Is there any way to get syslog to log not only a telnet connection (default):
Sun Mar 14 11:45:35 EST [tn_login_0]: Login from host: hostname
but also rsh connections and the command that was executed?
No. Shall I file an RFE?
Out of the box, there isn't an etc/syslog.conf file, only a sample one. It appears to be logging:
*.info /etc/messages
at least. What else?
If no "/etc/syslog.conf" file exists, the system acts as if the file contained:
*.info /dev/console *.info /etc/messages
How do I "kick" ONTAP to start using a new syslog.conf file?
There's no way to kick it, but it checks the mod time on "/etc/syslog.conf" (or checks for it to appear) every 30 seconds and, if it detects a change, it rereads the file.