.com></a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a> <br>
Subject: [syslog-ng] Is logger an effective test tool on Solaris 10?
<blockquote
cite="mid:AANLkTikd3_p5vUsF08pX9bd9mA8Y4szmYA0AVzRw1Dxl@mail.gmail.com"
type="cite"><br>
I am using the following script to test syslog-ng. (Running this from
the same machine as the syslog-ng server):<br>
<br>
<span style="font-family: courier new,monospace;">#!/bin/bash</span><br
style="font-family: courier new,monospace;">
<br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">d=`date
'+%y%m%d_%H%M%S'`</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">logger -p
kern.debug "__kern.debug__ $d"</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">sleep 1;</span><br
style="font-family: courier new,monospace;">
<br style="font-family: courier new,monospace;">
<br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">d=`date
'+%y%m%d_%H%M%S'`</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">logger -p
kern.crit "__kern.crit__ $d"</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">sleep 1;</span><br
style="font-family: courier new,monospace;">
<br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">d=`date
'+%y%m%d_%H%M%S'`</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">logger -p <a
moz-do-not-send="true" href="http://kern.info">kern.info</a>
"__kern.info__ $d"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">sleep 1;</span><br>
<br>
However, here is how the messages are being seen within syslog-ng:<br>
<span style="font-family: courier new,monospace;">Jul 21 10:30:35
log01 cars: [ID 702911 user.debug] __kern.debug__ 100721_103035</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Jul 21 10:30:36
log01 cars: [ID 702911 user.crit] __kern.crit__ 100721_103036</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Jul 21 10:30:37
log01 cars: [ID 702911 <a moz-do-not-send="true"
href="http://user.info">user.info</a>] __kern.info__ 100721_103037</span><br>
<br>
The facility is being seen as user and not kern...<br>
<br>
Anyone have any ideas?<br>
Thx,<br>
<br>
<pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>