> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of [email protected] > Sent: Wednesday, December 09, 2009 6:15 PM > To: rsyslog-users > Subject: Re: [rsyslog] using arbitrary facility id > > On Mon, 30 Nov 2009, Sayan Chowdhury wrote: > > > BTW, just out of interest, why is this number restricted to 23 in the > rfc? > > also each facility other than local0-7 seems to be rigidly defined. > Just > > wanted to know why is it so ..shouldn't they have left scope for > extension > > on this? > > they were packing facility and severity into one 8-bit value. why they > picked 24 instead of 32 I don't know, but that was a decision made a > few > decades ago.
You need to keep on your mind that syslog was once a debug system for sendmail. I guess Eric simply meant that 24 different values were far enough (and I tend to agree thinking about that use case ;)). Rainer > > David Lang > > > > > On Mon, Nov 30, 2009 at 11:51 AM, Sayan Chowdhury > <[email protected]>wrote: > > > >> Hello Rainer, > >> Thanks... Yes I agree what I am doing is invalid. > >> I was just trying it out, my idea was if I can use numbers greater > than > >> 23, then I can maybe use it as my own customized logging system, and > I would > >> use numbers greater than 23 for my application and use different ids > (>23) > >> for different kind of application level log messages. I would try to > look > >> into the code as well, is this something you thing may be useful in > general? > >> Regards, > >> Sayan > >> > >> > >> > >> On Mon, Nov 30, 2009 at 11:40 AM, Rainer Gerhards < > >> [email protected]> wrote: > >> > >>> You can use facilities other than local0..local7, but you cannot > use a > >>> facility with a numerical value greater than 23, because the > relevant > >>> standards do not permit this (see RFC5424, Table 1). > >>> > >>> It may be that rsyslog does not properly prevent this, maybe it > uses > >>> modulo > >>> 24 in this case. Will check that. But it is invalid in any case > (not only > >>> with rsyslog but with any syslogd). > >>> > >>> Rainer > >>> > >>>> -----Original Message----- > >>>> From: [email protected] [mailto:rsyslog- > >>>> [email protected]] On Behalf Of Sayan Chowdhury > >>>> Sent: Monday, November 30, 2009 5:20 PM > >>>> To: rsyslog-users > >>>> Subject: [rsyslog] using arbitrary facility id > >>>> > >>>> Hello All, > >>>> Is it possible to use a facility id other than local0-local7? > >>>> I was using a facility id of 50 in some of the messages , and I > had > >>>> written > >>>> a selector line in my rsyslog file as well to log messages with > >>>> facility id > >>>> of 50 into a seperate file. > >>>> However, I see that sometimes the messages are being written into > all > >>>> the > >>>> files(/var/log/messages, boot.log,/var/log/secure etc) instead of > the > >>>> one I > >>>> specified in the rsyslog.conf. If I restart rsyslog the problem > goes > >>>> away. > >>>> I am using rsyslog version 4.2.0. > >>>> > >>>> Here is the selector line in my config > >>>> > >>>> > >>>> if $fromhost-ip == '127.0.0.1' and $syslogfacility == '50' and > >>>> $syslogseverity <= '6' then $log_rotation_50 > >>>> > >>>> where $log_rotation_50 is an outchannel which is configured to > rotate > >>>> the > >>>> file when it reaches the size of 2MB. > >>>> Regards, > >>>> Sayan > >>>> _______________________________________________ > >>>> rsyslog mailing list > >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >>>> http://www.rsyslog.com > >>> _______________________________________________ > >>> rsyslog mailing list > >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >>> http://www.rsyslog.com > >>> > >> > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
