You can capture additional error messages that are generated by various system processes by modifying the /etc/syslog.conf file. By default, the /etc/syslog.conf file directs many system process messages to the /var/adm/messages files, which also contain crash and boot messages. To view /var/adm messages, see Viewing System Messages and Logging.
The /etc/syslog.conf file contains two columns separated by tabs:
facility.level ... action
A facility is a system source of the message or condition. It may be a comma-separated list of facilities. A level indicates the severity or priority of the condition being logged.
Do not put two entries for the same facility on the same line if the entries are for different priorities. Putting a priority in the syslog file indicates that all messages of at least that priority are logged, with the last message taking precedence. For a given facility and level, syslogd matches all messages for that level and all higher levels.
Indicates where the messages are forwarded.
The following example shows sample lines from a default /etc/syslog.conf file.
user.err /dev/sysmsg user.err /var/adm/messages user.alert `root, operator' user.emerg *
These entries cause the following user messages to be logged automatically:
User errors are printed to the console and also are logged to the /var/adm/messages file.
User messages requiring immediate action (alert) are sent to the root and operator users.
User emergency messages are sent to individual users.
The most common error condition sources are:
The kernel
Authentication
All daemons
Mail system
Spooling system
User processes
The most common priority levels for syslog.conf messages, in priority order, are:
System emergencies
Errors requiring immediate correction
Critical errors
Other errors
Informational messages
Output used for debugging
No output logged
See Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.
You can add or change message sources, priorities, and message locations. For more information, see the syslog.conf(5).
$ pfedit /etc/syslog.conf
This example shows a entry for a /etc/syslog.conf user.emerg facility that sends user emergency messages to root and individual users.
user.emerg `root, *'