1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
3
<meta http-equiv="Content-Language" content="en"><title>Unix Socket Input</title>
7
<h1>Unix Socket Input</h1>
8
<p><b>Module Name: imuxsock</b></p>
9
<p><b>Author: </b>Rainer Gerhards
10
<rgerhards@adiscon.com></p>
11
<p><b>Description</b>:</p>
12
<p>Provides the ability to accept syslog messages via local Unix
13
sockets. Most importantly, this is the mechanism by which the syslog(3)
14
call delivers syslog messages to rsyslogd. So you need to have this
15
module loaded to read the system log socket and be able to process log
16
messages from applications running on the local system.</p><p>Application-provided
17
timestamps are ignored by default. This is needed, as some programs
18
(e.g. sshd) log with inconsistent timezone information, what
19
messes up the local logs (which by default don't even contain time zone
20
information). This seems to be consistent with what sysklogd did for
21
the past four years. Alternate behaviour may be desirable if
22
gateway-like processes send messages via the local log slot - in this
23
case, it can be enabled via the
24
$InputUnixListenSocketIgnoreMsgTimestamp and $SystemLogSocketIgnoreMsgTimestamp config directives</p><p><b>Configuration Directives</b>:</p>
26
<li><span style="font-weight: bold;">$InputUnixListenSocketIgnoreMsgTimestamp</span> [<span style="font-weight: bold;">on</span>/off]<strong></strong><br>Ignore timestamps included in the message. Applies to the next socket being added.</li><li><span style="font-weight: bold;">$SystemLogSocketIgnoreMsgTimestamp</span> [<span style="font-weight: bold;">on</span>/off]<br>Ignore timestamps included in the messages, applies to messages received via the system log socket.</li><li><span style="font-weight: bold;">$OmitLocalLogging</span> (imuxsock) [on/<b>off</b>] --
27
former -o option</li><li><span style="font-weight: bold;">$SystemLogSocketName</span> <name-of-socket> --
28
former -p option</li><li><span style="font-weight: bold;">$AddUnixListenSocket</span> <name-of-socket> adds
29
additional unix socket, default none -- former -a option</li></ul>
30
<b>Caveats/Known Bugs:</b><br>
32
This documentation is sparse and incomplete.
34
<p>The following sample is the minimum setup required to accept syslog messages from applications running on the local system.<br>
36
<textarea rows="15" cols="60">$ModLoad imuxsock # needs to be done just once
38
<p>[<a href="rsyslog_conf.html">rsyslog.conf overview</a>]
39
[<a href="manual.html">manual index</a>] [<a href="http://www.rsyslog.com/">rsyslog site</a>]</p>
40
<p><font size="2">This documentation is part of the
41
<a href="http://www.rsyslog.com/">rsyslog</a>
43
Copyright � 2008 by <a href="http://www.gerhards.net/rainer">Rainer
45
<a href="http://www.adiscon.com/">Adiscon</a>.
46
Released under the GNU GPL version 3 or higher.</font></p>
b'\\ No newline at end of file'