1
vote
3answers
47 views

How to log multiline message with logger command?

I want to log a multiline message into the system logger via the commabnd echo -e "foo\nbar" | logger But it appear as 2 logs. Is it possible to log as a single log?
0
votes
0answers
32 views

Rsyslog with Nginx virtual hosts

I have an Nginx server with several virtual hosts, each of them generating log files. I'm sending all these logs to a remote server but don't know how to create one log file per virtual on this ...
2
votes
2answers
53 views

How to log remotely without syslog

I have a bunch of logs which are not created using syslog. I would like to export them to another host. If possible using syslog or rsyslog. A pipe? how can I do that?
1
vote
1answer
108 views

Ubuntu iptables logs not going to any log file

I am trying to put logs in iptables but I can not find any log in any file. Although when I run dmesg command, I can see the iptables entries. But the same entry doesn't go to any log file. Here is ...
1
vote
1answer
49 views

Logging in iptables

I have created rules in iptables to log and edited the rsyslog.conf file to output any message which contains "iptables" to a different log file. It seems that it is logging to both places, the ...
0
votes
0answers
26 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
0
votes
2answers
93 views

Find syslog priortiy/ severity of a message

Is there a way to find the syslog priority or severity of log entries using a standard unix tool? For example I could grep for the word error in a log. But not all logs will state the word "error" ...
2
votes
0answers
65 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
0
votes
1answer
33 views

syslog, kernel.warning and iptables innerworking

Im tinkering with my iptables logging at the moment. So I got my syslog to use another log file with tips from the web. basically you end up changing some chains and rules plus aan extra line in the ...
1
vote
1answer
251 views

Strange syslog for my server

Today i go on my log with nano /var/log/syslog I have this, and i think it's not very good : Aug 27 06:25:02 ks3309528 rsyslogd: [origin software="rsyslogd" swVersion="4.6.4" x-pid="2235" ...
1
vote
1answer
276 views

Error setting capabilities, capability management disabled;

root@monitor:/opt/observium# service syslog-ng restart Stopping system logging: syslog-ng. Starting system logging: syslog-ngsyslog-ng: Error setting capabilities, capability management disabled; ...
3
votes
3answers
351 views

Server crashes Sundays at 6 a.m. - out of memory

I have a weird problem: Every Sunday at 6 am my LAMP server crashes. Looking at the logs I see about 500 apache2 processes at the time (this is a test server without any load - especially not at 6 am) ...
0
votes
2answers
195 views

log server setup and testing, with log manager opensource

I've been trying to get a new, centralized, log-server up and running for some testing and have run into some problems. First part is that I've installed Kibana but can't get anything indexed, tried ...
-1
votes
2answers
192 views

Server reboots, no idea why [closed]

I'm by no means experienced with system administration. I have a Linode vm mostly for the fun of it, hosting a webserver (nginx -> nodejs) and a Minecraft server I share with some friends. I ...
2
votes
1answer
375 views

Sending output from php script called from bash script to syslog

Sending output from php script called from bash script to syslog Im trying to create a bash script (to be called by a cron job) which calls a php file (which I have not made). Calling the php file is ...
2
votes
2answers
355 views

rsyslog - regex trouble

I'm trying to setup the logentries service. If a log entry has a token in it then I would like to send it to api.logentries.com:10000. The token is a guid in the format ...
2
votes
1answer
42 views

How to configure syslogd name/identifier?

I'm forwarding all syslog events to papertrailapp.com, and they are identified as sent by localhost. It's not convenient, since I have a few servers and all of them are localhost-s. How can I ...
0
votes
1answer
295 views

Kernel Logging disabled?

uname -a Linux host 2.6.32-279.9.1.el6.i686 #1 SMP Tue Sep 25 20:26:47 UTC 2012 i686 i686 i386 GNU/Linux And start ups: ls /etc/init.d/ abrt-ccpp certmonger dovecot irqbalance ...
2
votes
2answers
199 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
2
votes
2answers
1k views

Forward Windows Events Logs to Rsyslog

I would like to forward Windows Events Logs from all my desktop clients to a Linux box with rsyslog on. Rsyslog provide a Windows agent to do just that but its 40 euros per license and when you have ...
4
votes
3answers
325 views

Ubuntu 10.04 syslog not logging to correct file

In a similar vein to Why is Syslog Not Writing Logs To The Designated Files? I'm having a few problems with syslog on Ubuntu 10.0.4 I have an app which I have set to facility local7. I added the ...
4
votes
1answer
5k views

rsyslog not logging messages

i'm attempting to set up my ec2 instance (running amazon linux which as i understand is built on RHEL 5) to forward log messages to loggentries.com but nothing is getting forwarded. as a sanity check ...
7
votes
3answers
3k views

Deciphering continuing mpt2sas syslog messages

Summary I have been getting these cryptic messages in syslog since I installed some new hardware and I can't figure out what the problem is, if it's serious, or what to do about it. They're from the ...
1
vote
1answer
59 views

Syslog message '^@' indicates server crash

The php-cgi's died on a vps I look after and the only syslog entry is this followed by me restarting the VM: ...
1
vote
1answer
639 views

HAProxy running in chroot jail is only logging started messages

I've configured my HAProxy server to run in a chroot jail logging messages to syslog socket. My problem is that the only messsages currently being logged are for when haproxy is starting up. May 26 ...
0
votes
1answer
848 views

syslog written on console

I have odd problem with syslog local7, my syslog configure the syslog to be written to local7.info /var/log/syslog_info it's working just fine for years but recent days one device syslog message ...
3
votes
1answer
1k views

Best Practices for rotating syslog logs on RHEL with different schedules?

OS: Running RHEL 5.6. Situation: I need to rotate /var/log/messagees on a different schedule than the rest of the syslog logs. By default syslog logs are rotated weekly based on the ...
2
votes
2answers
5k views

rsyslog: How do I direct messages from all remote machines to one file?

We have a syslog server and we have all our servers logging to it. We want a sort of "catch-all" drippan rule for all remote messages that we have not configured a rule for. Anyone know how to ...
3
votes
3answers
3k views

rsyslogd: Any way to get around the number of local facilities?

We have about 9-10 appliances we want to direct the logging to our rsyslog server for. However, there's only 8 local facilities (0-7). How can we get around this limitation?
2
votes
3answers
2k views

How to stop syslog from listening to 514 on CentOS 5.8

I have a CentOS 5.8 machine (with regular syslog) that for some reason is listening to port 514, even though it is not started with "-r" (to receive remote syslog messages). # netstat -tulpn | grep ...
1
vote
1answer
1k views

Why does iptables output to /dev/console?

For some reason I see the output from this iptables rule $IPT -A FORWARD --jump LOG $IPT -A FORWARD --jump ACCEPT on the console eventhough I have disabled kern in /etc/syslog.conf #kern.* ...
0
votes
1answer
2k views

Linux [Hardware Error] message from kernel

Since yesterday I get the following message every few minutes: Message from syslogd@hostname at Nov 23 12:31:17 ... kernel:[8024326.816370] [Hardware Error]: MC4_STATUS: Corrected error, other ...
1
vote
2answers
601 views

How to set up mysql storage for certain rsyslog input matches?

I'm draining various logs from Heroku to an rsyslog linux (ubuntu) server and am starting to have a little more to bite off than I can chew in terms of working with my log histories. I am needing to ...
0
votes
0answers
170 views

Ubuntu power management logfiles? Forensics (maybe?)?

I'm in the unfortunate position where I need to determine what happened to a remote server of ours. I only have SSH access to it and it's a netbook running ubuntu 10.04 32 bit. It dropped offline for ...
2
votes
2answers
181 views

Managing and configuring syslog-ng for very large logs

I have the logs traditionally kept in /var/log/ piped through syslog-ng. The logs can reach to the terabyte size on a daily basis. In order to make them more manageable. I would like break them out ...
4
votes
3answers
494 views

Log Shutdown Command Usage/Message

I want to monitor whenever any of our machines run the shutdown command so that it can send an email or notification of an imminent reboot/shutdown. I figured that when shutdown was run it probably ...
3
votes
1answer
1k views

Any logs of if/when “at” jobs were executed?

I've setup a couple of "at" jobs to execute at specific times on CentOS 5. This morning I don't see these commands in the queue ("atq"), as expected, but I also don't see were can I check whether the ...
2
votes
2answers
328 views

Are there some limit on files logged through syslog?

I have a Postfix mail server running on Ubuntu 8.10 and when /var/log/mail.log or any other file reaches exactly 2GB of data syslog stops writing any data to the file. Is there some kind of limit for ...
0
votes
1answer
103 views

Remote Logging for Syslog

I'm trying to set up syslog to accept remote logging. I already have changed the config file and set up the syslogd with "-r m 0" to accept remote logging. Now i need to change the /etc/services file. ...
11
votes
4answers
9k views

Linux: logwatch(8) is too noisy. How can I control the noise level?

Our Linux systems run logwatch(8) utility by default. On a RedHat/CentOS/SL system, Logwatch is called by the /etc/cron.daily/ cronjob, which then sends a daily email with the results. These emails ...
1
vote
4answers
812 views

remote monitoring of linux logs

I would like to monitor syslog logs on few dozens of linux servers. In ideal world I'd prefer pull method where central monitoring server collects once per day logs from all machines via ssh, applies ...
0
votes
2answers
286 views

server log problem

I have a linux server running Debain. My logs are not updated in my var/log/messages. Deamon syslogd is running. Below are the logs are updated in my var/log/messages. Apr xx 20:40:24 xxxxx -- MARK ...
2
votes
1answer
328 views

how to make linux cdrom mounting/unmounting show up in syslog

I'd like a record of every time the cdrom drive is mounted. Ideally this would be in syslog. The system is CentOS 5.5 linux.
5
votes
6answers
5k views

Recommended software for a Centralized logging server? [closed]

I'd like to centralize logging for all my servers. Server operating systems include Windows 2003, 2008, Ubuntu and Redhat. I think Splunk is too expensive, has anyone set up something like this ...
3
votes
3answers
4k views

Software to send windows notification eventlogs to linux syslog server and encode to utf8

I am trying to setup a windows 2008 server so it's able to send the eventlog messages to an syslog-ng server running linux. I'd prefer something native but I guess it won't be possible. UPDATE The ...
1
vote
2answers
932 views

How to redirect logs from Cisco firewall to a specific file?

We need to redirect the logs from our Cisco firewall(SA520-K9) to syslogd server(it's a CentOS server). The settings are done on the firewall. But the messages from firewall are going to ...
1
vote
1answer
623 views

Logparser for Linux (syslog) logs?

I'm looking for something like logparser on Windows. Requirements: simple tool, not engine like octopusy or sth, able to select on text in message part, start search in log from checkpoint on ...
4
votes
5answers
2k views

Script to delete files older than 30days

Shell script should not delete any files under* root dir*. My* path will be like /export/home/ftp/ ... I did some research and figured out the way for finding and deleting the files older than 30 ...
9
votes
3answers
15k views

Sending audit logs to SYSLOG server

I'm running several RHEL based systems which utilize the audit functionality within the 2.6 kernel to track user activity and I need to have these logs sent to centralized SYSLOG servers for ...
0
votes
1answer
121 views

system logging in linux

Which one is better? syslog-ng or rsyslog or dsyslog? Please help me