manpagez: man pages & more
man eventlogadm(8)
Home | html | info | man
eventlogadm(8)                                                  eventlogadm(8)




NAME

       eventlogadm - push records into the Samba event log store


SYNOPSIS

       eventlogadm [-d] [-h] -o addsource EVENTLOG SOURCENAME MSGFILE

       eventlogadm [-d] [-h] -o write EVENTLOG


DESCRIPTION

       This tool is part of the samba(1) suite.

       eventlogadm  is  a  filter  that accepts formatted event log records on
       standard input and writes them to the Samba event  log  store.  Windows
       client  can then manipulate these record using the usual administration
       tools.


OPTIONS

       -d
          The -d option causes eventlogadm to emit debugging information.

       -o addsource EVENTLOG SOURCENAME MSGFILE
          The -o addsource option creates a new event log source.

       -o write EVENTLOG
          The -o write reads event log records from standard input and  writes
          them to theSamba event log store named by EVENTLOG.

       -h
          Print usage information.


EVENTLOG RECORD FORMAT

       For  the write operation, eventlogadm expects to be able to read struc-
       tured records from standard input. These  records  are  a  sequence  of
       lines,  with  the  record  key and data separated by a colon character.
       Records are separated by at least one or more blank line.

       The event log record field are:

       o   LEN - This field should be 0, since eventlogadm will calculate this
          value.

       o   RS1 - This must be the value 1699505740.

       o   RCN - This field should be 0.

       o    TMG  -  The  time the eventlog record was generated; format is the
          number of seconds since 00:00:00 January 1, 1970, UTC.

       o   TMW - The time the eventlog record was written; format is the  num-
          ber of seconds since 00:00:00 January 1, 1970, UTC.

       o   EID - The eventlog ID.

       o    ETP  - The event type -- one of "INFO", "ERROR", "WARNING", "AUDIT
          SUCCESS" or "AUDIT FAILURE".

       o   ECT - The event category; this depends on the message file.  It  is
          primarily used as a means of filtering in the eventlog viewer.

       o   RS2 - This field should be 0.

       o   CRN - This field should be 0.

       o   USL - This field should be 0.

       o   SRC - This field contains the source name associated with the event
          log. If a message file is used with an event log, there  will  be  a
          registry  entry for associating this source name with a message file
          DLL.

       o   SRN - he name of the machine on which the eventlog  was  generated.
          This is typically the host name.

       o   STR - The text associated with the eventlog. There may be more than
          one string in a record.

       o   DAT - This field should be left unset.


EXAMPLES

       An example of the record format accepted by eventlogadm:


            LEN: 0
            RS1: 1699505740
            RCN: 0
            TMG: 1128631322
            TMW: 1128631322
            EID: 1000
            ETP: INFO
            ECT: 0
            RS2: 0
            CRN: 0
            USL: 0
            SRC: cron
            SRN: dmlinux
            STR: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly)
            DAT:


       Set up an eventlog source, specifying a message file DLL:


            eventlogadm -o addsource Application MyApplication | \
                 %SystemRoot%/system32/MyApplication.dll


       Filter messages from the system log into an event log:


            tail -f /var/log/messages | \
                 my_program_to_parse_into_eventlog_records | \
                      eventlogadm SystemLogEvents



VERSION

       This man page is correct for version 3.0.25 of the Samba suite.


AUTHOR

       The original Samba software  and  related  utilities  were  created  by
       Andrew  Tridgell.  Samba  is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.




                                                                eventlogadm(8)

Mac OS X 10.6 - Generated Thu Sep 17 20:25:52 CDT 2009
© manpagez.com 2000-2024
Individual documents may contain additional copyright information.