Sponsored links for this tag
- Concerned about security breach by privileged user?
- Are you looking for graphical, regulatory act specific Compliance reports?
- Exhaustive log search for trouble shooting and forensic analysis
- Flexible, encrypted, tamper proof log data archiving
- Do you look for cost effective scalable Log Management solution?
syslog is a standard that defines the format of messages about a system's operation. They are further categorized by facility (user,mail,kern), etc and a severity (critical, emergency, informational, etc). These messages are usually then processed by a network monitoring system to take appropriate ...
1
vote
2answers
39 views
Remote Logging with syslog
I have two machines running FreeBSD, bsdclient and bsdserver. I am trying to setup remote logging such that bsdclient sends all the logs to bsdserver. My syslog.conf on bsdclient goes like this
*.* ...
1
vote
1answer
61 views
Why does iptables output to /dev/console?
For some reason I see the output from this iptables rule
$IPT -A FORWARD --jump LOG
$IPT -A FORWARD --jump ACCEPT
on the console eventhough I have disabled kern in /etc/syslog.conf
#kern.* ...
0
votes
1answer
36 views
Lots of nfs4_reclaim_open_state: Lock reclaim failed entries in syslog
I have an Ubuntu 11.10 VM set up in VMSphere. I'm storing some data on a nfs mount. The VM has been going down frequently. I haven't been able to pin the reason why down, but I think it has to do with ...
0
votes
1answer
85 views
0
votes
3answers
115 views
log forwarding performance and OS bottleneck
How many logs/second can usually be handled by syslog servers? By syslog servers, I am referring to rsyslog, syslog-ng, splunk etc. The intent of the question is to find out at what logs/second rate ...
0
votes
0answers
63 views
Solaris Auditing (BSM) - How to log argv to syslog
By default, it seems that the argv from execs is not passed to the audit_syslog.so plugin. The binary audit log has the arguments included, but the plugin won't write them into the syslog. Everything ...
4
votes
1answer
96 views
Unusual server crash on EC2, syslog has line of ^@^@^@^@^@
Trying to get at the root of why a server went down for 20 minutes, I looked at the syslog for that time period and saw this:
Jan 3 07:50:01 tools CRON[17085]: (munin) CMD (if [ -x ...
0
votes
3answers
74 views
Splunk How do I get syslog to send data into splunk from remote machines
If I install the splunk forwarder, I can get the remote data into my splunk install, and index my logs, and searching is great. But I have a number of router devices and other devices that run syslog, ...
0
votes
1answer
36 views
Redirecting rabbitmq-server log messages to syslog
I have a CentOS machine running rabbitmq-server v2.2.0-1.el5, and rabbitmq is outputting it's log messages to various files under /var/log/rabbitmq.
If there anyway to configure rabbitmq to tell it ...
2
votes
0answers
98 views
vSphere ESXi 5.0 hosts syslog to Graylog2 - Mangled log entries
I'm just setting up graylog2 (which is awesome) to be a syslog server for my virtualised environment. All my hosts and switches are happily logging away to graylog2, which is drawing some pretty ...
0
votes
0answers
24 views
Zensyslog Clear Events
I've hooked up Zenoss' Zensyslog so that messages from a distributed list of client machines are all conglomerated into events on the Zenoss server. This is all fantastic, and I can bump messages by ...
2
votes
2answers
85 views
Nagios plugins/commands output to syslog
Do you know if is there any easy way to send output of every check run by nagios to syslog?
0
votes
1answer
191 views
Linux [Hardware Error] message from kernel
Since yesterday I get the following message every few minutes:
Message from syslogd@hostname at Nov 23 12:31:17 ... kernel:[8024326.816370] [Hardware Error]: MC4_STATUS: Corrected error, other ...
1
vote
1answer
190 views
How do I disable nginx sending messages to syslog?
My nginx sends lots of messages to syslog, but I don't need them.
In my nginx.conf:
error_log /var/log/nginx-error.log notice;
......
server {
access_log off;
...
1
vote
2answers
81 views
How to set up mysql storage for certain rsyslog input matches?
I'm draining various logs from Heroku to an rsyslog linux (ubuntu) server and am starting to have a little more to bite off than I can chew in terms of working with my log histories.
I am needing to ...
2
votes
1answer
78 views
snort not logging full output to syslog
I am able to send snort alerts to my remote syslog server but I am not able to see full alert message; I only see basic information like title, source and destination IP. I am specifically interested ...
0
votes
1answer
234 views
Redirecting Syslog events from RHEL 6 to RHEL 5: is it possible to provide with the same event format?
For some reasons, we redirect syslog events from RHEL 6 (with rsyslog) to RHEL 5 (with syslogd).
On RHEL 6 in rsyslog.conf:
*.* @10.30.46.211
On RHEL 5 in /etc/sysconfig/syslog:
...
0
votes
3answers
60 views
Adding a new facility to syslog
The docs give a fixed list of facilties for syslog, but it's clearly possible to have more (http isn't on the list). Do I just describe it in the conf file and start using it or is is more involved? ...
0
votes
1answer
93 views
Sending multiple loglines (mysql-slow.log, php5-fpm.log.slow) to syslog
I'm trying to aggregate several sources of error messages into one place, to easier put things into context. I'm currently looking at rsyslog, but I can change this - if it's preventing me from doing ...
0
votes
0answers
56 views
Ubuntu power management logfiles? Forensics (maybe?)?
I'm in the unfortunate position where I need to determine what happened to a remote server of ours. I only have SSH access to it and it's a netbook running ubuntu 10.04 32 bit. It dropped offline for ...
2
votes
2answers
66 views
Managing and configuring syslog-ng for very large logs
I have the logs traditionally kept in /var/log/ piped through syslog-ng. The logs can reach to the terabyte size on a daily basis. In order to make them more manageable. I would like break them out ...
-2
votes
1answer
91 views
Forward Windows logs to Linux server [closed]
Possible Duplicate:
Software to send windows notification eventlogs to linux syslog server and encode to utf8
Is it possible to forward logs from a Windows server to a Linux syslog server ?
...
3
votes
4answers
93 views
Log Shutdown Command Usage/Message
I want to monitor whenever any of our machines run the shutdown command so that it can send an email or notification of an imminent reboot/shutdown. I figured that when shutdown was run it probably ...
5
votes
2answers
172 views
Syslog forwarding loses original hostname
I have DMZ hosts forwarding to a DMZ syslog which in turn forwards all the syslog messages to an internal syslog server. It's working fine for the most part but the internal syslog host messages ...
1
vote
1answer
74 views
Redirecting syslog output for certain processes to a particular file
I must admit to being a complete syslog newbie. I haven't touched it until now, but I use its output on a daily basis, like most of us :)
I currently have a problem with the gmetad daemon spamming my ...
1
vote
1answer
59 views
Does STDERR go to syslog in an LSB init script?
I am running a Debian system and have an init script in /etc/init.d/ that starts a daemon using start-stop-daemon:
start-stop-daemon --start --quiet --pidfile /tmp/myproject.pid --exec ...
2
votes
3answers
104 views
Chained Syslog forwarding
Is there a way to chain syslog forwarding? For example, how can a clienthost forward its syslogs to ServerA and ServerA forward everything to CentralSyslogServer?
I'm using rsyslog.
The reason is ...
0
votes
1answer
63 views
Any logs of if/when “at” jobs were executed?
I've setup a couple of "at" jobs to execute at specific times on CentOS 5.
This morning I don't see these commands in the queue ("atq"), as expected, but I also don't see were can I check whether the ...
0
votes
1answer
46 views
shrinking a syslog sql database
I am trying to shrink a SQL database used for our syslog monitoring. the DB is about 43GB right now, and i'm sure hasn't been cleaned up in years. I recently inherited this DB when someone quit, and ...
2
votes
5answers
269 views
rsyslog or a similar distributed logging standard, for Windows?
I have a bunch of Windows Servers that run a bunch of apps, that log into local text files.
I want to aggregate these text files into a centralized log server, where I can search them. Building ...
0
votes
1answer
76 views
Change syslog log file's owner/group?
Is there a way to have syslog create a log file that's not owned by root?
I've got several jboss application servers that I've got logging to a server. Everyone's running CentOS. Right now, all of ...
2
votes
2answers
105 views
Are there some limit on files logged through syslog?
I have a Postfix mail server running on Ubuntu 8.10 and when /var/log/mail.log or any other file reaches exactly 2GB of data syslog stops writing any data to the file.
Is there some kind of limit for ...
0
votes
1answer
55 views
Remote Logging for Syslog
I'm trying to set up syslog to accept remote logging. I already have changed the config file and set up the syslogd with "-r m 0" to accept remote logging. Now i need to change the /etc/services file. ...
4
votes
3answers
816 views
Linux: logwatch(8) is too noisy. How can I control the noise level?
Our Linux systems run logwatch(8) utility by default. On a RedHat/CentOS/SL system, Logwatch is called by the /etc/cron.daily/ cronjob, which then sends a daily email with the results. These emails ...
0
votes
1answer
63 views
Odd Postfix message right before system crash/freeze. What does it mean?
I just had my web server lock up on me, it stopped serving pages and wouldn't accept any SSH connections. I was able to reboot this server through the control panel Linode provides. Below you'll see ...
1
vote
3answers
56 views
Syslogd: translate facility on log messages going to a server
I want to send some log messages out to a remote log server, and change the facility on them to a configured value so the log server can tell more easily that they came from my hardware. That is, all ...
1
vote
1answer
238 views
Using rsyslog to create different log files for different processes
Scenario: I am running a cluster of machines. Each machine runs various python programs with a unique (across the cluster), but dynamically set, ID.
Right now, they are all logging locally. So, I ...
1
vote
0answers
52 views
Rsyslog's RELP format; experience?
1) In your experience, does rsyslog's RELP log transfer format require a significant amount of resources over what plain TCP syslog transfer would use? (cpu, disk i/o, network)
2) IYHO, is TCP ...
0
votes
2answers
50 views
Determine which programs are logging to a specific syslog facility
Is there any way to determine which daemons are logging to a specific syslog facility? (spec. rsyslog)
What I am specifically looking for is who logs to the auth.* severities.
A 2001 audit for ...
3
votes
2answers
196 views
Formal separation marker of syslog events?
I've been looking at RFC5424 to find the formally specified marker that will end a syslog event.
Unfortunately I couldn't find it. So If I wanted to implement some small syslog server that reacts on ...
0
votes
1answer
118 views
Zenoss - Performance issues with captured events
The problem
I'm manually inserting events into Zenoss through the zensendevent command line tool. The events are successfully inserted into Zenoss. The problem is that I can just insert about 8 ...
2
votes
3answers
141 views
Forward UNIX syslog to Windows Event viewer
I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
2
votes
1answer
185 views
How to setup SysLogHandler with Django 1.3
I'm having no luck finding any information on setting up syslog logging with Django 1.3 dictionary configuration. The Django documents don't cover syslog and the python documentation is less than ...
1
vote
1answer
62 views
How can I get around a length limit on EC2 system logs retrieved through the console?
I am running ami-ccf405a5, which is a Ubuntu 10.10 Maverick EBS boot from alestic.com in a micro instance in us-east from the AWS Console. I use the user-data field to load in a script, the beginning ...
0
votes
1answer
71 views
Enabling command logging on a Cisco MDS Switch
We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx ...
0
votes
2answers
47 views
Configuring Syslog to accept remote log submissions
By default syslog daemons don't accept remote log submissions. I need mine to, but don't really have a clue how to configure that. Can anyone help me out, send me a good tutorial, etc. I have been ...
0
votes
1answer
107 views
Qmail - replacing multilog with splogger
I currently manage a qmail installation, set up on Centos using the qmailrocks guide (which seems to have vanished from the Internet now). So - daemontools, multilog, vpopmail, qmail.
I've been asked ...
1
vote
1answer
122 views
Best practices for discarding messages in (r)syslog?
I've setup a central rsyslog server that is writing events to a MySQL database.
Looking through the events one sees all kinds of events that are probably unnecessarily captured.
On RHEL/CentOS ...
0
votes
2answers
195 views
Proftpd doesn't send xferlogs to syslog
I have a Proftpd v1.3.2 server, and I need to send every logs (system logs + auths logs + xferlogs) to a remote syslog server. It works fine for system+auth logs. But even if "TransferLog" was removed ...
1
vote
1answer
122 views
OSX /var/log/system.log — where do i define pruning interval?
I have a script that periodically checks /var/log/system.log and I've noticed across our network that some machines keep logfiles for a month through reboots and other activities, while some purge the ...
