Direktiva v konfiguračním souboru obsahuje dvě pole oddělené
tabulátorem:
facility.level [; facility.level] akce
Kde
facility může nabývat hodnot:
user - Messages generated by user processes. This is the default priority for messages from programs or facilities not listed in this file.
kern - Messages generated by the kernel.
mail - The mail system.
daemon - System daemons, such as in.ftpd
auth - The authorization system: login, su, getty, among others.
lpr - The line printer spooling system: lpr, lpc, among others.
news - Reserved for the USENET network news system.
uucp - Reserved for the UUCP system; it does not currently use the syslog mechanism.
cron - The cron/at facility; crontab, at, cron, among others.
local0-7 - Reserved for local use.
mark - For timestamp messages produced internally by syslogd.
* - An asterisk indicates all facilities except for the mark facility.
A level (v pořadí s klesající důležitostí):
emerg - For panic conditions that would normally be broadcast to all users.
alert - For conditions that should be corrected immediately, such as a corrupted system database.
crit - For warnings about critical conditions, such as hard device errors.
err - For other errors.
warning - For warning messages.
notice - For conditions that are not error conditions, but may require special handling. A configuration entry with a level value of notice must appear on a separate line.
info - Informational messages.
debug - For messages that are normally used only when debugging a program.
none - Do not send messages from the indicated facility to the selected file. For example, a selector of
*.debug;mail.none
will send all messages except mail messages to the
selected file.
A nakonec hodnoty akce (kam se má zpráva nasměrovat):
filename (s počátečním lomítkem /) - Zápis do souboru (otevřen v append modu).
host (s prefixem @) - Přesměrováno do syslogu na jinou stanici.
username[,username] - Zpráva se vypíše na konzoli uživateli, pokud je zalogován.
* - Zpráva bude odeslána všem zalogovaným uživatelům.
