The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
231 views

syslog-ng unable to capture syslog from ASA

My syslog-ng.conf: @version: 3.0 # Default configuration file for syslog-ng. # # For a description of syslog-ng configuration file directives, please read # the syslog-ng Administrator's guide at: # ...
0
votes
1answer
76 views

Syslog-ng prepends <[0-9]+> to my messages

I'm writing some parsing logic for syslog-ng messages and am noticing that for many of the commands syslog-ng prepends a <[0-9]+> string to most of my messages. Here is an example from me ...
0
votes
2answers
55 views

Almost-live copy of log from one server to another

We have an authentication daemon on a Debian 6.0 box generating logs at a rate of about 4-6 lines\entries every second. For legal reasons this log file has to be written to disk locally first, before ...
0
votes
1answer
462 views

Syslog-ng duplicate log lines

I have a very annoying situation concerning apache access/error logs on a remote log server. Webserver: Stock apache logging with: ErrorLog "|/usr/bin/logger -p local7.err -t www.sitename.com" ...
0
votes
1answer
741 views

syslog-ng not flushing the pipe to external program (SOLVED)

I have written a python script that takes log entries from syslog-ng and writes them to MongoDB (I couldn't do it with afmongodb driver because I need to do some special processing). This is how it ...
0
votes
1answer
1k views

Remote logging for multiple Apache virtual hosts using syslog-ng

I'm running a couple Apache web servers that each have 4-8 separate virtual hosts on each of them. I'm trying to setup a dedicated log server that stores each virtual host access and errors logs in a ...
0
votes
1answer
28 views

nginx and apache2 conflict - 403 Forbidden

I am running nginx on my server, and by mistake I stared apache2 on the server. After doing that I have a 403 Forbidden error on my home page. I killed apache2 process, but I still facing the same ...
0
votes
1answer
39 views

Forwarding from rsyslog to syslog-ng over TCP not working (although packets are reaching server)

We use syslog-ng on our central syslog server (syslog-ng-2.1.4-9.el5 on CentOS 5.9). We were happily sending logs using syslogd and rsyslog from a mixture of Linux and Solaris hosts over UDP until ...
0
votes
1answer
51 views

Log Review Process

Currently I have a fairly large syslog-ng cluster setup that is my main log aggregation point. I have the need to be able to acknowledge certain logs and mark them as review for auditing purposes. ...
0
votes
1answer
493 views

Invalid Parameter on node puppet

I am getting an error of err: Could not retrieve catalog from remote server: Error 400 on SERVER: Invalid parameter port at /etc/puppet/manifests/nodes/node.pp:652 on node test-puppet My puppet ...
0
votes
1answer
348 views

installing syslog-ng

i have a monitoring server with nagios,cacti and nedi on Debian Squeeze. when i try to install syslog-ng via apt-get i get the errors see below. i think that there is a problem with the sym-links in ...
0
votes
1answer
882 views

/var/log/messages spammed with POLLERR messages

I've started seeing /var/log/messages growing in size indefinitely with these lines: Aug 1 12:47:27 linux-jblp syslog-ng[1947]: POLLERR occurred while idle; fd='16' Process 1947 is this: root ...
0
votes
1answer
207 views

syslog-ng show errors every time start

everyone! After i install syslog-ng in my freebsd9.1 and use it for my log systerm. Every time i start it there display an error: Error opening plugin module; module='afuser', ...
0
votes
1answer
144 views

Syslog-ng fulls disk with recursive logs

i have some problem with syslog-ng, i've configured a server wich recive logs from different remotes devices. My syslog-ng demon is configured for swap logs in a file based pipe, a different process ...
0
votes
1answer
212 views

Set alternate log file for iptables with syslog-ng

Does anyone know how to set an alternate logging file for iptables with syslog-ng on Ubuntu Server?
0
votes
1answer
250 views

Filter out a facility in syslog-ng

Following are the some contents of my /etc/syslog-ng/syslog-ng.confrelated to logging in to the file debug.log source s_sys { file ("/proc/kmsg" log_prefix("kernel: ")); unix-stream ...
0
votes
1answer
132 views

Open Source syslog-ng RPM for SLES

Can anyone point me to an Open source syslog-ng RPM package for SLES 11 (x86, 64-bit)?
0
votes
1answer
1k views

Syslog-ng log format

I am using a centralised syslog-ng loghost to collect logs and syslog-ng on some of the clients. On one particular client, running syslog-ng on Devil Linux, syslog entries are sent ( confirmed with ...
0
votes
1answer
729 views

how do you convert this syslog-ng cfg to rsyslog?

How do I convert the following to rsyslog syntax? filter local2 { facility(local2); }; filter not_local2 { not facility(local2); }; destination server2 { tcp("server2" port(1111)); }; ...
0
votes
1answer
17 views

Filter python messages with regex in syslog-ng

I have syslog-ng (v3.4.7) configured to catch almost all messages in their respective logs, but recently I've included some python scripts in crontab and their output just goes to messages or debug ...
0
votes
0answers
16 views

EventLog/Syslog to Common Event Format

I am looking for a way to get EventLog/Syslog to Common Event Format (CEF)? And also looking for a way to forward the CEF events through a Syslog-ng type of forwarder within the environment. I have ...
0
votes
0answers
11 views

How to change the default template in syslog-ng

Is it possible to change the default template for all destinations in syslog-ng? I know that I can declare a template: template t_tmpl { template("$ISODATE $MSGHDR$MSG\n"); }; and then reference ...
0
votes
1answer
78 views

Syslog-ng how to get domain names instead of IP address

How can syslog-ng get the domain names instead of IP address that I received? I'm able to get those information but in IP address, I would like to get the DST/HOST to domain names instead of getting ...
0
votes
0answers
61 views

Multiple syslog-ng destination loghosts

I am currently forwarding logs to one remote destination loghost. filter f_windows { program("Security-Audit*"); }; log { source(r_sys); filter(f_windows); destination(d_windows); }; log { ...
0
votes
1answer
100 views

Syslog-ng Events Per Second Graphing

I have a distributed syslog-ng setup and am trying to determine how many events per second (EPS) we are receiving on each one. I know that syslog-ng does some general performance statistic to ...
0
votes
1answer
187 views

Error setting capabilities, capability management disabled;

root@monitor:/opt/observium# service syslog-ng restart Stopping system logging: syslog-ng. Starting system logging: syslog-ngsyslog-ng: Error setting capabilities, capability management disabled; ...
0
votes
2answers
256 views

Syslog-ng Load Balancing

I am working on setting up a syslog-ng server to accept logs from various sources. The general setup is going to be: Device1 Device2 Syslog1 Device3 --> Load ...
0
votes
0answers
77 views

Syslog-ng Hostnames

I am currently filtering logs to a CentOS 6.3 syslog-ng server. Below is my basic syslog-ng config. options { use_fqdn(yes); use_dns(yes); dns_cache_hosts(/etc/hosts); ...
0
votes
0answers
310 views

Reverse tunnelling with “stunnel” in linux

Scenario: Central Log-Server(say logserv)- only private IP interfaces Multiple client servers (logclient)- has public IPs. Requirement: Need to tcp logs of syslog application from logclient to ...
0
votes
2answers
360 views

log forwarding performance and OS bottleneck

How many logs/second can usually be handled by syslog servers? By syslog servers, I am referring to rsyslog, syslog-ng, splunk etc. The intent of the question is to find out at what logs/second rate ...
0
votes
1answer
88 views

Syslog-ng not sending to fifo when template directive is used

Ok, so i need syslog to log to a fifo with a specific template for the log in mind. So I set my destination as follows... destination d_pipe { pipe("/var/run/some_pipe.fifo"); }; This works fine ...
0
votes
1answer
229 views

Time jump in syslog-ng log files

I am running my proprietary application (the name of which I would prefer not to disclose) in Linux 2.6 kernel, running on PowerPC (P2020) in an embedded environment. I am using syslog-ng to collect ...