45 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
		
		
			
		
	
	
			45 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
|   | --- | ||
|  | layout: post | ||
|  | title: "Syslog on Mac OS X: Cheat Sheet" | ||
|  | date: 2015-02-21 00:41 | ||
|  | comments: true | ||
|  | categories: | ||
|  |  - mac | ||
|  |  - osx | ||
|  |  - syslog | ||
|  |  - cheatsheet | ||
|  | --- | ||
|  | This is a quick cheatsheet to work with [`syslog(1)`](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/syslog.1.html) implementation OS X uses. | ||
|  | 
 | ||
|  | `Console.app` provides a nice UI to access logs in mac, you can do some basic filtering and search, but its limited in terms of raw control a terminal gives you. | ||
|  | 
 | ||
|  | `/usr/bin/syslog` can be used to both send and receive logs. Alternatively [`logger(1)`](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/logger.1.html) can be used to send logs to syslog. | ||
|  | 
 | ||
|  | ## Print logs from a specific facilitiy
 | ||
|  | ```bash | ||
|  | # -w: similar to tailf
 | ||
|  | syslog -k Facility local1 -w | ||
|  | ``` | ||
|  | 
 | ||
|  | ## Sending logs
 | ||
|  | ```bash | ||
|  | # -l severity level
 | ||
|  | syslog -s "message" | ||
|  | ``` | ||
|  | 
 | ||
|  | ## Sending logs upstream to another syslog server
 | ||
|  | Syslog can forward your logs too. The configuration resides in `/etc/syslog.conf`. You can append forwarding rules in this file, format is | ||
|  | ``` | ||
|  | # Tab separated
 | ||
|  | Facility.Level    @IPADDR:PORT | ||
|  | ``` | ||
|  | After this reload syslog daemon. | ||
|  | ``` | ||
|  | sudo launchctl unload /System/Library/LaunchDaemons/com.apple.syslogd.plist | ||
|  | sudo launchctl load /System/Library/LaunchDaemons/com.apple.syslogd.plistp | ||
|  | ``` | ||
|  | 
 | ||
|  | # Extra reading
 | ||
|  | 1. [`asl.conf(5)`](https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man5/asl.conf.5.html) - Configuration file for Apple Syslog Log (A syslog superset apple implements), this is where all the logic to route logs are set | ||
|  | facility.level |