Syslog is a standard for computer data logging. It separates the software that generates messages from the system that stores them and the software that reports and analyzes them.

learn more… | top users | synonyms

0
votes
0answers
4 views

rsyslog filter content from client

I try to configure my syslog client. It works well, I receive the logs on my server. Now I just want to fine tune. And something that seemed very easy to me turns out to be rather difficult. The ...
1
vote
1answer
51 views

How do I stop Tomcat / rsyslog from logging to console?

At my work someone once setup Tomcat to log to syslog. The problem is that these messages also get sent to the console. The system is RHEL6, these are the involved RPM's rsyslog-5.8.10-10.el6_6....
1
vote
1answer
108 views

Missing /var/log/messages file in CentOS 6.8

I'm not sure what I'm doing wrong, but my Linux box doesn't seem to be logging any info to the messages file. Will someone please help? Here's the content of the /etc/rsyslog.conf file # rsyslog v5 ...
0
votes
1answer
57 views

Error in the rsyslog.conf file, how to log more than one device?

I am trying to log my dd-wrt router and my nas4free device. All logs are sent to a spare raspberrypi with a usb disk connected to to store the log files. But there is a problem with my rsyslog.conf ...
2
votes
2answers
2k views

Configure a UNIX server to send its logs to a remote syslog server?

Is it possible? If so, how is it done exactly? The syslog.conf file doesn't help too much.
1
vote
0answers
75 views

rsyslogd: How to prevent logging in the /var/kern.log file and redirecting to another file?

I am trying to redirect iptables log to another file. Based upon my reading on the net, I did the following: In my iptables rule, I have rules like: iptables -A INPUT -s ... -j LOG --log-prefix "...
23
votes
5answers
50k views

How to stop kernel messages from flooding my console?

I'm using Centos 6, rsyslog logging. Console is flooded with kernel messages. Klogd is not running (I'm using rsyslog) Rsyslog config does not direct anything to the console Even tried stopping ...
0
votes
1answer
3k views

Forward Windows system Event logs to a Linux Syslog Server with no agent

We have a SCOM 2012 server. We have SNARE agents for PCI compliance, but now we want to save money by gathering all events for all Windows servers using its native features. We also have a centralized ...
2
votes
1answer
313 views

How can I get Minecraft’s log into rsyslog?

Minecraft has a log file like this: 2012-10-27 21:45:47 [INFO] Starting Minecraft server on *:25565 2012-10-27 21:45:47 [INFO] Preparing level "../worlds/world3" 2012-10-27 21:45:48 [INFO] Preparing ...
5
votes
2answers
14k views

Bad minute in crontab?

I get the following error in my syslog: Oct 17 13:14:03 tracker cron[873]: (*system*) ERROR (Syntax error, this crontab file will be ignored) Oct 17 13:14:03 tracker cron[873]: Error: bad minute; ...
0
votes
0answers
92 views

Rsyslog: how to separate incoming logs with IP addresses

I am trying to setup an Rsyslog with the following configuration: I listen to the 514 port to receive data from different hosts: 172.16.111.222, 172.16.111.111 and 172.16.222.111. And I want to store ...
0
votes
0answers
27 views

Is there a general solution to delivering bytes to a destination with reliability and buffering configuration?

I have some application events. I want these events to be delivered to a few places: a periodically rotated file (in proprietary TSV format in my case), a message bus (Kafka in my case), for archival ...
1
vote
1answer
207 views

Setup for rsyslog to log from two network devices

I have 2 VOIP devices on my network (ht502 and ht704) which are both capable of sending their log info as syslog data. Receiver is a little Raspberry on Raspbian. I wanted to configure syslog to ...
0
votes
0answers
156 views

ISC DHCP Spamming /var/log/messages

I recently setup a Linux box to run a DHCP server. One of the prerequisites was to get all of its log messages onto a specific file outside of the /var/log folder. For that purpose, I inserted the ...
1
vote
1answer
349 views

Debian Jessie shutting down too fast (<1 second)

I recently have bought an SSD for my laptop and installed fresh Debian Jessie on it (I used Wheezy before). As a result, most operations on the laptop have sped up, and one operation in particular ...
9
votes
2answers
16k views

Rsyslog outputting to custom log file

Can anyone tell me what I did wrong here? Here is the ultimate question: Why when I use the logger command can I not get it to output to a custom log file in /var/log? In my script: logger -i -t ...
1
vote
1answer
208 views

How can I use Pacemaker to setup a virtual IP for receiving syslog messages?

I need to setup a VIP / floating IP that network devices will send their syslog messages to. The idea behind the VIP is to have a highly available setup in an attempt to minimize the amount of logs ...
1
vote
1answer
176 views

Snort installed on Ubuntu not sending alerts to syslog

I have a Magento website setup on a Linux machine that is based on a Bitnami ready-made image. The main goal is to be notified by email whenever there might be a potential attack on the site. My ...
1
vote
1answer
315 views

Centralized and local syslog

Right now I have my clients send any syslog messages to my centralized syslog server. However, if that server went down, I would be unable to capture any logs. Is there an option to have syslog write ...
1
vote
0answers
226 views

boot.log created with permissions 644 instead of 600

My rsyslog.conf file has this line in it. #### GLOBAL DIRECTIVES #### $FileCreateMode 0600 Yet after every reboot the file permissions of /var/log/boot.log are still changed to 644. Every other ...
4
votes
3answers
5k views

How do I permanently delete /var/log/lastlog?

My /var/log/lastlog file is huge. I know it's really only a few kilobytes, but tar isn't smart enough to know that, so when I image a virtual machine, my restore fails because it thinks I'm trying to ...
0
votes
2answers
73 views

How to get Syslog Referer URL

I have two urls one.example.com and two.example.com, is there a way in the syslog conf of capturing which URL was used to hit the server? I need to modify a database filed based on this information. ...
3
votes
2answers
12k views

Monitor Postfix outgoing mail delivery

I'm using GNU Mailman with Postfix to run a mailing list, and would like to monitor the delivery of outgoing mail, that is: for each mail sent from the list, check whether a 250 (OK) message was ...
0
votes
1answer
60 views

make particular service logs to be written in separate file in syslog.conf

One of the service is writting logs by default in /var/log/messages file. I want that service logs to be written other file. Logs in /var/log/messages files are being dislpalyed as below. Nov 20 ...
0
votes
1answer
243 views

syslogd filter by sender

I'm trying to route syslog messages from one specific application to a separate UDP port. In syslog.conf if I set *.* @127.0.0.1:5140, all messages are routed (progress!). However, I'd like to be ...
0
votes
1answer
37 views

File monitoring using syslog

Can rsyslog, syslog-ng programs monitor change of file? I want to monitor files and receive the changes made to the file by syslog on server. Thank you.
0
votes
2answers
79 views

What does it mean when a kernel terminates a process with status 131?

I am trying to debug an issue where a redis-server process died, and in the syslog I see: Mar 9 23:56:44 ip-10-236-158-228 kernel: [25188369.962457] init: redis1-server main process (2822) ...
0
votes
0answers
64 views

rsyslog loses messages from firewall

I am trying to make rsyslog to log messages from iptables MASQUERADE. I have iptables LOG rule in nat table and PREROUTING chain before the MASQUERADE rules. The actual iptables rules: iptables -t ...
2
votes
2answers
11k views

How to enable syslog on AIX?

I'm trying to enable syslog on AIX. I followed the instructions in this post but it didn't work. This is my /etc/syslog.conf: mail.debug /var/log/mail.log rotate size 500k files 10 kern.debug ...
4
votes
1answer
2k views

Configuring syslogd to accept remote connections on OS X Mountain Lion and assign them a category

From another thread here on Stack Exchange, I have discovered that it's pretty easy to enable syslogd on Lion or Mountain Lion to accept incoming connections. cd /System/Library/LaunchDaemons sudo /...
2
votes
2answers
194 views

Any ideas how I could get cpu and disk information from 2 raspberry pis connected on a network and displays them on my mac?

I have 2 raspberry pis on my home network performing different tasks. sometimes, I'd like to see their cpu and disk usage on my mac, without needing to login via ssh. is there a service (can this be ...
1
vote
1answer
333 views

Millisecond precision in syslogd on OS X

When I log messages to syslog in OS X (10.10.1), it truncates the timestamp to the second. If I log to a file, for example, I am able to capture milliseconds. Milliseconds matter when logs are coming ...
0
votes
1answer
87 views

Catching malware and demonstrate it through windows logs

I need to catch a virus/malware on purpose on a VM and demonstrate the infection through windows logs analysis. I am using both syslog and eventlog analyzer, but no sign of events logged. I caught on ...
0
votes
1answer
3k views

How to append %fromhost-ip% variable to every log line in rsyslog for remote host logs?

I use rsyslog variables to compose log filenames. Variables %HOSTNAME% and %fromhost-ip%. Everything is OK, but the question is: How can I append/prepend these variables to every log line for logs ...
2
votes
1answer
92 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
2
votes
1answer
454 views

Does the shellshock vulnerability leave any traces in log files?

I've patched my servers, but I'd also like to review my logs to see if there have been any compromises on them. Are there any consistent traces of exploits using this bug?
0
votes
1answer
1k views

Rsyslog hangs processes

I have a quite odd problem. At random times my dovecot daemon dies and I cannot receive/send emails while the host is still up. When trying to SSH into the server to see what happened, I discover that ...
2
votes
1answer
89 views

Hostname is not displayed appropriately on command prompt & syslog messages

I try to set my hostname as 0.6.0.07252014 but when i see on command prompt and syslog messages, it is not getting displayed appropriately. Entered hostname: 0.6.0.07252014 Command prompt output: ...
2
votes
2answers
12k views

Why am I not getting text into /var/log/messages?

Today, I went to look at a backup RHEL5 server that doesn't usually need to get looked at very often. I found that /var/log/messages existed, but had a size of zero. Similarly, messages.1, messages.2, ...
0
votes
1answer
2k views

Cablemodem (SBG6580) firewall denying some outbound traffic? Why? Not configured

I finally got around to turning the syslog on for my cablemodem (Motorola Surfboard SBG6580) and I'm seeing about the expected amount of inbound attackage being blocked... 2014-05-30 21:59:02 ...
0
votes
1answer
151 views

Limiting messages in Centos log file

I have a Centos 6.4 server. I wish to view httpd and PHP errors in /var/log/messages. The log shows a bunch of kernel messages which I don't want to view. How can I either configure syslog to not ...
1
vote
2answers
448 views

Making log message priority show up in syslog

I'm using Red Hat 6.0 on a testing server. My code contains syslog(pri,"(%u)%s",(unsigned int)getTid(),buf); The log message in syslog looks like (18597)DES=Recved confirmation of successful ...
1
vote
2answers
67 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
1
vote
0answers
78 views

rsyslog block by dns

rsyslog version is 5.8.6 The rsyslog client send message to remote server by udp, the remote server is used by domain, when the domian can't resolv and timeout, the rsyslog will be blocked. I add ...
0
votes
1answer
1k views

Logrotate says “log needs rotating” and then does nothing

I have the following logrotate configuration, and a 2 GB /var/log/messages: /var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron /var/log/network { ...
0
votes
0answers
20 views

RAM related errors on a CentOS server [duplicate]

I am getting a series of what appears to be RAM related errors on a server. Are these something to worry about? This is being used for scientific computation, is there a risk of data corruption that ...
0
votes
1answer
587 views

Syslog cannot start

I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /var/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
1
vote
1answer
57 views

How do I view syslogs on a remote server with Windows and a web browser?

I have Ubuntu Clients running 12.04 LTS and a Ubuntu machine as the server. Now I have configured Ubuntu machines as syslog clients and they are intended to send their logs to the Ubuntu machine. But ...
0
votes
1answer
2k views

Linux Mint syslog file?

I was checking my syslog file in the var/log directory. I am using Linux Mint. First of all, the log file is only showing the log for today's date. The log for yesterday is not showing. Does the ...
0
votes
1answer
339 views

Are there any command line syslog listeners for Linux?

We have several embedded systems that can be configured to send log data to a remote server for debugging purposes. However such is the hassle of configuring the developers machine to listen and ...