The logonly action has been largely used for tracking the event processing
flow of sec, where a message is left only to sec's internal log without any
more visible action. For such purposes, the level 4 has been an adequate
setting for most environments (it's not a warning or error, but a
notification). It would be somewhat pointless to set the level lower, since
when you have sec's own logging verbosity set to 'debug', you will get a
very detailed picture of sec's actions anyway, even without the use of
'logonly'.

If you would like to implement a full blown logging scheme, I'd recommend
to use syslog protocol for this purpose where the messages are not just
written to sec's internal log but can be potentially forwarded to many
receivers. Also, apart from just setting a severity, you can also take
advantage of the facility and tag fields, in order to better indicate the
type and name of the message source.

If you are on a Linux host, then the 'udgram /dev/log <30>sec: this is a
test' action produces a syslog message with the daemon-facility and
info-severity, while the tag (program name) of the message is set to "sec"
and the message text is "this is a test". This message is read by the local
syslog server from /dev/log (or systemd-journald which forwards it to
syslog daemon), and the further routing of the message depends on the
configuration of the syslog server.

regards,
risto




2015-10-16 5:57 GMT+03:00 Bond Masuda <bond.mas...@jlbond.com>:

> I know the documentation says logonly logs messages at level 4. Is there
> a reason why the user cannot set the log level for the message instead,
> perhaps with a default of level=4?
>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Simple-evcorr-users mailing list
> Simple-evcorr-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>
------------------------------------------------------------------------------
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to