Kernel log mechanism: How to log messages in a different file
Hi, I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file. Considering above can be done, then what about dmesg ? will they still show up in dmesg output ? Regards, Amit
syslog.conf On Jun 25, 2011, at 7:40 AM, amit mehta wrote:
Hi,
I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file.
Considering above can be done, then what about dmesg ? will they still show up in dmesg output ?
Regards, Amit
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
Thanks Bruce, On my system, [rango@localhost:] locate syslog.conf /etc/rsyslog.conf /etc/init/rsyslog.conf /usr/share/man/man5/rsyslog.conf.5.gz /var/lib/dpkg/info/rsyslog.conffiles Also there is a configuration file under /etc/rsyslog.d/50-default.conf which has the rules for logging messages in various files, I guess I need to edit this file. As of now I'm also looking into the information available here: http://wiki.rsyslog.com/index.php/Configuration_Samples Regards, Amit On Sat, Jun 25, 2011 at 7:19 PM, Bruce Rowen <browen@aoc.nrao.edu> wrote:
syslog.conf
On Jun 25, 2011, at 7:40 AM, amit mehta wrote:
Hi,
I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file.
Considering above can be done, then what about dmesg ? will they still show up in dmesg output ?
Regards, Amit
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
On Sat, Jun 25, 2011 at 20:40, amit mehta <gmate.amit@gmail.com> wrote:
Hi,
I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file.
side speaking, consider using netlink and create a user space netlink grabber specificly to read the messages that thrown in your netlink channel. IMO that would be faster and not cluttering the syslog buffer...especially if you need to save tons of messages.....just my $ 0.002 tips :D -- regards, Mulyadi Santosa Freelance Linux trainer and consultant blog: the-hydra.blogspot.com training: mulyaditraining.blogspot.com
Hi, Regarding dmesg. I believe it will still show up in it. It can be controlled by /proc/sys/kernel/printk settings. As per man 5 proc: /proc/sys/kernel/printk The four values in this file are console_loglevel, default_mes- sage_loglevel, minimum_console_level and default_con- sole_loglevel. These values influence printk() behavior when printing or logging error messages. Regards, Ramesh On Sat, Jun 25, 2011 at 1:05 PM, Mulyadi Santosa <mulyadi.santosa@gmail.com> wrote:
On Sat, Jun 25, 2011 at 20:40, amit mehta <gmate.amit@gmail.com> wrote:
Hi,
I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file.
side speaking, consider using netlink and create a user space netlink grabber specificly to read the messages that thrown in your netlink channel. IMO that would be faster and not cluttering the syslog buffer...especially if you need to save tons of messages.....just my $ 0.002 tips :D
-- regards,
Mulyadi Santosa Freelance Linux trainer and consultant
blog: the-hydra.blogspot.com training: mulyaditraining.blogspot.com
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
On Mon, Jun 27, 2011 at 10:27 PM, Ramesh.P <rameshpa@gmail.com> wrote:
Hi,
Regarding dmesg. I believe it will still show up in it. It can be controlled by /proc/sys/kernel/printk settings. As per man 5 proc:
/proc/sys/kernel/printk The four values in this file are console_loglevel, default_mes- sage_loglevel, minimum_console_level and default_con- sole_loglevel. These values influence printk() behavior when printing or logging error messages.
Regards, Ramesh
On Sat, Jun 25, 2011 at 1:05 PM, Mulyadi Santosa <mulyadi.santosa@gmail.com> wrote:
On Sat, Jun 25, 2011 at 20:40, amit mehta <gmate.amit@gmail.com> wrote:
Hi,
I've written some kernel modules using kprobes infrastructure to grab some more information on network packets. I've lots of printk which by default show up in syslog file(/var/log/messages), I was wondering if there are some method to redirect my printkS to appear in somewhere else(say /var/log/netlog). On a busy system, it gets little cluttered with other logs. Of-course i can grep for my own custom messages but it would be lot more convenient if i can redirect my messages in a separate log file.
side speaking, consider using netlink and create a user space netlink grabber specificly to read the messages that thrown in your netlink channel. IMO that would be faster and not cluttering the syslog buffer...especially if you need to save tons of messages.....just my $ 0.002 tips :D
-- regards,
Mulyadi Santosa Freelance Linux trainer and consultant
blog: the-hydra.blogspot.com training: mulyaditraining.blogspot.com
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
Try syslog-ng: http://en.wikipedia.org/wiki/Syslog-ng http://itexam.blogspot.com/2009/03/logging-with-syslog-ng.html google for more ! -- Anuj Aggarwal .''`. : :Ⓐ : # apt-get install hakuna-matata `. `'` `-
participants (5)
-
amit mehta -
Bruce Rowen -
Mulyadi Santosa -
Ramesh.P -
अनुज