evlconfig(1)
NAME
evlconfig - Configure logging daemon
SYNOPSIS
evlconfig -l | --list evlconfig -s | --screen filter | nofilter evlconfig -i | --interval seconds evlconfig -c | --count events evlconfig -d | --discarddups on | off evlconfig -L | --lookbacks size evlconfig -o | --output severity-level | off
DESCRIPTION
The evlconfig command lets you change the default settings
for event logging. Unless otherwise noted, root permis
sion is required to use the following evlconfig options.
OPTIONS
- ArrayEvent screening
Console display level - This option is available to all users.
- -s, --screen filter|nofilter
- Specifies a filter name or filter expression for
screening out events. See the evlquery man page for details. All events that match the filter are dis
carded. All event record attributes from the fixed
portion of the event record can be specified. The
default logging behavior is that events logged from
the kernel (log_facility==KERN) or logged by root
(effective user ID of 'root') are not screened out
and discarded. Also, by default applications are
not screened out and discarded (unless attempting
to log with log_facility==KERN). Issuing the evl
config command with the --screen option replaces the existing screen, if any, and a filter specifi
cation of nofilter removes the screen. - -i, --interval seconds
- Sets the time interval for discarding duplicate
events. After it has discarded a duplicate event,
evlogd will wait no more than this many seconds before logging a message about the discarded dupli
cate(s). The default interval is three (3) sec
onds. The allowable range is from 1 to 3600 (1
hour) seconds. If this parameter (interval) is nonzero but count is set to zero, then discarding of
duplicates will be based strictly on time interval,
and event count will be ignored. If interval and count are both equal to zero, then logging a mes
sage about the discarded duplicates will be delayed
for as long as possible. - -c, --count events
- Sets the event count for discarding duplicate
events. evlogd will discard no more than this many duplicates of an event before logging a message
about the discarded duplicates. The default count
is 100 events. The allowable range is from 1 to
10000. If this parameter (count) is non-zero, but
interval is set to zero, then the discarding of duplicates will be based strictly on event count,
and time interval will be ignored. If interval and count are both equal to zero, then logging a mes
sage about the discarded duplicates will be delayed
for as long as possible. - -L, --lookbacks size
Sets the number of entries in the lookback buffer,
used as a cache for discarding of duplicates. An
incoming event is compared against all events in
the lookback buffer to determine if it is a dupli
cate. If it is not identical to any of the stored
events, then it replaces one of the events in the
buffer. The allowable range is from 1 to 10. If
the value is set to zero then a default size of 5
is used. - -d, --discarddups on|off
Enables or disables the discarding of events that
are being logged in rapid succession. The default
setting is on. This parameter is stored in
/etc/evlog.d/evlog.conf. - -o, --output severity-level|off
Controls displaying of kernel events on the system
console. Either specifies the severity-level(s) of
events to be displayed on the console, or turns
displaying completely off. The default setting is
"off". Valid severity-levels are EMERG, ALERT,
CRIT, ERR, WARNING, NOTICE, INFO, DEBUG. Specify
ing a severity-level of CRIT, for example, will
cause events with severity-level of CRIT and higher
(ALERT and EMERG) to be displayed on the system
console. - This option utilizes the same system call as the
klogd command with the -c option. Events forwarded
from printk will not be displayed, since they would
be duplicates of messages already displayed from
printk. - For all displayed events, the facility (hex), event
type (hex), and format (STRING, PRINTF, BINARY or
NODATA) will be displayed. For events with
log_format of POSIX_LOG_STRING the formatted string
will also be displayed. For events with log_format
of POSIX_LOG_BINARY up to the first 16 bytes of
variable data will be displayed in hex.
EXAMPLES
Example 1.
evlconfig --list
ArrayF20202000:T11110016:B:<3243632C DAB>
FAABBCC30:T01650165:N:<No data>
- F indicates Facility (hex), T indicates Event type (hex),
S indicates STRING, B indicates BINARY, N indicates No Da - ta.
FILES
- /etc/evlog.d/evlog.conf
- evlogd Configuration File
- /var/evlog/eventlog
Standard Event Log - /var/evlog/privatelog
Private Log - /var/run/evlogd.pid
evlogd Process ID
SEE ALSO
- evlquery man page Filter expression syntax rules