Ignore:
Timestamp:
May 23, 2008, 6:56:41 AM (17 years ago)
Author:
Paul Smedley
Message:

Update source to 3.0.29

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/samba-3.0/docs/manpages/eventlogadm.8

    r44 r134  
    1 .\"Generated by db2man.xsl. Don't modify this, modify the source.
    2 .de Sh \" Subsection
    3 .br
    4 .if t .Sp
    5 .ne 5
    6 .PP
    7 \fB\\$1\fR
    8 .PP
    9 ..
    10 .de Sp \" Vertical space (when we can't use .PP)
    11 .if t .sp .5v
    12 .if n .sp
    13 ..
    14 .de Ip \" List item
    15 .br
    16 .ie \\n(.$>=3 .ne \\$3
    17 .el .ne 3
    18 .IP "\\$1" \\$2
    19 ..
    20 .TH "EVENTLOGADM" 8 "" "" ""
     1.\"     Title: eventlogadm
     2.\"    Author:
     3.\" Generator: DocBook XSL Stylesheets v1.73.2 <http://docbook.sf.net/>
     4.\"      Date: 05/21/2008
     5.\"    Manual: System Administration tools
     6.\"    Source: Samba 3.0
     7.\"
     8.TH "EVENTLOGADM" "8" "05/21/2008" "Samba 3\.0" "System Administration tools"
     9.\" disable hyphenation
     10.nh
     11.\" disable justification (adjust text to left margin only)
     12.ad l
    2113.SH "NAME"
    2214eventlogadm - push records into the Samba event log store
    2315.SH "SYNOPSIS"
    2416.HP 1
    25 eventlogadm [\fB-d\fR] [\fB-h\fR] \fB-o\fR addsource \fIEVENTLOG\fR \fISOURCENAME\fR \fIMSGFILE\fR
     17eventlogadm [\fB\-d\fR] [\fB\-h\fR] \fB\-o\fR\ addsource\ \fIEVENTLOG\fR\ \fISOURCENAME\fR\ \fIMSGFILE\fR
    2618.HP 1
    27 eventlogadm [\fB-d\fR] [\fB-h\fR] \fB-o\fR write \fIEVENTLOG\fR
     19eventlogadm [\fB\-d\fR] [\fB\-h\fR] \fB\-o\fR\ write\ \fIEVENTLOG\fR
    2820.SH "DESCRIPTION"
    2921.PP
    3022This tool is part of the
    3123\fBsamba\fR(1)
    32 suite.
     24suite\.
    3325.PP
    3426eventlogadm
    35 is a filter that accepts formatted event log records on standard input and writes them to the Samba event log store. Windows client can then manipulate these record using the usual administration tools.
     27is a filter that accepts formatted event log records on standard input and writes them to the Samba event log store\. Windows client can then manipulate these record using the usual administration tools\.
    3628.SH "OPTIONS"
    3729.PP
    38 \fB-d\fR
    39 .RS 3n
     30\fB\-d\fR
     31.RS 4
    4032The
    41 -d
     33\-d
    4234option causes
    4335eventlogadm
    44 to emit debugging information.
    45 .RE
    46 .PP
    47 \fB-o\fR addsource \fIEVENTLOG\fR \fISOURCENAME\fR \fIMSGFILE\fR
    48 .RS 3n
     36to emit debugging information\.
     37.RE
     38.PP
     39\fB\-o\fR addsource \fIEVENTLOG\fR \fISOURCENAME\fR \fIMSGFILE\fR
     40.RS 4
    4941The
    50 -o addsource
    51 option creates a new event log source.
    52 .RE
    53 .PP
    54 \fB-o\fR write \fIEVENTLOG\fR
    55 .RS 3n
     42\-o addsource
     43option creates a new event log source\.
     44.RE
     45.PP
     46\fB\-o\fR write \fIEVENTLOG\fR
     47.RS 4
    5648The
    57 -o write
    58 reads event log records from standard input and writes them to theSamba event log store named by EVENTLOG.
    59 .RE
    60 .PP
    61 \fB-h\fR
    62 .RS 3n
    63 Print usage information.
     49\-o write
     50reads event log records from standard input and writes them to theSamba event log store named by EVENTLOG\.
     51.RE
     52.PP
     53\fB\-h\fR
     54.RS 4
     55Print usage information\.
    6456.RE
    6557.SH "EVENTLOG RECORD FORMAT"
     
    6759For the write operation,
    6860eventlogadm
    69 expects to be able to read structured records from standard input. These records are a sequence of lines, with the record key and data separated by a colon character. Records are separated by at least one or more blank line.
     61expects to be able to read structured records from standard input\. These records are a sequence of lines, with the record key and data separated by a colon character\. Records are separated by at least one or more blank line\.
    7062.PP
    7163The event log record field are:
    72 .TP 3n
    73 \(bu
     64.sp
     65.RS 4
     66.ie n \{\
     67\h'-04'\(bu\h'+03'\c
     68.\}
     69.el \{\
     70.sp -1
     71.IP \(bu 2.3
     72.\}
    7473
    7574LEN
    76 - This field should be 0, since
     75\- This field should be 0, since
    7776eventlogadm
    78 will calculate this value.
    79 .TP 3n
    80 \(bu
     77will calculate this value\.
     78.RE
     79.sp
     80.RS 4
     81.ie n \{\
     82\h'-04'\(bu\h'+03'\c
     83.\}
     84.el \{\
     85.sp -1
     86.IP \(bu 2.3
     87.\}
    8188
    8289RS1
    83 - This must be the value 1699505740.
    84 .TP 3n
    85 \(bu
     90\- This must be the value 1699505740\.
     91.RE
     92.sp
     93.RS 4
     94.ie n \{\
     95\h'-04'\(bu\h'+03'\c
     96.\}
     97.el \{\
     98.sp -1
     99.IP \(bu 2.3
     100.\}
    86101
    87102RCN
    88 - This field should be 0.
    89 .TP 3n
    90 \(bu
     103\- This field should be 0\.
     104.RE
     105.sp
     106.RS 4
     107.ie n \{\
     108\h'-04'\(bu\h'+03'\c
     109.\}
     110.el \{\
     111.sp -1
     112.IP \(bu 2.3
     113.\}
    91114
    92115TMG
    93 - The time the eventlog record was generated; format is the number of seconds since 00:00:00 January 1, 1970, UTC.
    94 .TP 3n
    95 \(bu
     116\- The time the eventlog record was generated; format is the number of seconds since 00:00:00 January 1, 1970, UTC\.
     117.RE
     118.sp
     119.RS 4
     120.ie n \{\
     121\h'-04'\(bu\h'+03'\c
     122.\}
     123.el \{\
     124.sp -1
     125.IP \(bu 2.3
     126.\}
    96127
    97128TMW
    98 - The time the eventlog record was written; format is the number of seconds since 00:00:00 January 1, 1970, UTC.
    99 .TP 3n
    100 \(bu
     129\- The time the eventlog record was written; format is the number of seconds since 00:00:00 January 1, 1970, UTC\.
     130.RE
     131.sp
     132.RS 4
     133.ie n \{\
     134\h'-04'\(bu\h'+03'\c
     135.\}
     136.el \{\
     137.sp -1
     138.IP \(bu 2.3
     139.\}
    101140
    102141EID
    103 - The eventlog ID.
    104 .TP 3n
    105 \(bu
     142\- The eventlog ID\.
     143.RE
     144.sp
     145.RS 4
     146.ie n \{\
     147\h'-04'\(bu\h'+03'\c
     148.\}
     149.el \{\
     150.sp -1
     151.IP \(bu 2.3
     152.\}
    106153
    107154ETP
    108 - The event type -- one of "INFO", "ERROR", "WARNING", "AUDIT SUCCESS" or "AUDIT FAILURE".
    109 .TP 3n
    110 \(bu
     155\- The event type \-\- one of "INFO", "ERROR", "WARNING", "AUDIT SUCCESS" or "AUDIT FAILURE"\.
     156.RE
     157.sp
     158.RS 4
     159.ie n \{\
     160\h'-04'\(bu\h'+03'\c
     161.\}
     162.el \{\
     163.sp -1
     164.IP \(bu 2.3
     165.\}
    111166
    112167ECT
    113 - The event category; this depends on the message file. It is primarily used as a means of filtering in the eventlog viewer.
    114 .TP 3n
    115 \(bu
     168\- The event category; this depends on the message file\. It is primarily used as a means of filtering in the eventlog viewer\.
     169.RE
     170.sp
     171.RS 4
     172.ie n \{\
     173\h'-04'\(bu\h'+03'\c
     174.\}
     175.el \{\
     176.sp -1
     177.IP \(bu 2.3
     178.\}
    116179
    117180RS2
    118 - This field should be 0.
    119 .TP 3n
    120 \(bu
     181\- This field should be 0\.
     182.RE
     183.sp
     184.RS 4
     185.ie n \{\
     186\h'-04'\(bu\h'+03'\c
     187.\}
     188.el \{\
     189.sp -1
     190.IP \(bu 2.3
     191.\}
    121192
    122193CRN
    123 - This field should be 0.
    124 .TP 3n
    125 \(bu
     194\- This field should be 0\.
     195.RE
     196.sp
     197.RS 4
     198.ie n \{\
     199\h'-04'\(bu\h'+03'\c
     200.\}
     201.el \{\
     202.sp -1
     203.IP \(bu 2.3
     204.\}
    126205
    127206USL
    128 - This field should be 0.
    129 .TP 3n
    130 \(bu
     207\- This field should be 0\.
     208.RE
     209.sp
     210.RS 4
     211.ie n \{\
     212\h'-04'\(bu\h'+03'\c
     213.\}
     214.el \{\
     215.sp -1
     216.IP \(bu 2.3
     217.\}
    131218
    132219SRC
    133 - This field contains the source name associated with the event log. If a message file is used with an event log, there will be a registry entry for associating this source name with a message file DLL.
    134 .TP 3n
    135 \(bu
     220\- This field contains the source name associated with the event log\. If a message file is used with an event log, there will be a registry entry for associating this source name with a message file DLL\.
     221.RE
     222.sp
     223.RS 4
     224.ie n \{\
     225\h'-04'\(bu\h'+03'\c
     226.\}
     227.el \{\
     228.sp -1
     229.IP \(bu 2.3
     230.\}
    136231
    137232SRN
    138 - he name of the machine on which the eventlog was generated. This is typically the host name.
    139 .TP 3n
    140 \(bu
     233\- he name of the machine on which the eventlog was generated\. This is typically the host name\.
     234.RE
     235.sp
     236.RS 4
     237.ie n \{\
     238\h'-04'\(bu\h'+03'\c
     239.\}
     240.el \{\
     241.sp -1
     242.IP \(bu 2.3
     243.\}
    141244
    142245STR
    143 - The text associated with the eventlog. There may be more than one string in a record.
    144 .TP 3n
    145 \(bu
     246\- The text associated with the eventlog\. There may be more than one string in a record\.
     247.RE
     248.sp
     249.RS 4
     250.ie n \{\
     251\h'-04'\(bu\h'+03'\c
     252.\}
     253.el \{\
     254.sp -1
     255.IP \(bu 2.3
     256.\}
    146257
    147258DAT
    148 - This field should be left unset.
     259\- This field should be left unset\.
    149260.SH "EXAMPLES"
    150261.PP
    151262An example of the record format accepted by
    152263eventlogadm:
    153 
     264.sp
     265.RS 4
    154266.nf
    155 
    156267        LEN: 0
    157268        RS1: 1699505740
     
    159270        TMG: 1128631322
    160271        TMW: 1128631322
    161         EID: 1000 
     272        EID: 1000
    162273        ETP: INFO
    163         ECT: 0 
     274        ECT: 0
    164275        RS2: 0
    165276        CRN: 0
     
    167278        SRC: cron
    168279        SRN: dmlinux
    169         STR: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
    170         DAT: 
     280        STR: (root) CMD ( rm \-f /var/spool/cron/lastrun/cron\.hourly)
     281        DAT:
    171282       
    172283.fi
     284.RE
    173285.PP
    174286Set up an eventlog source, specifying a message file DLL:
    175 
     287.sp
     288.RS 4
    176289.nf
    177 
    178         eventlogadm -o addsource Application MyApplication | \\
    179                 %SystemRoot%/system32/MyApplication.dll
     290        eventlogadm \-o addsource Application MyApplication | \e\e
     291                %SystemRoot%/system32/MyApplication\.dll
    180292       
    181293.fi
     294.RE
    182295.PP
    183296Filter messages from the system log into an event log:
    184 
     297.sp
     298.RS 4
    185299.nf
    186 
    187         tail -f /var/log/messages | \\
    188                 my_program_to_parse_into_eventlog_records | \\
     300        tail \-f /var/log/messages | \e\e
     301                my_program_to_parse_into_eventlog_records | \e\e
    189302                eventlogadm SystemLogEvents
    190303       
    191304.fi
     305.RE
    192306.SH "VERSION"
    193307.PP
    194 This man page is correct for version 3.0.25 of the Samba suite.
     308This man page is correct for version 3\.0\.25 of the Samba suite\.
    195309.SH "AUTHOR"
    196310.PP
    197 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
    198 
     311The original Samba software and related utilities were created by Andrew Tridgell\. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\.
Note: See TracChangeset for help on using the changeset viewer.