Is there any way to get syslog to log not only a telnet connection (default):
Sun Mar 14 11:45:35 EST [tn_login_0]: Login from host: hostname
but also rsh connections and the command that was executed?
file:/..../5_2_1-cd/ontap/5_2_1/doc/html/sag/routin12.htm file:/..../5_2_1-cd/ontap/5_2_1/doc/html/man/index.htm
Out of the box, there isn't an etc/syslog.conf file, only a sample one. It appears to be logging:
*.info /etc/messages
at least. What else?
I think what I want is:
daemon.* /etc/messages
But if I create a new syslog.conf file with just those two, what other "default" selectors will I be missing?
How do I "kick" ONTAP to start using a new syslog.conf file? "Reboot the filer" is not an acceptable answer. ;)
Until next time...
Todd C. Merrill The Mathworks, Inc. 508-647-7792 24 Prime Park Way, Natick, MA 01760-1500 508-647-7012 FAX tmerrill@mathworks.com http://www.mathworks.com ---
Is there any way to get syslog to log not only a telnet connection (default):
Sun Mar 14 11:45:35 EST [tn_login_0]: Login from host: hostname
but also rsh connections and the command that was executed?
No. Shall I file an RFE?
Out of the box, there isn't an etc/syslog.conf file, only a sample one. It appears to be logging:
*.info /etc/messages
at least. What else?
If no "/etc/syslog.conf" file exists, the system acts as if the file contained:
*.info /dev/console *.info /etc/messages
How do I "kick" ONTAP to start using a new syslog.conf file?
There's no way to kick it, but it checks the mod time on "/etc/syslog.conf" (or checks for it to appear) every 30 seconds and, if it detects a change, it rereads the file.
Sendmail told me that Guy Harris said:
Is there any way to get syslog to log not only a telnet connection (default):
Sun Mar 14 11:45:35 EST [tn_login_0]: Login from host: hostname
but also rsh connections and the command that was executed?
No. Shall I file an RFE?
<waves hands wildly>
Yes please.
-
guy＠netapp.com -
Pete Ehlke -
Todd C. Merrill