Create an /etc/syslog.conf selector

You can define multiple selectors for an action. When you create multiple selectors for an action, it is important to note that each selector can modify the selectors preceding it. The selector specifies the type and priority of messages that will be logged to the newly-defined action. The selector has two fields-priorities and facilities.

You can enter one or more of the following facilities, which describes the part of the system that is generating the message:

Keyword	Definition
auth	messages from the authentication system, such as login
cron	messages from the internal cron facility
daemon	messages from the filer daemons, such as rshd
kern	messages from the filer kernal

You can enter one or more of the following priorities, which describes the severity of condition from which the message was generated:

Keyword	Definition
alert	condition that you should correct immediately, such as a failed disk
crit	critical conditions, such as disk errors
debug	used for diagnostic purporses (supressed by default)
emerg	panic condition that causes a disruption of normal service
err	errors, such as those caused by a bad configuration file
info	information, such as the hourly uptime message
notice	conditions that are not errors, but might require special handling
warning	conditions that may become errors if they are not corrected

Click OK to record the information and close the dialog box.

Click Revert to erase the new entries.

Click Cancel to close the dialog box without recording the information.