Dissect and understand the following syslog.conf line:
*.notice;kern.debug:lpr.info;mail.crit;news.err /var/log/messages

notice – Things that might merit investigation (Syslog severity level)
kern – The Kernel (Syslog facility name)
debug – For debugging only (Syslog severity level)
lpr - The line printer spooling system (Syslog facility name)
info – Information message (Syslog severity level)
mail – send mail and other mail related software (Syslog facility name)
crit – Critical conditions (Syslog severity level)
news - The Usenet news system (Syslog facility name)
err – Other error conditions (Syslog severity level)

/var/log/messages – writes (critical conditions, Usenet news, other error
conditions) important messages to /var/log/messages - Is that correct????

The use of notice, kern, debug, lpr, info and mail – If you notice a problem that merits investigation with the kernel or the printer send an email message. If my understanding is correct I would say the syslog.conf line is correct.


Can someone tell me if my understanding is correct about this syslog.conf line ( I am new to Linux, so any feedback would be great) -
*.notice;kern.debug:lpr.info;mail.crit;news.err /var/log/messages

Thank you

Yes, you have the basic description correct.

Any applications are free to use any facility and priority they desire. It is up to admins to read the documentation for system services to determine the facility/priority used.

See week 9 Notes here: http://cis68c1.mikecappella.com/

Thank you so much

One more question -

Where would you find the boot log for your machine? What are the issues that
affect logging at boot time? How does klogd solve these issues?


Thanks again

This sounds like homework questions.