Examples: Configure System Logging

Configure the handling of messages of various types, as described in the comments. Information is logged to two files, a remote machine, the terminal of user alex, and to the console:

[edit system] 

syslog {

/* write all security-related messages to file "security" */

    file security {

        authorization info;

        interactive-commands info;

    }

/* write messages about potential problems to file "messages": messages */

/* from "authorization" facility at level "notice" and above, messages from */

/* all other facilities at level "warning" and above */

    file messages {

        authorization notice;

        any warning;

    }

/* write all messages at level "critical" and above to terminal of user "alex" if she */

/* is logged in */

    user alex {

        any critical;

    }

/* write all messages from the "daemon" facility at level "info" and above, and messages */

/* from all other facilities at level "warning" and above, to the machine junipero.berry.net */

    host junipero.berry.net {

        daemon info;

        any warning;

    }

/* write all messages at level "error" or above to the system console */

    console {

        any error;

    }

}

Configure the handling of messages generated when users issue JUNOS CLI commands, by specifying the interactive-commands facility at the following severity levels:

• info—Logs a message when users issue any command at the CLI operational or configuration mode prompt. The example writes the messages to the file /var/log/user-actions.
• notice—Logs a message when users issue the configuration mode commands rollback and commit. The example writes the messages to the terminal of user philip.
• warning—Logs a message when users issue a command that restarts a software process restarts. The example writes the messages to the console.

[edit system] 

syslog {

    file user-actions {

        interactive-commands info;

    }

    user philip {

        interactive-commands notice;

    }

    console {

        interactive-commands warning;

    }

Log messages about all CLI commands entered by users, and all authentication or authorization attempts, to both the file cli-commands and to the terminal of any user who is logged in:

[edit system] 

syslog {

    file cli-commands {

        interactive-commands info;

        authorization info;

    }

    user * {

        interactive-commands info;

        authorization info;

    }

Log all changes in the state of alarms to the file alarms:

[edit system] 

syslog {

    file alarms {

        kernel warning;

    }

}