mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-19 06:50:43 +01:00
69 lines
3.1 KiB
HTML
69 lines
3.1 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
<html><head>
|
||
<meta http-equiv="Content-Language" content="en"><title>Kernel Log Input Module (imklog)</title>
|
||
|
||
</head>
|
||
<body>
|
||
<h1>Kernel Log Input Module</h1>
|
||
<p><b>Module Name: imklog</b></p>
|
||
<p><b>Author: </b>Rainer Gerhards
|
||
<rgerhards@adiscon.com></p>
|
||
<p><b>Description</b>:</p>
|
||
<p>Reads messages from the kernel log and submits them to the
|
||
syslog engine.</p>
|
||
<p><b>Configuration Directives</b>:</p>
|
||
<ul>
|
||
<li><strong>$KLogInternalMsgFacility
|
||
<facility></strong><br>
|
||
The facility which messages internally generated by imklog will have.
|
||
imklog generates some messages of itself (e.g. on problems, startup and
|
||
shutdown) and these do not stem from the kernel. Historically, under
|
||
Linux, these too have "kern" facility. Thus, on Linux platforms the
|
||
default is "kern" while on others it is "syslogd". You usually do not
|
||
need to specify this configuratin directive - it is included primarily
|
||
for few limited cases where it is needed for good reason. Bottom line:
|
||
if you don't have a good idea why you should use this setting, do not
|
||
touch it.</li>
|
||
<li><span style="font-weight: bold;">$KLogPermitNonKernelFacility
|
||
[on/<span style="font-style: italic;">off</span>]<br>
|
||
</span>At least under BSD the kernel log may contain entries
|
||
with non-kernel facilities. This setting controls how those are
|
||
handled. The default is "off", in which case these messages are
|
||
ignored. Switch it to on to submit non-kernel messages to rsyslog
|
||
processing.<span style="font-weight: bold;"></span></li>
|
||
<li><span style="font-weight: bold;"></span>$DebugPrintKernelSymbols
|
||
(imklog) [on/<b>off</b>]<br>
|
||
Linux only, ignored on other platforms (but may be specified)</li>
|
||
<li>$klogSymbolLookup (imklog) [<b>on</b>/off] --
|
||
former klogd -x option<br>
|
||
Linux only, ignored on other platforms (but may be specified)</li>
|
||
<li>$klogUseSyscallInterface (imklog) [on/<b>off</b>]
|
||
-- former klogd -2 option<br>
|
||
Linux only, ignored on other platforms (but may be specified)</li>
|
||
<li>$klogSymbolsTwice (imklog) [on/<b>off</b>] --
|
||
former klogd -s option<br>
|
||
Linux only, ignored on other platforms (but may be specified)<br style="font-weight: bold;">
|
||
</li>
|
||
</ul>
|
||
<b>Caveats/Known Bugs:</b>
|
||
<p>This is obviously platform specific and requires platform
|
||
drivers.
|
||
Currently, imklog functionality is available on Linux and BSD.</p>
|
||
<p><b>Sample:</b></p>
|
||
<p>The following sample pulls messages from the kernel log. All
|
||
parameters are left by default, which is usually a good idea. Please
|
||
note that loading the plugin is sufficient to activate it. No directive
|
||
is needed to start pulling kernel messages.<br>
|
||
</p>
|
||
<textarea rows="15" cols="60">$ModLoad imklog
|
||
</textarea>
|
||
<p>[<a href="rsyslog_conf.html">rsyslog.conf overview</a>]
|
||
[<a href="manual.html">manual index</a>] [<a href="http://www.rsyslog.com/">rsyslog site</a>]</p>
|
||
<p><font size="2">This documentation is part of the
|
||
<a href="http://www.rsyslog.com/">rsyslog</a>
|
||
project.<br>
|
||
Copyright <20> 2008 by <a href="http://www.gerhards.net/rainer">Rainer
|
||
Gerhards</a> and
|
||
<a href="http://www.adiscon.com/">Adiscon</a>.
|
||
Released under the GNU GPL version 3 or higher.</font></p>
|
||
</body></html> |