syslog is a standard for logging messages about the operation of a system.

learn more… | top users | synonyms

0
votes
2answers
262 views

log server setup and testing, with log manager opensource

I've been trying to get a new, centralized, log-server up and running for some testing and have run into some problems. First part is that I've installed Kibana but can't get anything indexed, tried ...
1
vote
3answers
944 views

SSD read errors; should I be worried?

An SSD just over a month old is producing read errors in my syslog whenever rsync backs it up: [276877.360221] ata1.00: exception Emask 0x0 SAct 0x1 SErr 0x0 action 0x0 [276877.360226] ata1.00: ...
0
votes
1answer
225 views

Can Rsyslog process messages before saving them?

The messages that I'm sending to syslog have some tags like so: "[date] [text here] tags:tag1,tag2,tag3 [more text here]" I already have a rule that only saves lines that contain the text "tags:" ...
3
votes
3answers
9k views

CentOS 6: strange page allocation failure messages [duplicate]

I set up a new Server with CentOS 6.4 final as successor for an old mysql server and I'm facing some problems with it. From time to time mysql connections are being disconnected. Furthermore the ...
0
votes
0answers
64 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
0
votes
1answer
264 views

Can I collect Syslog events in the Windows Event Collector? [duplicate]

I have a couple of *nix based systems that I'd like to start collecting logging information for. Is there a way to forward Syslog events to a Widnows server running the Windows Event Collector ...
1
vote
1answer
413 views

ubuntu server becomes unresponsive via web, ftp, ssh and more

I have a ubuntu server hosted and a couple of times it becomes unresponsive to everything, until a hard reboot is done.. i have pulled the logs but i need a little bit of help working out what they ...
0
votes
2answers
905 views

Setting up SysLog on Windows

I'm trying without any luck to use NTSysLog in order to grab my network computers Security Logs and send them into a Log Service (Loggly in this case). I can install and run NTSysLog from a Windows 7 ...
1
vote
1answer
737 views

Netflow to syslog converter

Is there any way to have netflow v9 converted to syslog? Which would be the best way to have the following idea working? Procedure: 1) The router sends UDP with the following structure: ...
0
votes
2answers
351 views

Is it possible to modify the date/time format for sendmail logs?

CentOS 5.x | SendMail I'm cross-referencing logs with another application/server and would like to change the date format on the SendMail maillog. Presently it's MMM DD HH:MM:SS Is there any way ...
3
votes
3answers
558 views

Find out how long a user was logged into a Linux server

In my Debian Squeeze server, all user logins and logouts are recorded in the file /var/log/auth.log Jan 28 07:11:06 xen8 sshd[29826]: pam_unix(sshd:session): session opened for user root by (uid=0) ...
0
votes
2answers
518 views

Server reboots, no idea why [closed]

I'm by no means experienced with system administration. I have a Linode vm mostly for the fun of it, hosting a webserver (nginx -> nodejs) and a Minecraft server I share with some friends. I ...
1
vote
0answers
128 views

Writing templates for rsyslog

When I'm trying to send log from rsyslog to syslog-ng, the hostnames are getting shortened. Instead of inbound.server.com, I only recieve inbound at the syslog-ng side even though I have FQDN option ...
1
vote
2answers
3k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
2
votes
1answer
568 views

Sending output from php script called from bash script to syslog

Sending output from php script called from bash script to syslog Im trying to create a bash script (to be called by a cron job) which calls a php file (which I have not made). Calling the php file is ...
3
votes
1answer
337 views

Rsyslog messages are truncated, not sent to the correct file

On Ubuntu 10.04 LTS, I'm using the stock rsyslog configuration and added a custom file in /etc/rsyslog.d with the following contents: # cat /etc/rsyslog.d/62-pc local3.debug /var/log/pc/debug.log ...
2
votes
2answers
523 views

rsyslog - regex trouble

I'm trying to setup the logentries service. If a log entry has a token in it then I would like to send it to api.logentries.com:10000. The token is a guid in the format ...
1
vote
1answer
92 views

In logrotate, where does postrotate log errors?

If there are errors in the postrotate script block, where are they logged in Ubuntu?
3
votes
2answers
2k views

Use a Mac (10.8) as a remote log server

I'm trying to use my Mac Mini server as a remote log server for our router. I set the router to forward the logs to the server but I'm not seeing the logs anywhere in the console app. Am I missing ...
1
vote
1answer
148 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
0answers
257 views

Snort/Barnyard2-1.10 LOG_SYSLOG_FULL Output Logging

With log_syslog_full opertion mode set to complete you get the below output. Can some explain to me what the bold parts are? I have been searching and cannot find any documention explaining the new ...
1
vote
1answer
96 views

NetBSD syslog timestamp format

Syslog uses a timestamps like the following: Sep 19 13:36:56 Is there a way to adjust the format (to add the year for example) without touching the source code? I am some what shocked to find that ...
4
votes
4answers
1k views

CentOS centralised logging, syslogd, rsyslog, syslog-ng, logstash sender?

I'm trying to figure out the best way to setup a central place to store and interrogate server logs. syslog, Apache, MySQL etc. I've found a few different options but I'm not sure what would be best. ...
0
votes
1answer
401 views

Route from Cisco ASA over site to site VPN

I want to be able to push f/w logging traffic to a server at a remote site. This server is accepting syslog traffic on port 514. In the ASA I've configured it to use this server as a syslog server. ...
-1
votes
2answers
1k views

MySQL server stops randomly. Is it possible that system kills it during high loads or low available memory? [duplicate]

Possible Duplicate: How to diagnose causes of oom-killer killing processes I have an Ubuntu webserver (Apache + MySQL + PHP) on a very small machine on Amazon Web Services (EC2 micro ...
0
votes
1answer
925 views

Cisco Nexus syslog messages format?

I'm trying to normalize Syslog messages generated by a Cisco Nexus box. Problem: Messages have the following format: <189>: yyyy mm dd hh:mm:ss UTC: text This is not a standard Syslog message, no ...
0
votes
1answer
167 views

syslog log of TCP packet

Occasionally, I noticed a lot of following messsages in syslog Nov {datetime} hostname kernel: [8226528.586232] AIF:PRIV TCP packet: IN=eth0 OUT= MAC={mac} SRC={sourceip} DST={destinationip} LEN=60 ...
3
votes
1answer
953 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
1
vote
2answers
5k views

Cisco login on-failure using syslog doesn't show username on failure?

interesting issue I am running into. I am trying to get syslog rmeote logging working with a Cisco switch. i have it working and logging for both on-success and on-failure. However when it is a failed ...
1
vote
2answers
672 views

Collecting logs from multiple servers in a fault-tolerant way [closed]

the main requirement I have is to be able to view and do simple searches on logs combined from multiple machines. However, I would like the solution to have minimal impact on the rest of the (core) ...
2
votes
1answer
51 views

How to configure syslogd name/identifier?

I'm forwarding all syslog events to papertrailapp.com, and they are identified as sent by localhost. It's not convenient, since I have a few servers and all of them are localhost-s. How can I ...
3
votes
1answer
533 views

Reduce munin logging level

Munin is quite verbose, and logs a bunch of things into munin-graph.log, munin-html.log, munin-limits.log and munin-update.log at each run of munin-cron. I already reduced munin-node logging level by ...
2
votes
4answers
6k views

imuxsock messages in syslog and system becomes unresponsive

I am getting such messages in syslog. rsyslogd-2177: imuxsock lost 21869 messages from pid 3418 due to rate-limiting rsyslogd-2177: imuxsock begins to drop messages from pid 3427 due to rate-limiting ...
1
vote
0answers
123 views

XCP Project Kronos syslog error: “irq … : nobody cared” on Dom0 host

One of our production clusters driven by XCP suddenly went uresponsive. After restart and some investigation we found such logs in dom0 machine syslog: Oct 26 20:32:03 hetzner-2-mrx kernel: ...
-1
votes
1answer
468 views

Monitor syslog (RFC 5426) on Windows Server 2008

I have setup in a Windows Server 2008 a syslog server using NXLog http://nxlog-ce.sourceforge.net/. I've configured some routers in the network to send syslog messages (RFC 5426) to the server (UDP ...
0
votes
1answer
497 views

Kernel Logging disabled?

uname -a Linux host 2.6.32-279.9.1.el6.i686 #1 SMP Tue Sep 25 20:26:47 UTC 2012 i686 i686 i386 GNU/Linux And start ups: ls /etc/init.d/ abrt-ccpp certmonger dovecot irqbalance ...
5
votes
2answers
2k views

Avoiding log noise from cron jobs - with syslog-ng rather than syslog

On my small Debian squeeze web server, I have syslog-ng installed (not syslogd, like in this question). Generally, my logs are nice and quiet, with -- MARK -- lines. My /var/log/syslog, however, ...
1
vote
1answer
753 views

CentOS - rsyslog and PHP - Log to remote, centralized server

I'm working on a project with a small number of servers which host a PHP application. Right now each server is currently logging php errors, locally, to /var/log/php/oops.log, but I would like ...
3
votes
2answers
283 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
2
votes
1answer
250 views

Disk / system configuration for log collection / syslog server

I am looking into building a syslog / logging infrastructure and am pondering about some architecture best practices. Essentially, I see that a syslog system needs to support two conflicting ...
2
votes
1answer
1k views

Ubuntu syslog: After log rotation nothing is written on /var/log/syslog

I've been running a Ubuntu VPS for a few weeks now, so a couple of monthly log rotations took place yestarday. For things like /var/log/wtmp things look as expected: logfile has recent entries, while ...
2
votes
1answer
107 views

Why don't cfn-init logs get sent by rsyslog?

I just signed up for Papertrail to aggregate logs from some AWS instances I'm setting up with CloudFormation::Init. I've followed the instructions and added *.* @logs.papertrailapp.com to the end of ...
2
votes
2answers
3k views

Forward Windows Events Logs to Rsyslog

I would like to forward Windows Events Logs from all my desktop clients to a Linux box with rsyslog on. Rsyslog provide a Windows agent to do just that but its 40 euros per license and when you have ...
6
votes
1answer
249 views

Syslog produces hundreds of lines

I have recently been "promoted" to lab admin, as I have the most experience with linux. My logcheck keeps sending me emails with hundreds of lines stemming from my syslog file. It repeats itself over, ...
1
vote
1answer
338 views

Why isn't /var/log/maillog written with sync option by default?

Some syslog implementations on linux (sysklogd, rsyslog) include the following line in their default configuration: mail.* -/var/log/maillog As far as I know the dash sign means that it is not ...
4
votes
3answers
446 views

Ubuntu 10.04 syslog not logging to correct file

In a similar vein to Why is Syslog Not Writing Logs To The Designated Files? I'm having a few problems with syslog on Ubuntu 10.0.4 I have an app which I have set to facility local7. I added the ...
0
votes
1answer
102 views

Syslog-ng prepends <[0-9]+> to my messages

I'm writing some parsing logic for syslog-ng messages and am noticing that for many of the commands syslog-ng prepends a <[0-9]+> string to most of my messages. Here is an example from me ...
1
vote
1answer
2k views

/var/log/messages spammed with POLLERR messages

I've started seeing /var/log/messages growing in size indefinitely with these lines: Aug 1 12:47:27 linux-jblp syslog-ng[1947]: POLLERR occurred while idle; fd='16' Process 1947 is this: root ...
0
votes
1answer
842 views

Amavisd-new cannot start - missing Unix::Syslog (CentOS)

I followed the basic instructions here for installing amavisd, spamassassin + clamav... http://wiki.centos.org/HowTos/Amavisd I get the following error when trying to start amavisd... # service ...
1
vote
2answers
1k views

Squid logging to syslog-ng - program name has brackets

Using Ubuntu 10.04.4 LTS and Squid3 I want to log to syslog-ng Edited /etc/squid3/squid.conf and added the following line: access_log syslog squid Logs are being written but the program name ...