evlfacility(1)

NAME

evlfacility - Manage facility registry

SYNOPSIS

evlfacility  -l|--list
evlfacility  -v|--verify [file]
evlfacility  -r|--replace file
evlfacility     -a|--add    facility-name    [-k|--kernel]
[-p|--private] [-f|--filter filter] [-F|--force]
evlfacility  -d|--delete facility-name
evlfacility   -c|--change  facility-name  [-k|--kernel]
[-u|--user]   |   [-p|--private]   |   [-n|--noprivate]
[-f|--filter filter|nofilter]

DESCRIPTION

The evlfacility command lets you list contents of the event logging facility registry, replace the entire facil
ity registry, add facilities (with options) to the facil
ity registry, delete facilities, or modify an existing
facility.

For evlfacility options that modify the facility registry, event logging applications already in progress will start
using the modified registry within 5 seconds. The follow
ing options are accepted (unless otherwise noted, root
permission is required to use these options):

OPTIONS

-l, --list

Displays the facility names and associated integer
values contained in the facility registry,
/etc/evlog.d/facility_registry. Also displays whether the facility logs events from the kernel,
which events, if any, are written to the
/etc/evlog.d/privatelog file, and which events have restricted logging.

This option is available to all users.

-v, --verify [file]

Checks the validity of the indicated file and
reports any errors found to stderr. If no file is
specified, then the contents of the facility reg
istry file, /etc/evlog.d/facility_registry, are checked for validity.

-r, --replace file

Checks the validity of the indicated file and
reports any errors found to stderr. If no errors
are found, then the contents of the facility reg
istry file, /etc/evlog.d/facility_registry, are replaced by those of the indicated file.

-a, --add facility-name [-k|--kernel] [-p, --private]

[-f, --filter filter] Adds an entry to the facility registry for the indicated facility-name. A facil_ ity-value (integer) is automatically assigned.

If --kernel is specified, it indicates that this facility will log events from the kernel. Other
wise, events will be logged from user-space.

If --private is specified, then events logged with the specified facility will be logged to the pri
vate log file, /etc/evlog.d/privatelog, instead of the standard log file, /etc/evlog.d/eventlog.

If a filter is specified, it indicates that for this facility, only records that match the indi
cated filter will be logged. Only attributes in the fixed-portion of the event record may be used in
the filter expression. See the evlquery man page for more information.

-F, --force

Valid only with --add. Ordinarily, an attempt to
add a facility that is already in the registry
results in a diagnostic message and a non-zero exit
status. If --force is specified, and the specified facility is already in the registry, evlfacility just verifies that the existing entry has the cor
rect (automatically assigned) code for that facil
ity name; --kernel, --private, and --filter are ignored.

-d, --delete facility-name

Deletes an entry from the facility registry for the
specified facility-name.

-c, --change facility-name [-k|--kernel] | [-u|--user] [-p|--private] | [-n|--noprivate] | [-f|--filter fil_ ter|nofilter]

Modifies one or more of the optional parameters
associated with facility-name in the facility reg istry.

-k, --kernel

Adds the "kernel" parameter for the speci
fied facility-name in the facility registry. This option is not valid with --user.

-u, --user

Removes the "kernel" parameter for the spec
ified facility-name in the facility reg istry. This option is not valid with --ker
nel

-p, --private

Adds the "private" parameter for the speci
fied facility-name in the facility registry. This option is not valid with --noprivate.

-n, --noprivate

Deletes the "private" parameter for the
specified facility-name in the facility reg istry. This option is not valid with --pri
vate.

-f, --filter filter| nofilter

Adds the specified restricted logging filter
for the specified facility-name in the facility registry. If nofilter is specified, then any existing filter is removed. See
the evlquery man page for more information.

EXAMPLE

evlfacility --add "Mr Admin" --private
--filter 'log_format!=BINARY && gid="admins"'

Adds the facility "Mr Admin" to the facility registry.
Events from this facility will be logged to the private
log. BINARY events will not be logged (only variablelength data formats of NODATA or STRING), and events will
be logged only if group id is "admins".

FILES

/etc/evlog.d/facility_registry Facility registry

SEE ALSO

evlquery man page Filter expression syntax rules

11 March 2002 EVLFACILITY()