syslog is a standard for logging messages about the operation of a system.

learn more… | top users | synonyms

0
votes
1answer
27 views

syslog clipping for particular applications

I have a few particular applications that are causing a LOT of logs in my syslog server. I would like to keep all of their logging in /var/log/messages or somewhere on the server, but I am trying to ...
1
vote
1answer
109 views

How to format log data before forwarding them as JSON to elasticsearch?

I log all events on a system to a JSON file via syslog-ng: destination d_json { file("/var/log/all_syslog_in_json.log" perm(0666) template("{\"@timestamp\": \"$ISODATE\", \"facility\": \"$FACILITY\", ...
1
vote
0answers
58 views

audisp-remote signal USR1 works as root, not with sudo

So I have a weird problem that I'm running out of ideas to troubleshoot. My RedHat machines are using audisp-remote to send syslog messages to a central server. audisp-remote will respond to the ...
0
votes
0answers
256 views

Getting journald logs to a plain text file

I want to log journald logs to a file so I can later on fetch it and send it to Logstash. I thought about running syslog-ng and make it a client of journald, so I'd get syslog files. I'm using Docker ...
0
votes
1answer
195 views

Postfix logs nowhere to be found in Ubuntu 14.04.3 LTS

I have not changed any configuration in any of the tools, specially not in: syslog rsyslog postfix systemd (If any apply) In my /var/log there is no /var/log/mail.log, /var/log/postfix.log or ...
0
votes
2answers
34 views

How can I forward old access logs to a new syslog destination (redhat)?

I just setup a syslog forwarder but how do I forward older historical logs (like access_log)? Is it possible to replay log files so they'll send historical entries?
1
vote
0answers
177 views

How can I separate logs with rsyslog from a remote location for devices using the same IP?

I have a number of Yealink SIP phones at different locations that I am trying to centralize log collection for. I have set up a CentOS server at my main location with rsyslog. I am forwarding all ...
1
vote
0answers
42 views

Easily create a logcheck rule from a log message?

I’d like to more easily create logcheck rules from log messages. Ideally I’d like to have something set up such that I just take a logcheck message I receive, and pipe it to some tool, and it spits ...
1
vote
1answer
208 views

Squid cannot send UDP messages to syslog server

I'm migrating my old Squid (2.7 in Debian 7.8 to 3.1 in CentOS 6.6) I need to send logs to a syslog server located into another machine I added the following config to the new server logformat ...
0
votes
0answers
240 views

Cisco ASA 302014 syslog explaination

Can someone please explain the format of cisco asa syslog 302014 and more specifically the difference between idfw_user and AAA user? The message format is shown below: Error Message %ASA-6-302014: ...
0
votes
0answers
50 views

Rsyslog 8.12 doesn't like my TLS config

Rsyslog 8.11 -> 8.12 update stopped logging, but only when using TLS. I send to one destination without TLS (destination A) and to another with TLS (destination B). Destination A kept on working ...
0
votes
1answer
84 views

Use syslog service to capture data logged to a file not managed by syslog?

Some services (nginx, buildbot, et cetera) only support logging to a file. Is there a way to reliably capture these log messages using syslog and friends, so that the log message can be reflected in ...
-1
votes
0answers
16 views

Stop crontab from filling syslog Ubuntu 15.04 [duplicate]

How can I prevent (certain cronjobs) from filling my syslog in Ubuntu 15.04? I have some jobs that run 4 times a minute and quickly fill up my syslog files. I've tried adding: cron.* ...
1
vote
2answers
248 views

Stop crontab from filling syslog Ubuntu 15.04

How can I prevent (certain cronjobs) from filling my syslog in Ubuntu 15.04? I have some jobs that run 4 times a minute and quickly fill up my syslog files. I've tried adding: cron.* ...
0
votes
1answer
57 views

log every command on linux server

I have a snoopy logger on my linux server. It works perfect, but when I use midnight commander I dont see commands that I made there. In logs only 'mc' and no functional keys. So is there any way to ...
0
votes
2answers
150 views

How can I redirect logfile output to a network socket?

I am using a commercial Java app which writes it's logfiles using log4j. I'd like to get those logfile entries into Syslog where we have specific filters setup to trigger on system events. Log4j ...
0
votes
1answer
214 views

Use nxlog to parse a sophos text file and send to a syslog server

I have a windows server 2012 r2 machine with sophos. Each day there is a scan from sophos and the information is appended to the log "sav.txt". Output example (Some info changed): 20150710 ...
0
votes
1answer
194 views

Syslog logging to syslog.1 not syslog

My syslog file is getting a bit unmanageable. I believed I had configured this previously to rotate daily but obviously something has gone amiss. At the moment, my /var/log looks like this: ...
0
votes
1answer
123 views

Send user level messages to syslog

I currently have syslog.conf like so to send INFO logs to /var/log/messages *.info;mail.none;authpriv.none; /var/log/messages; I have an application that uses python libraries LOG_USER facility to ...
0
votes
1answer
132 views

Logging when cisco switch restarts, shuts down, or starts up

Is it possible to log events like restart,shutdown and start in cisco catalyst 3750. Also need to log when a new user is created. I'm forwarding the logs from the cisco switch to the syslog server and ...
0
votes
2answers
351 views

Forwarding Application and Services Logs using nxlog

Using nxlog 'im_mseventlog' module I'm able to forward all Windows Logs (Application, Security, System... ) logs to the remote syslog server. But I'm not able to forward eventlogs present under ...
0
votes
0answers
227 views

How to configure NetScaler to resend syslog traffic to two backend servers?

I am using NetScaler as load balancing syslog server which means that it does send the received syslog traffic to another syslog server. I am looking for a way to send this traffic to two different ...
-1
votes
1answer
198 views

How to forward a specific log file in a syslog config?

I just want to ask how can I log for example /var/log/test/test.log to a remote syslog-ng? Im using syslog not rsyslog. I can do it in rsyslog but not in syslog.
0
votes
1answer
71 views

Redirecting syslog facility to other facility

I have a syslog server, which separates logging informations according to hostnames. It can separate messages if it's in the 'local1' facility. I have a mail server, which sends messages to the ...
2
votes
2answers
66 views

How can I send ALL cron output to syslog rather than email

I am running cron with -m off to stop it sending email and then the -s option is supposed to send all output to syslog. Cron cmdline is crond -s -m off My cron job for testing this is * * * * ...
2
votes
1answer
162 views

Where does “vmunix” label in syslog come from on Debian/Linux systems?

After upgrading one Debian server from Squeeze I noticed that the kernel log messages (those using kern.* in /etc/syslogd.conf) now appear with "vmunix" prefix while earlier they had "kernel" prefix. ...
0
votes
0answers
34 views

Network syslog with port number

I am collecting syslog from VoIP phones over the network and it is usual having several phones behind same NAT device. I need to collect syslog files to different files or be able to differ lines ...
0
votes
1answer
158 views

Client rsyslog and server in the same machine Ubuntu 14.04

I am wondering if I can make Rsyslog to receive logs from my own IP, I just want to test that the configurations work, right now I dont have access to another PC or Server, just my PC, in few words I ...
1
vote
1answer
104 views

What rsync options to use for the below mentioned scenario?

Greetings !!! This is regarding a specific requirement about rsync that we are trying to achieve. We have tried to achieve this by using various rsync options. However, we are encountering different ...
10
votes
3answers
15k views

What is the difference between syslog, rsyslog and syslog-ng?

I am a bit confused in syslog, rsyslog and syslog-ng. From where can I get the source code for syslog()? Is there any difference between rsyslog and rsyslogd?
1
vote
1answer
241 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
1
vote
0answers
83 views

Unable to get structured data in logged messages even after adding mmpstrucdata and mmrfc5424addhmac?(RFC5424)

I am trying to log messages with structured data . But it is showing null value for structured data. I am working with rsyslog 8.9.0.Can someone tell me either i need to load some module or modify ...
2
votes
1answer
224 views

rsyslog not writing log file after restart

First off, thanks for spending the time to have a look at this issue, its much appreciated. I've had the attached rsyslog.conf configuration running for sometime now until today when I had to restart ...
0
votes
1answer
59 views

Add a field to the Linux Login

I want to ask the user the reason for login on Linux Production Servers. Login prompt will ask as common for user, password and the "Reason for Login" question will be asked afterward and registered ...
-1
votes
2answers
148 views

Source of syslog bind query denied message [closed]

What is the cause, and how can I stop this request on example.com from my ip (xxx.xxx.xxx.xxx) being continually repeated in /var/log/syslog? Apr 14 20:37:10 example.com named[1663]: client ...
0
votes
1answer
222 views

Understanding syslog conf - targeting specific types / tags of logs

I'm combining log files from several docker containers on my host and sending them a remote logging service. I'm just redirecting the output to logger and tagging it: docker-compose logs 2>&1 ...
0
votes
1answer
261 views

Sending syslog from jail to host fails

I'm trying to send logs from a jail to the host system on FreeBSD 10. I think everything is setup correctly but I can't get it working. Sending logs directly from Nginx 1.7 works but not sending ...
2
votes
1answer
170 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
1
vote
2answers
364 views

Ubuntu 14.04.2 LTS - RSysLog 8.8.0 - omusrmsg not working

I have been trying for two days to get RSysLog to alert all [or specified] users of certain Facilities/Priorities hitting RSysLog. rsyslog.d/50-default.conf: ... *.emerg ...
3
votes
0answers
119 views

Getting journald to send email on certain events

I found these solutions for syslogd that send emails on certain events like local0.crit or local1.err How can I make syslogd email certain log messages to me? ...
0
votes
1answer
657 views

“NTP socket is in use” messages from ntpdate in syslog

In cron.log I can see that ntpdate is being triggered from a cron job which is running daily at 23:15 Mar 10 23:15:01 seitan /USR/SBIN/CRON[22407]: (root) CMD (/etc/network/if-up.d/ntpdate) But ...
0
votes
1answer
648 views

ESX performance stats in Logstash

Dose anyone know if it is possible to collect ESX Performance Stats in LogStash/ELK stack? looking to see if I can collect ESXTOP data for use in the ELK stack.
1
vote
2answers
397 views

Unable to get Rsyslog structured data in syslog message

I am new to syslog module. I am trying to log messages with structured data by using this parameter in template. But it is showing null value for structured data. I am working with rsyslogd 5.8.11 ...
3
votes
1answer
175 views

How to configure Monit to alert me when anything appears in syslog

I want Monit to alert me if ANYTHING shows up in syslog - as anything in there would be abnormal. I've tried the following and I'm not receiving any alert emails when I manually add something to ...
0
votes
1answer
83 views

rsyslogd and FQDN - cannot get FQDN from clients

I setup a syslogserver with rsyslogd and 3 clients. Logs from 3 test clients are sent to the server, so far so good. My Problem is: I can't get the FQDN hostnames to work. According to rsyslog.com ...
0
votes
1answer
482 views

How to replace control characters in rsyslog

we have several (usually java) application and they log to centralized rsyslog server (version 7.6). We had problems with java exceptions as rsyslog was handling each line of stack trace as separate ...
0
votes
1answer
724 views

How do I filter on tags in syslog-ng when they don't seem to be available by the time it processes it?

I am having a hard time debugging an issue and I think it may be two-fold - problems in two separate programs. The main issue is that I'm logging nginx to syslog on Ubuntu 14.04 like so: access_log ...
0
votes
0answers
636 views

Send apache ssl access log to syslog

I'm having an issue piping apache ssl access logs to my syslog server. I've added the following line to my apache config: CustomLog "|/usr/bin/nc -u <syslogserver> 514" "<134>%{%b %d ...
0
votes
1answer
4k views

nginx logs to syslog - connection refused

I'm trying to setup nginx 1.7.3 to send logs to syslog, but when I this configuration: server { access_log syslog:server=localhost; } this shows up in nginx's error log: 2015/01/15 21:42:47 ...
1
vote
0answers
220 views

Syslog randomly logs bad time [duplicate]

Try as I might, I can't figure out why this server randomly timestamps syslog entries with bad time. Here's a 5-minute stretch of syslog from a few minutes ago. You'll notice there are two places ...