[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Feature Request re: syslog and bashhist
From: |
aixtools |
Subject: |
Feature Request re: syslog and bashhist |
Date: |
Sun, 09 Aug 2015 19:37:12 +0200 |
User-agent: |
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 |
Hi,
Via google I came across the define named
config-top.h:/* #define SYSLOG_HISTORY */
Changing it (manually) to
config-top.h:#define SYSLOG_HISTORY
Adds syslog statements such as:
Aug 9 16:52:55 x064 user:info syslog: HISTORY: PID=262242 UID=0 ls -ltr
Request #1
Add a ./configure variable, e.g., --with-syslog_history
to make the change in the config file with the added benefit that it
draws attention to
an otherwise dormant feature.
Request #2
At the request of a bash user on AIX I made the following change to make
the syslog output "standardized" to AIX format for many applications so
that the output looks like this:
Aug 9 17:30:12 x064 user:info syslog: bash[454682]: UID=0: ls -ltr
Other examples from AIX syslog
Aug 09 18:00:07 x053 daemon:info x053 qlogd[10148]: conn log: Users:
michael, Source IP: 192.168.129.5, Computer name: study, Connection
type: SAMBA, Accessed resources: michael/Pictures/desktop.ini, Action: Read
Aug 9 17:00:12 x071 user:info syslog: /etc/ifconfig -a
Aug 9 17:00:22 x071 auth|security:crit su: BAD SU from michael to root
at /dev/pts/0
Aug 9 17:00:28 x071 auth|security:notice su: from michael to root at
/dev/pts/0
Aug 09 18:16:19 x053 auth|security:info x053 qlogd[10148]: conn log:
Users: guest, Source IP: 192.168.129.5, Computer name: study, Connection
type: SAMBA, Accessed resources: ---, Action: Login OK
Aug 9 17:18:14 x071 mail:info pop3d[9044156]: Moved 14080 bytes of new
mail to /home/michael/mbox from /var/spool/mail/michael host=
x005.home.local [192.168.129.5]
Aug 9 17:18:14 x071 mail:info pop3d[9044156]: Auth user=michael
host=x005.home.local [192.168.129.5] nmsgs=11/11
Aug 9 17:18:17 x071 mail:info pop3d[9044156]: Logout user=michael
host=x005.home.local [192.168.129.5] nmsgs=0 ndele=11
Note that WHEN a pid is included it is prefixed by the commandname and
enclosed between [].
Sincerely,
Michael