Buffered logging for syslogd. Logs may be stored in memory buffers and

extracted using a small client. Useful for diskless systems.
much feedback from deraadt@, canacar@, jmc@, jakob@ ; ok deraadt@

1 files changed, 17 insertions, 1 deletions

diff --git a/usr.sbin/syslogd/syslog.conf.5 b/usr.sbin/syslogd/syslog.conf.5
index 02bf4725df7..b1bfc0812b7 100644
--- a/usr.sbin/syslogd/syslog.conf.5
+++ b/usr.sbin/syslogd/syslog.conf.5
@@ -26,7 +26,7 @@
 .\" SUCH DAMAGE.
 .\"
 .\"     from: @(#)syslog.conf.5	8.1 (Berkeley) 6/9/93
-.\"     $OpenBSD: syslog.conf.5,v 1.13 2003/10/01 08:17:55 jmc Exp $
+.\"     $OpenBSD: syslog.conf.5,v 1.14 2004/01/04 08:28:49 djm Exp $
 .\"	$NetBSD: syslog.conf.5,v 1.4 1996/01/02 17:41:46 perry Exp $
 .\"
 .Dd June 9, 1993
@@ -203,6 +203,15 @@ if they are logged in.
 .It
 An asterisk.
 Selected messages are written to all logged-in users.
+.It
+A colon, followed by a memory buffer size
+.Pq in kilobytes
+another colon, followed by a buffer name.
+Selected messages are written to an in-memory buffer that may be read using
+.Xr syslogc 8 .
+Memory buffered logging is useful to provide access to log data on devices
+that lack local storage (e.g. diskless workstations or routers).
+The largest allowed buffer size is 256kb.
 .El
 .Pp
 Blank lines and lines whose first non-blank character is a hash
@@ -249,9 +258,16 @@ mail,news.err						/var/log/spoolerr
 # Save ftpd transactions along with mail and news
 !ftpd
 *.*							/var/log/spoolerr
+
+# Keep a copy of all logging in a 32k memory buffer named "debug"
+*.debug							:32:debug
+
+# Store notices and authpriv messages in a 64k buffer named "important"
+*.notice,authpriv.*					:64:important
 .Ed
 .Sh SEE ALSO
 .Xr syslog 3 ,
+.Xr syslogc 8 ,
 .Xr syslogd 8
 .Sh HISTORY
 The