消息日志标准之syslog

参考

Wikipedia-syslog

摘要

syslog是一个消息日志的标准.允许软件生成消息交由系统储存,再由别的软件进行传达和分析.

组成

• Facility : 设备标识,指明生成日志的软件标识
• Severity level : 日志级别
• Message : 消息

Facility

表明生成日志的程序类型,不同类型可能会有不同的处理方式,下面是可用设备标识列表(定义在RFC 3164)

Facility code Keyword Description 0 kern kernel messages(内核消息) 1 user user-level messages(用户级别消息) 2 mail mail system(邮件系统) 3 daemon system daemons(系统守护) 4 auth security/authorization messages(安全消息) 5 syslog messages generated internally by syslogd 6 lpr line printer subsystem 7 news network news subsystem 8 uucp UUCP subsystem 9 clock daemon 10 authpriv security/authorization messages 11 ftp FTP daemon 12 - NTP subsystem 13 - log audit 14 - log alert 15 cron scheduling daemon 16 local0 local use 0 (local0) 17 local1 local use 1 (local1) 18 local2 local use 2 (local2) 19 local3 local use 3 (local3) 20 local4 local use 4 (local4) 21 local5 local use 5 (local5) 22 local6 local use 6 (local6) 23 local7 local use 7 (local7)

facility code 和 关键字 在不同操作系统和不同syslog的实现是不统一的.

Severity level

日志的级别(定义在RFC 5424)

Value Severity Keyword Deprecated keywords Description 0 Emergency emerg panic[8] System is unusable.A panic condition.[9] 1 Alert alert Action must be taken immediately.A condition that should be corrected immediately, such as a corrupted system database.[9] 2 Critical crit Critical conditions, such as hard device errors.[9] 3 Error err error[8] Error conditions. 4 Warning warning warn[8] Warning conditions. 5 Notice notice Normal but significant conditions.Conditions that are not error conditions, but that may require special handling.[9] 6 Informational info Informational messages. 7 Debug debug Debug-level messages.Messages that contain information normally of use only when debugging a program.[9]

Message

必须包含TAG和CONTENT,分别表示程序名称和详细消息.