Hot answers tagged syslogd
syslog-ng is very straight forward (but a lot wordier) once you understand the structure of its configuration file. In such a simple installation like yours all you need to know for now is that you have to configure sources, filters, and destinations. I am not sure what version of syslog-ng you are running but here's one for 3.0.x (which will work for more ...
Try using syslog-ng. I ran into a number of problems with syslogd on openwrt. I suspect you are running into the similar problems. See my documentation on using syslog-ng with openwrt. My logging server is Ubuntu running rsyslogd. Alternatively, you should be able to do the required changes on the logging server using syslog-ng to rerwrite the log ...
RFC 3164 that Warner pointed you to describes the network format for UDP syslog messages, you can rely on this being what goes over the wire, but syslogd may write something slightly different to disk when it logs your messages. That said, you can usually rely on syslog entries resembling what's described in the RFC, roughly in the form: DATE HOSTNAME TAG: ...
You can use the pidof utility to check whether pretty much any program is running (if it gives out at least one pid, the program is running). If you are using syslog-ng, this would be pidof syslog-ng; if you are using syslogd, it would be pidof syslogd.
It seems that your log messages are sent to /var/log/debug.log because of this line : *.=debug /var/log/debug.log You can either : Use another priority for your tests (eg notice instead of debug) Change the order so that your lines are before the one referring to debug.log
is bsdclient.domain.com and bsdserver.domain.com global DNS aware ? If not have you tried putting in an IP instead of DNS names. Please following this excellent handbook section from freebsd handbook
`!-prog' specification will match any message but the ones from that program: !-dhcpd *.err;kern.*;auth.notice;authpriv.none;mail.crit /dev/console *.info;mail.none;authpriv.none /var/log/messages ...... !dhcpd *.* /var/log/dhcpd.log
It sounds like you're being deluged in spam, either incoming (bad) or being relayed through your server (worse). First, take a look at the mail queue with either sudo postqueue -p or Server Admin -> Mail service -> Maintenance (tab at the bottom of the window) -> Mail Queue (tab at the top). If it shows lots of junk mail addressed to other domains, you're ...
I believe tht the stock syslog daemon on Centos5 does not support this. Also note that port 514/tcp was reserved for 'shell' access, but I think that is deprecated going forward. Check out rsyslog, which has become the default syslog daemon in Ubuntu and RedHat 6 beta (and Centos 6). It can read your existing syslog.conf without any changes, and can also be ...
Only top voted, non community-wiki answers of a minimum length are eligible