syslog is a standard for logging messages about the operation of a system.

learn more… | top users | synonyms

0
votes
1answer
2k views

Linux [Hardware Error] message from kernel

Since yesterday I get the following message every few minutes: Message from syslogd@hostname at Nov 23 12:31:17 ... kernel:[8024326.816370] [Hardware Error]: MC4_STATUS: Corrected error, other ...
1
vote
1answer
2k views

How do I disable nginx sending messages to syslog?

My nginx sends lots of messages to syslog, but I don't need them. In my nginx.conf: error_log /var/log/nginx-error.log notice; ...... server { access_log off; ...
1
vote
2answers
683 views

How to set up mysql storage for certain rsyslog input matches?

I'm draining various logs from Heroku to an rsyslog linux (ubuntu) server and am starting to have a little more to bite off than I can chew in terms of working with my log histories. I am needing to ...
2
votes
1answer
874 views

snort not logging full output to syslog

I am able to send snort alerts to my remote syslog server but I am not able to see full alert message; I only see basic information like title, source and destination IP. I am specifically interested ...
0
votes
2answers
2k views

Redirecting Syslog events from RHEL 6 to RHEL 5: is it possible to provide with the same event format?

For some reasons, we redirect syslog events from RHEL 6 (with rsyslog) to RHEL 5 (with syslogd). On RHEL 6 in rsyslog.conf: *.* @10.30.46.211 On RHEL 5 in /etc/sysconfig/syslog: ...
0
votes
3answers
670 views

Adding a new facility to syslog

The docs give a fixed list of facilties for syslog, but it's clearly possible to have more (http isn't on the list). Do I just describe it in the conf file and start using it or is is more involved? ...
0
votes
1answer
940 views

Sending multiple loglines (mysql-slow.log, php5-fpm.log.slow) to syslog

I'm trying to aggregate several sources of error messages into one place, to easier put things into context. I'm currently looking at rsyslog, but I can change this - if it's preventing me from doing ...
2
votes
2answers
191 views

Managing and configuring syslog-ng for very large logs

I have the logs traditionally kept in /var/log/ piped through syslog-ng. The logs can reach to the terabyte size on a daily basis. In order to make them more manageable. I would like break them out ...
-2
votes
1answer
336 views

Forward Windows logs to Linux server [duplicate]

Possible Duplicate: Software to send windows notification eventlogs to linux syslog server and encode to utf8 Is it possible to forward logs from a Windows server to a Linux syslog server ? ...
4
votes
3answers
590 views

Log Shutdown Command Usage/Message

I want to monitor whenever any of our machines run the shutdown command so that it can send an email or notification of an imminent reboot/shutdown. I figured that when shutdown was run it probably ...
7
votes
2answers
2k views

Syslog forwarding loses original hostname

I have DMZ hosts forwarding to a DMZ syslog which in turn forwards all the syslog messages to an internal syslog server. It's working fine for the most part but the internal syslog host messages ...
2
votes
1answer
1k views

Redirecting syslog output for certain processes to a particular file

I must admit to being a complete syslog newbie. I haven't touched it until now, but I use its output on a daily basis, like most of us :) I currently have a problem with the gmetad daemon spamming my ...
1
vote
1answer
257 views

Does STDERR go to syslog in an LSB init script?

I am running a Debian system and have an init script in /etc/init.d/ that starts a daemon using start-stop-daemon: start-stop-daemon --start --quiet --pidfile /tmp/myproject.pid --exec ...
2
votes
3answers
2k views

Chained Syslog forwarding

Is there a way to chain syslog forwarding? For example, how can a clienthost forward its syslogs to ServerA and ServerA forward everything to CentralSyslogServer? I'm using rsyslog. The reason is ...
4
votes
1answer
2k views

Any logs of if/when “at” jobs were executed?

I've setup a couple of "at" jobs to execute at specific times on CentOS 5. This morning I don't see these commands in the queue ("atq"), as expected, but I also don't see were can I check whether the ...
0
votes
1answer
280 views

shrinking a syslog sql database

I am trying to shrink a SQL database used for our syslog monitoring. the DB is about 43GB right now, and i'm sure hasn't been cleaned up in years. I recently inherited this DB when someone quit, and ...
3
votes
4answers
788 views

rsyslog or a similar distributed logging standard, for Windows?

I have a bunch of Windows Servers that run a bunch of apps, that log into local text files. I want to aggregate these text files into a centralized log server, where I can search them. Building ...
0
votes
1answer
342 views

Change syslog log file's owner/group?

Is there a way to have syslog create a log file that's not owned by root? I've got several jboss application servers that I've got logging to a server. Everyone's running CentOS. Right now, all of ...
2
votes
2answers
382 views

Are there some limit on files logged through syslog?

I have a Postfix mail server running on Ubuntu 8.10 and when /var/log/mail.log or any other file reaches exactly 2GB of data syslog stops writing any data to the file. Is there some kind of limit for ...
0
votes
1answer
110 views

Remote Logging for Syslog

I'm trying to set up syslog to accept remote logging. I already have changed the config file and set up the syslogd with "-r m 0" to accept remote logging. Now i need to change the /etc/services file. ...
13
votes
4answers
10k views

Linux: logwatch(8) is too noisy. How can I control the noise level?

Our Linux systems run logwatch(8) utility by default. On a RedHat/CentOS/SL system, Logwatch is called by the /etc/cron.daily/ cronjob, which then sends a daily email with the results. These emails ...
0
votes
1answer
128 views

Odd Postfix message right before system crash/freeze. What does it mean?

I just had my web server lock up on me, it stopped serving pages and wouldn't accept any SSH connections. I was able to reboot this server through the control panel Linode provides. Below you'll see ...
1
vote
3answers
227 views

Syslogd: translate facility on log messages going to a server

I want to send some log messages out to a remote log server, and change the facility on them to a configured value so the log server can tell more easily that they came from my hardware. That is, all ...
2
votes
2answers
2k views

Using rsyslog to create different log files for different processes

Scenario: I am running a cluster of machines. Each machine runs various python programs with a unique (across the cluster), but dynamically set, ID. Right now, they are all logging locally. So, I ...
1
vote
0answers
186 views

Rsyslog's RELP format; experience?

1) In your experience, does rsyslog's RELP log transfer format require a significant amount of resources over what plain TCP syslog transfer would use? (cpu, disk i/o, network) 2) IYHO, is TCP ...
0
votes
2answers
161 views

Determine which programs are logging to a specific syslog facility

Is there any way to determine which daemons are logging to a specific syslog facility? (spec. rsyslog) What I am specifically looking for is who logs to the auth.* severities. A 2001 audit for ...
3
votes
2answers
524 views

Formal separation marker of syslog events?

I've been looking at RFC5424 to find the formally specified marker that will end a syslog event. Unfortunately I couldn't find it. So If I wanted to implement some small syslog server that reacts on ...
0
votes
1answer
457 views

Zenoss - Performance issues with captured events

The problem I'm manually inserting events into Zenoss through the zensendevent command line tool. The events are successfully inserted into Zenoss. The problem is that I can just insert about 8 ...
3
votes
3answers
867 views

Forward UNIX syslog to Windows Event viewer

I'm running a pfSense firewall which runs syslog and can forward it's logs to a remote syslog server. I'd like to be able to view these on my SBS 2011 server's event viewer, via a subscription. I ...
2
votes
1answer
702 views

How to setup SysLogHandler with Django 1.3

I'm having no luck finding any information on setting up syslog logging with Django 1.3 dictionary configuration. The Django documents don't cover syslog and the python documentation is less than ...
2
votes
1answer
225 views

How can I get around a length limit on EC2 system logs retrieved through the console?

I am running ami-ccf405a5, which is a Ubuntu 10.10 Maverick EBS boot from alestic.com in a micro instance in us-east from the AWS Console. I use the user-data field to load in a script, the beginning ...
0
votes
2answers
74 views

Configuring Syslog to accept remote log submissions

By default syslog daemons don't accept remote log submissions. I need mine to, but don't really have a clue how to configure that. Can anyone help me out, send me a good tutorial, etc. I have been ...
0
votes
1answer
491 views

Qmail - replacing multilog with splogger

I currently manage a qmail installation, set up on Centos using the qmailrocks guide (which seems to have vanished from the Internet now). So - daemontools, multilog, vpopmail, qmail. I've been asked ...
1
vote
1answer
299 views

Best practices for discarding messages in (r)syslog?

I've setup a central rsyslog server that is writing events to a MySQL database. Looking through the events one sees all kinds of events that are probably unnecessarily captured. On RHEL/CentOS ...
0
votes
2answers
1k views

Proftpd doesn't send xferlogs to syslog

I have a Proftpd v1.3.2 server, and I need to send every logs (system logs + auths logs + xferlogs) to a remote syslog server. It works fine for system+auth logs. But even if "TransferLog" was removed ...
3
votes
1answer
770 views

OSX /var/log/system.log — where do i define pruning interval?

I have a script that periodically checks /var/log/system.log and I've noticed across our network that some machines keep logfiles for a month through reboots and other activities, while some purge the ...
1
vote
4answers
886 views

remote monitoring of linux logs

I would like to monitor syslog logs on few dozens of linux servers. In ideal world I'd prefer pull method where central monitoring server collects once per day logs from all machines via ssh, applies ...
2
votes
1answer
2k views

Syslog web interface recommendations?

We've got a central log server (syslog-ng) and I'd like to provide a slick web interface for viewing the logs. Most of what I've seen are either horribly broken, outdated, or just fugly. I'm not very ...
0
votes
2answers
288 views

server log problem

I have a linux server running Debain. My logs are not updated in my var/log/messages. Deamon syslogd is running. Below are the logs are updated in my var/log/messages. Apr xx 20:40:24 xxxxx -- MARK ...
3
votes
1answer
274 views

Adding Apache log export via Syslog still writing local log

we have configured syslog/syslog-ng to export Apache logs ton a dedicated log server, for security and log check reasons. But I want to keep a copy of the error log on Apache server for easy ...
6
votes
1answer
6k views

Rsyslog.conf disable mail.info and/or disable postfix reporting

I have log entries like: Apr 8 10:25:31 monitor postfix/smtpd[3131]: connect from localhost[127.0.0.1] Apr 8 10:25:31 monitor postfix/smtpd[3131]: lost connection after CONNECT from ...
0
votes
1answer
5k views

How does one enable remote listening with rsyslog?

I'm configuring a Debian Squeeze server to receive syslog from some appliances, but rsyslog is refusing to listen to UDP 514. The closest I have been able to get from it is to make it listen to TCP ...
2
votes
2answers
896 views

Netcat, Syslog, UDP, and <134>

Listening with netcat on UDP 514 to syslog data I see that each sent log message is separated by <134>. Does anyone note what <134> is?
1
vote
1answer
347 views

What do the extra parts of the iptables ping log entry mean?

I'm dropping all ICMP type 8 packets on the INPUT chain and so now I'm seeing log entries as a Fabric script tries to contact another server, like this: kernel: INPUT DROP IN=eth0 OUT= ...
1
vote
1answer
485 views

what does “net_ratelnet_ratelimit: 222 callbacks suppressed” mean?

The application is still responsive, but when I ssh into the server i cant do anything because errors keep popping up.
1
vote
1answer
443 views

rsyslog to fifo

I want to have a rsyslog log its data to a fifo that a daemon creates. However, if the daemon isn't running and the fifo isn't there then rsyslog will just start writing to a file in its place. Is ...
2
votes
1answer
343 views

how to make linux cdrom mounting/unmounting show up in syslog

I'd like a record of every time the cdrom drive is mounted. Ideally this would be in syslog. The system is CentOS 5.5 linux.
11
votes
4answers
19k views

Switch on PAM debugging to Syslog

I hate PAM since it came up. How do I switch on PAM debugging in Debian Squeeze at the admin level? I have checked every resource I was able to find. Google, manpages, whatever. The only thing I ...
0
votes
3answers
10k views

How do I setup a syslog server for my network?

I would like to setup a syslog server to forward all log file from all of my VMs and servers. I really don't much about what is out there. So I turn to the community, Something on Linux is fine, what ...
0
votes
1answer
3k views

How do you enable and configure syslog server in OSX server 10.6?

I am completely new to OSX server. How do I turn on the syslog service? I also need it to accept connections from remote network switches. This seems to answer the second part of my question.