head	1.6;
access;
symbols;
locks; strict;
comment	@# @;


1.6
date	2003.05.22.14.22.51;	author thl;	state Exp;
branches;
next	1.5;

1.5
date	2003.04.17.11.11.58;	author thl;	state Exp;
branches;
next	1.4;

1.4
date	2003.04.03.08.47.32;	author ossp;	state Exp;
branches;
next	1.3;

1.3
date	2003.04.03.08.16.22;	author thl;	state Exp;
branches;
next	1.2;

1.2
date	2003.03.24.19.44.31;	author ossp;	state Exp;
branches;
next	1.1;

1.1
date	2003.03.24.16.11.51;	author thl;	state Exp;
branches;
next	;


desc
@@


1.6
log
@introduce fsl 1.1.0 feature
@
text
@
#use wml::ossp area=pkg:lib subarea=fsl

<title>OSSP fsl</title>

<h1>Faked/Flexible Syslog</h1>

<h2>Frequently Asked Questions (FAQ)</h2>

This is a list of frequently asked questions and answers about OSSP fsl.

<define-tag faq endtag=required>
<preserve id title>
<set-var %attributes>
<p>
<li><a name="<get-var id>"><get-var title></a>
    [<a href="#<get-var id>">A</a>]
    <p>
    %body
</li>
<restore id title>
</define-tag>

<ol>

<faq id="syslog-setup"
     title="I want fsl to forward to syslog. What is the minimum syslog configuration?">
    Prepare syslog.conf(5) and keep in mind it wants to see tabs not
    spaces, they are marked the output manually to make that clear.
	<pre>
        $ grep mail.info /etc/syslog.conf
        mail.info <b>TAB</b> /var/log/maillog
    </pre>
</faq>

<faq id="syslog-debug"
     title="I want fsl to forward to syslog. How can i find out if syslog.conf(5) is correct?">
    <pre>
        $ logger -p mail.info "message"
        $ tail /var/log/maillog
        Mar 24 17:01:36 host user: message 
    </pre>
</faq>

<faq id="syslog-l2spec-local"
     title="I want fsl to forward to syslog. Which l2spec logs to syslogd locally?">
    <pre>
        $ echo "from l2, loc" \
        | fsl-l2tool 'syslog(facility=mail, ident=info, target="local")'
    </pre>
</faq>

<faq id="syslog-l2spec-remote"
     title="I want fsl to forward to syslog. Which l2spec logs to syslogd remotely?">
    Make sure syslogd accepts network connections, see it's -s option
    for syslogd(8) on FreeBSD, -r option for syslogd(8) on Linux or -t
    for syslogd(1M) on Solaris. Also note that the l2spec requires a
    certain order of the remotehost, remoteport an target
    keywords, see <a href="http://cvs.ossp.org/chngview?cn=3313">CVS</a>.
     <pre>
        $ echo "from l2, net" \
        | fsl-l2tool 'syslog(facility=mail, 
                             ident=info, 
                             remotehost="127.0.0.1", 
                             remoteport="514", 
                             target="remote"
                             )'
     </pre>
</faq>

<faq id="syslog-fsl"
     title="I want fsl to forward to syslog. Which fsl config logs to syslogd remotely?">
    <pre>
        ##
        ##  fsl.openssh -- OSSP fsl configuration for openssh
        ##
        ident (ssh(d|-.+)?|scp|sftp(-server)?)/.+ q{
            prefix(
                prefix="%b %d %H:%M:%S %N <%L> $1[%P]: "
            ) 
            -> {
                debug: file(
                    path="/usr/opkg/var/openssh/sshd.log",
                    append=1, perm=0644
                );
                debug: syslog(
                    facility=mail, ident=info,
                    remotehost="127.0.0.1", remoteport="514", target="remote"
                )
            }
        };
        ##
        ##  fsl.postfix -- OSSP fsl configuration for Postfix
        ##
        ident (postfix/.+)/.+ q{
            prefix(
                prefix="%b %d %H:%M:%S %N <%L> $1[%P]: "
            )
            -> {
                debug: syslog(
                        facility=mail,
                            ident=postfix,
                            remotehost="127.0.0.1",
                            remoteport="514",
                            target="remote"
                )
            }
        };
    </pre>
</faq>

<faq id="static-fsl"
     title="How can i find out if a statically linked program is using fsl?">
    <pre>
        $ what <i>/cw12/sbin/postfix</i> | grep 'OSSP fsl'
            OSSP fsl 1.0.8 (13-Feb-2003)
    </pre>
    If you do not have a <tt>what</tt> command use <tt>strings</tt>
    <pre>
        $ strings <i>/cw12/sbin/postfix</i> | grep '@@(#)OSSP fsl'
        @@(#)OSSP fsl 1.0.8 (13-Feb-2003)
    </pre>
    Starting with fsl 1.1.0 additional information about configure options is visible
    <pre>
            OSSP fsl config cfgdir=/cw/etc/fsl prefix=fsl.
    </pre>
    Starting with fsl 1.1.0 additional information about debugging options is visible
    <pre>
            OSSP fsl debug logfile=/tmp/fsl/var/fsl/debuglogfile logmask=/tmp/fsl/var/fsl/debuglogmask
    </pre>
</faq>
</ol>
@


1.5
log
@prefer what(1) over strings(1)
@
text
@d123 8
@


1.4
log
@relocated faq tag to correct position
@
text
@d115 6
a120 1
        $ strings /cw12/sbin/postfix | grep '@@(#)OSSP fsl'
@


1.3
log
@add postfix example to syslog-fsl; add static-fsl; indentation
@
text
@a112 1
</faq>
d118 1
@


1.2
log
@p should have been pre; TAB; link to CVS
@
text
@d39 3
a41 3
       $ logger -p mail.info "message"
       $ tail /var/log/maillog
       Mar 24 17:01:36 host user: message 
d48 2
a49 2
       $ echo "from l2, loc" \
       | fsl-l2tool 'syslog(facility=mail, ident=info, target="local")'
d61 7
a67 4
     $ echo "from l2, net" \
     | fsl-l2tool 'syslog(facility=mail, ident=info, 
                          remotehost="127.0.0.1", remoteport="514", target="remote")'

d74 24
a97 16
    ##
    ##  fsl.openssh -- OSSP fsl configuration for openssh
    ##

    ident (ssh(d|-.+)?|scp|sftp(-server)?)/.+ q{
        prefix(
            prefix="%b %d %H:%M:%S %N <%L> $1[%P]: "
        ) 
        -> {
            debug: file(
                path="/usr/opkg/var/openssh/sshd.log",
                append=1, perm=0644
            );
            debug: syslog(
                facility=mail, ident=info,
                remotehost="127.0.0.1", remoteport="514", target="remote"
d99 10
a108 2
        }
    };
d111 8
@


1.1
log
@document fsl/l2/syslog experiences in a faq
@
text
@d8 1
a8 5
<h2>Abstract</h2>

<title>Frequently Asked Questions (FAQ)</title>

<h1>Frequently Asked Questions (FAQ)</h1>
d16 1
a16 1
<li><a name="<get-var id>"><b><get-var title></b></a>
d30 1
a30 1
    <p>
d32 2
a33 2
        mail.info<i>\t\t\t</i>/var/log/maillog
    </p>
d38 1
a38 1
    <p>
d42 1
a42 1
    </p>
d47 1
a47 1
    <p>
d50 1
a50 1
    </p>
d59 2
a60 2
    keywords, see http://cvs.ossp.org/chngview?cn=3313.
     <p>
d65 1
a65 1
     </p>
d70 1
a70 1
    <p>
d90 1
a90 1
    </p>
@