Service manual

157Appendix G Generating Alarm and Syslog
Cyclades-TS Installation & Service Manual
Some examples:
1. To read from a file: source <identifier> {file(filename);};
Example to read messages from “/temp/file1” file:
source file1 {file(“/temp/file1”);};
Example to receive messages from kernel:
source s_kernel { file(“/proc/kmsg”); };
2. To receive messages from local syslogd clients:
source sysl {unix-stream(“/dev/log”);};
3. To receive messages from remote syslogd clients:
source s_udp { udp(ip(<cliente ip>) port(<udp port>)); };
Example to listen messages from all machines on UDP port 514:
source s_udp { udp(ip(0.0.0.0) port(514));};
Example to listen messages from one client (IP address=10.0.0.1) on UDP port 999:
source s_udp_10 { udp(ip(10.0.0.1) port(999)); };
To define filters use this statement:
filter <identifier> { expression; };
where: identifier - has to uniquely identify this given filter
expression - boolean expression using internal functions, which has to evaluate to true for the message to
pass.