On Mon, 30 Nov 2009, Sayan Chowdhury wrote: > BTW, just out of interest, why is this number restricted to 23 in the rfc? > also each facility other than local0-7 seems to be rigidly defined. Just > wanted to know why is it so ..shouldn't they have left scope for extension > on this?
they were packing facility and severity into one 8-bit value. why they picked 24 instead of 32 I don't know, but that was a decision made a few decades ago. David Lang > > On Mon, Nov 30, 2009 at 11:51 AM, Sayan Chowdhury <[email protected]>wrote: > >> Hello Rainer, >> Thanks... Yes I agree what I am doing is invalid. >> I was just trying it out, my idea was if I can use numbers greater than >> 23, then I can maybe use it as my own customized logging system, and I would >> use numbers greater than 23 for my application and use different ids (>23) >> for different kind of application level log messages. I would try to look >> into the code as well, is this something you thing may be useful in general? >> Regards, >> Sayan >> >> >> >> On Mon, Nov 30, 2009 at 11:40 AM, Rainer Gerhards < >> [email protected]> wrote: >> >>> You can use facilities other than local0..local7, but you cannot use a >>> facility with a numerical value greater than 23, because the relevant >>> standards do not permit this (see RFC5424, Table 1). >>> >>> It may be that rsyslog does not properly prevent this, maybe it uses >>> modulo >>> 24 in this case. Will check that. But it is invalid in any case (not only >>> with rsyslog but with any syslogd). >>> >>> Rainer >>> >>>> -----Original Message----- >>>> From: [email protected] [mailto:rsyslog- >>>> [email protected]] On Behalf Of Sayan Chowdhury >>>> Sent: Monday, November 30, 2009 5:20 PM >>>> To: rsyslog-users >>>> Subject: [rsyslog] using arbitrary facility id >>>> >>>> Hello All, >>>> Is it possible to use a facility id other than local0-local7? >>>> I was using a facility id of 50 in some of the messages , and I had >>>> written >>>> a selector line in my rsyslog file as well to log messages with >>>> facility id >>>> of 50 into a seperate file. >>>> However, I see that sometimes the messages are being written into all >>>> the >>>> files(/var/log/messages, boot.log,/var/log/secure etc) instead of the >>>> one I >>>> specified in the rsyslog.conf. If I restart rsyslog the problem goes >>>> away. >>>> I am using rsyslog version 4.2.0. >>>> >>>> Here is the selector line in my config >>>> >>>> >>>> if $fromhost-ip == '127.0.0.1' and $syslogfacility == '50' and >>>> $syslogseverity <= '6' then $log_rotation_50 >>>> >>>> where $log_rotation_50 is an outchannel which is configured to rotate >>>> the >>>> file when it reaches the size of 2MB. >>>> Regards, >>>> Sayan >>>> _______________________________________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com >>> _______________________________________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com >>> >> >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
