syslog is a standard for logging messages about the operation of a system.

learn more… | top users | synonyms

0
votes
0answers
7 views

Cisco ASA 302014 syslog explaination

Can someone please explain the format of cisco asa syslog 302014 and more specifically the difference between idfw_user and AAA user? The message format is shown below: Error Message %ASA-6-302014: ...
2
votes
2answers
942 views

Load Balancing UDP traffic transparently

Are there any products (preferably open source) that can load balance UDP packets transparently? We need to scale our syslog servers and require the original source IP be kept intact. Alternatively ...
5
votes
2answers
6k views

how to filter rsyslog messages by tags

I have several applications and scripts that I want to redirect the output to custom files. I launch those applications using command | logger -t TAG I would like to filter these messages based ...
-3
votes
0answers
32 views

Replacing Rsyslog with Syslog in Centos 6.6

Centos 5.x comes with syslog, however Centos 6.x comes with Rsyslog. I want to switch to Syslog only because of some specific requirements. Please note that I do not want to install syslog-ng, I want ...
1
vote
2answers
95 views

Stop crontab from filling syslog Ubuntu 15.04

How can I prevent (certain cronjobs) from filling my syslog in Ubuntu 15.04? I have some jobs that run 4 times a minute and quickly fill up my syslog files. I've tried adding: cron.* ...
1
vote
2answers
3k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
2
votes
1answer
43 views

Where does “vmunix” label in syslog come from on Debian/Linux systems?

After upgrading one Debian server from Squeeze I noticed that the kernel log messages (those using kern.* in /etc/syslogd.conf) now appear with "vmunix" prefix while earlier they had "kernel" prefix. ...
0
votes
1answer
1k views

kibana: no indices error

None of the existing answers helped, so here a new question. Usecase: Redirecting syslog (or) monitoring static file. I have successfully installed logstash (1.4.2), elasticsearch(1.1.1) and ...
2
votes
3answers
1k views

Syslog severity levels when to use Alert vs Critical

Short overview: Is Alert more severe than Critical. RFC 5424 briefly defines syslog severity levels and gives a short description. Each syslog level is given a code 0 - 7. It was my understanding ...
0
votes
0answers
7 views

Rsyslog 8.12 doesn't like my TLS config

Rsyslog 8.11 -> 8.12 update stopped logging, but only when using TLS. I send to one destination without TLS (destination A) and to another with TLS (destination B). Destination A kept on working ...
2
votes
1answer
1k views

Configuring JBoss AS 7.2 to log to syslog

In my standalone.xml, I have the syslog-handler configured like so: <syslog-handler name="SYSLOG" enabled="true"> <level name="INFO"/> <hostname value="i-XXXXXXX"/> ...
0
votes
1answer
56 views

Use syslog service to capture data logged to a file not managed by syslog?

Some services (nginx, buildbot, et cetera) only support logging to a file. Is there a way to reliably capture these log messages using syslog and friends, so that the log message can be reflected in ...
3
votes
1answer
954 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
1
vote
2answers
6k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
12
votes
7answers
4k views

How did you implement log management on your servers?

I'm trying to figure out how other people implement their log management systems. I have 20-30 Linux servers and a few Windows boxes (most of them virtualized). We utilize a lot of Perl and Bash ...
-1
votes
0answers
15 views

Stop crontab from filling syslog Ubuntu 15.04 [duplicate]

How can I prevent (certain cronjobs) from filling my syslog in Ubuntu 15.04? I have some jobs that run 4 times a minute and quickly fill up my syslog files. I've tried adding: cron.* ...
1
vote
1answer
1k views

Ubuntu iptables logs not going to any log file

I am trying to put logs in iptables but I can not find any log in any file. Although when I run dmesg command, I can see the iptables entries. But the same entry doesn't go to any log file. Here is ...
12
votes
2answers
4k views

No more logging after upgrade to Debian Wheezy

Syslog, auth.log, kern.log and messages log files are not updated anymore after upgrading to Debian Wheezy (Debian Squeeze was previously running). How could I fix it?
0
votes
1answer
45 views

log every command on linux server

I have a snoopy logger on my linux server. It works perfect, but when I use midnight commander I dont see commands that I made there. In logs only 'mc' and no functional keys. So is there any way to ...
16
votes
5answers
28k views

Switch on PAM debugging to Syslog

I hate PAM since it came up. How do I switch on PAM debugging in Debian Squeeze at the admin level? I have checked every resource I was able to find. Google, manpages, whatever. The only thing I ...
1
vote
2answers
5k views

Cisco login on-failure using syslog doesn't show username on failure?

interesting issue I am running into. I am trying to get syslog rmeote logging working with a Cisco switch. i have it working and logging for both on-success and on-failure. However when it is a failed ...
0
votes
2answers
44 views

How can I redirect logfile output to a network socket?

I am using a commercial Java app which writes it's logfiles using log4j. I'd like to get those logfile entries into Syslog where we have specific filters setup to trigger on system events. Log4j ...
0
votes
1answer
53 views

Use nxlog to parse a sophos text file and send to a syslog server

I have a windows server 2012 r2 machine with sophos. Each day there is a scan from sophos and the information is appended to the log "sav.txt". Output example (Some info changed): 20150710 ...
0
votes
1answer
48 views

Logging when cisco switch restarts, shuts down, or starts up

Is it possible to log events like restart,shutdown and start in cisco catalyst 3750. Also need to log when a new user is created. I'm forwarding the logs from the cisco switch to the syslog server and ...
0
votes
1answer
33 views

Send user level messages to syslog

I currently have syslog.conf like so to send INFO logs to /var/log/messages *.info;mail.none;authpriv.none; /var/log/messages; I have an application that uses python libraries LOG_USER facility to ...
0
votes
1answer
42 views

Syslog logging to syslog.1 not syslog

My syslog file is getting a bit unmanageable. I believed I had configured this previously to rotate daily but obviously something has gone amiss. At the moment, my /var/log looks like this: ...
0
votes
2answers
65 views

Forwarding Application and Services Logs using nxlog

Using nxlog 'im_mseventlog' module I'm able to forward all Windows Logs (Application, Security, System... ) logs to the remote syslog server. But I'm not able to forward eventlogs present under ...
0
votes
0answers
61 views

How to configure NetScaler to resend syslog traffic to two backend servers?

I am using NetScaler as load balancing syslog server which means that it does send the received syslog traffic to another syslog server. I am looking for a way to send this traffic to two different ...
1
vote
0answers
35 views

Unable to get structured data in logged messages even after adding mmpstrucdata and mmrfc5424addhmac?(RFC5424)

I am trying to log messages with structured data . But it is showing null value for structured data. I am working with rsyslog 8.9.0.Can someone tell me either i need to load some module or modify ...
1
vote
2answers
35 views

How can I send ALL cron output to syslog rather than email

I am running cron with -m off to stop it sending email and then the -s option is supposed to send all output to syslog. Cron cmdline is crond -s -m off My cron job for testing this is * * * * ...
-1
votes
1answer
62 views

How to forward a specific log file in a syslog config?

I just want to ask how can I log for example /var/log/test/test.log to a remote syslog-ng? Im using syslog not rsyslog. I can do it in rsyslog but not in syslog.
0
votes
1answer
47 views

Redirecting syslog facility to other facility

I have a syslog server, which separates logging informations according to hostnames. It can separate messages if it's in the 'local1' facility. I have a mail server, which sends messages to the ...
1
vote
3answers
807 views

Why aren't Heroku syslog drains logging to rsyslogd?

I'm having a problem using syslog drains as described in https://devcenter.heroku.com/articles/logging. To summarize, I have an Ubuntu 10.04 instance on EC2 that is running rsyslogd. I've also set ...
1
vote
2answers
215 views

Ubuntu 14.04.2 LTS - RSysLog 8.8.0 - omusrmsg not working

I have been trying for two days to get RSysLog to alert all [or specified] users of certain Facilities/Priorities hitting RSysLog. rsyslog.d/50-default.conf: ... *.emerg ...
1
vote
3answers
3k views

What is the difference between syslog, rsyslog and syslog-ng?

I am a bit confused in syslog, rsyslog and syslog-ng. From where can I get the source code for syslog()? Is there any difference between rsyslog and rsyslogd?
0
votes
0answers
24 views

Network syslog with port number

I am collecting syslog from VoIP phones over the network and it is usual having several phones behind same NAT device. I need to collect syslog files to different files or be able to differ lines ...
2
votes
1answer
3k views

Wrong timestamps in /var/log/messages

The /var/log/messages file on an openSUSE 11.2 server shows invalid timestamps. Specifically, the timezone seems to be off for whatever process manages this file. I am unsure whether the times are ...
0
votes
1answer
60 views

rsyslogd and FQDN - cannot get FQDN from clients

I setup a syslogserver with rsyslogd and 3 clients. Logs from 3 test clients are sent to the server, so far so good. My Problem is: I can't get the FQDN hostnames to work. According to rsyslog.com ...
1
vote
1answer
77 views

What rsync options to use for the below mentioned scenario?

Greetings !!! This is regarding a specific requirement about rsync that we are trying to achieve. We have tried to achieve this by using various rsync options. However, we are encountering different ...
0
votes
1answer
45 views

Client rsyslog and server in the same machine Ubuntu 14.04

I am wondering if I can make Rsyslog to receive logs from my own IP, I just want to test that the configurations work, right now I dont have access to another PC or Server, just my PC, in few words I ...
0
votes
0answers
43 views

PowerConnect 2808 and syslog

I have a pair of Dell PowerConnect 2808 managed switches. I am attempting to enable syslog on them, but not having any luck. I have searched the web interface, used telnet to log into the CLI ...
1
vote
2answers
190 views

Unable to get Rsyslog structured data in syslog message

I am new to syslog module. I am trying to log messages with structured data by using this parameter in template. But it is showing null value for structured data. I am working with rsyslogd 5.8.11 ...
1
vote
1answer
94 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
0
votes
0answers
73 views

Apache ErrorLog syslog logging to wrong facility

I've googled myself silly trying to find an answer to this question, but I've had no luck, so here I am. We have an Apache server (v2.2.15) running on CentOS. Apache itself is configured to use the ...
25
votes
4answers
23k views

How to add message that will be read with dmesg?

I am trying to write some custom messages in my dmesg output. I tried: logger "Hello" but this does not work. It exits without error, but no "Hello" appears int the output of: dmesg I am using a ...
2
votes
1answer
137 views

rsyslog not writing log file after restart

First off, thanks for spending the time to have a look at this issue, its much appreciated. I've had the attached rsyslog.conf configuration running for sometime now until today when I had to restart ...
1
vote
2answers
965 views

How can I suppress Postfix anvil statistics from system logs?

After every email sent through my mail server, postfix/anvil appends something like the following: Nov 9 15:09:11 keutenberg postfix/anvil[30006]: statistics: max connection rate 1/60s for ...
0
votes
0answers
311 views

FreeBSD 7 syslog messages: “kernel: 15.xxxxxxxxxxxxxxx too long” (or “too short”)?

I'm experiencing poor performance on an old FreeBSD system and the only anomaly I see so far are syslog messages of the form: Jul 1 12:10:50 myserverXXX kernel: 16.0ccdd219377c0d80 too long Jul 1 ...
0
votes
1answer
45 views

Add a field to the Linux Login

Thanks all in advance. The question is simple. I want to ask the user the reason for login in Linux Production Servers. Login prompt will ask as common for user, password and the "Reason for Login" ...
-1
votes
2answers
87 views

Source of syslog bind query denied message [closed]

What is the cause, and how can I stop this request on example.com from my ip (xxx.xxx.xxx.xxx) being continually repeated in /var/log/syslog? Apr 14 20:37:10 example.com named[1663]: client ...