Syslog is a standard for computer data logging. It separates the software that generates messages from the system that stores them and the software that reports and analyzes them.

learn more… | top users | synonyms

1
vote
2answers
67 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
1
vote
2answers
413 views

Making log message priority show up in syslog

I'm using Red Hat 6.0 on a testing server. My code contains syslog(pri,"(%u)%s",(unsigned int)getTid(),buf); The log message in syslog looks like (18597)DES=Recved confirmation of successful ...
4
votes
1answer
2k views

Configuring syslogd to accept remote connections on OS X Mountain Lion and assign them a category

From another thread here on Stack Exchange, I have discovered that it's pretty easy to enable syslogd on Lion or Mountain Lion to accept incoming connections. cd /System/Library/LaunchDaemons sudo ...
2
votes
1answer
89 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
1
vote
1answer
313 views

Debian Jessie shutting down too fast (<1 second)

I recently have bought an SSD for my laptop and installed fresh Debian Jessie on it (I used Wheezy before). As a result, most operations on the laptop have sped up, and one operation in particular ...
1
vote
1answer
308 views

Millisecond precision in syslogd on OS X

When I log messages to syslog in OS X (10.10.1), it truncates the timestamp to the second. If I log to a file, for example, I am able to capture milliseconds. Milliseconds matter when logs are coming ...
1
vote
1answer
55 views

How do I view syslogs on a remote server with Windows and a web browser?

I have Ubuntu Clients running 12.04 LTS and a Ubuntu machine as the server. Now I have configured Ubuntu machines as syslog clients and they are intended to send their logs to the Ubuntu machine. But ...
1
vote
1answer
2k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
0
votes
1answer
43 views

Error in the rsyslog.conf file, how to log more than one device?

I am trying to log my dd-wrt router and my nas4free device. All logs are sent to a spare raspberrypi with a usb disk connected to to store the log files. But there is a problem with my rsyslog.conf ...
0
votes
1answer
36 views

File monitoring using syslog

Can rsyslog, syslog-ng programs monitor change of file? I want to monitor files and receive the changes made to the file by syslog on server. Thank you.
0
votes
1answer
230 views

syslogd filter by sender

I'm trying to route syslog messages from one specific application to a separate UDP port. In syslog.conf if I set *.* @127.0.0.1:5140, all messages are routed (progress!). However, I'd like to be ...
0
votes
1answer
52 views

make particular service logs to be written in separate file in syslog.conf

One of the service is writting logs by default in /var/log/messages file. I want that service logs to be written other file. Logs in /var/log/messages files are being dislpalyed as below. Nov 20 ...
0
votes
1answer
2k views

Cablemodem (SBG6580) firewall denying some outbound traffic? Why? Not configured

I finally got around to turning the syslog on for my cablemodem (Motorola Surfboard SBG6580) and I'm seeing about the expected amount of inbound attackage being blocked... 2014-05-30 21:59:02 ...
0
votes
1answer
143 views

Limiting messages in Centos log file

I have a Centos 6.4 server. I wish to view httpd and PHP errors in /var/log/messages. The log shows a bunch of kernel messages which I don't want to view. How can I either configure syslog to not ...
0
votes
1answer
976 views

Rsyslog hangs processes

I have a quite odd problem. At random times my dovecot daemon dies and I cannot receive/send emails while the host is still up. When trying to SSH into the server to see what happened, I discover that ...
0
votes
1answer
2k views

Linux Mint syslog file?

I was checking my syslog file in the var/log directory. I am using Linux Mint. First of all, the log file is only showing the log for today's date. The log for yesterday is not showing. Does the ...
0
votes
1answer
564 views

Syslog cannot start

I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /var/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
0
votes
1answer
50 views

What do the numbers mean in syslog-ng.d?

On Linux (Ubuntu 12.04) the directory syslog-nd.g contains syslog configuration files like 00-default-destinations 00-default-options 00-default-sources 10-console I am not sure if those files are ...
0
votes
1answer
20 views

Logs appear to have switched off?

I'm running a ASUS EEE 701 laptop with the stock linux OS. I was (and still am) having problems with a cron not running - so I went to look at the logs - and it turns out that none of the logs ...
0
votes
1answer
122 views

I'm trying to limit rsyslog outgoing to Emerg, crit , alert and error but having difficulty

This is the line i have: *.=emerg,crit,alert,error @@syslogserver:1468 What i'm receiving is all messages. Is there anything wrong with this syntax?
-1
votes
1answer
3k views

How to append %fromhost-ip% variable to every log line in rsyslog for remote host logs?

I use rsyslog variables to compose log filenames. Variables %HOSTNAME% and %fromhost-ip%. Everything is OK, but the question is: How can I append/prepend these variables to every log line for logs ...
1
vote
0answers
40 views

rsyslogd: How to prevent logging in the /var/kern.log file and redirecting to another file?

I am trying to redirect iptables log to another file. Based upon my reading on the net, I did the following: In my iptables rule, I have rules like: iptables -A INPUT -s ... -j LOG --log-prefix ...
1
vote
0answers
200 views

boot.log created with permissions 644 instead of 600

My rsyslog.conf file has this line in it. #### GLOBAL DIRECTIVES #### $FileCreateMode 0600 Yet after every reboot the file permissions of /var/log/boot.log are still changed to 644. Every other ...
1
vote
0answers
77 views

rsyslog block by dns

rsyslog version is 5.8.6 The rsyslog client send message to remote server by udp, the remote server is used by domain, when the domian can't resolv and timeout, the rsyslog will be blocked. I add ...
1
vote
0answers
230 views

how to get logs in DD/MM/YYYY format and ipaddress format using rsyslog in ubuntu

Feb 4 10:32:57 master sshd[2070]: pam_unix(sshd:session): session opened for user root by (uid=0) Feb 4 10:32:59 master sshd[2070]: Received disconnect from 192.168.0.107: 11: disconnected by user ...
1
vote
0answers
153 views

Can a hostname be added to syslog-ng?

How can syslog-ng be configured to send both the hostname and the IP address. Currently, logs are sent with the IP address of the device/machine, but we want to add the hostname so I could keep my ip ...
0
votes
0answers
83 views

Rsyslog: how to separate incoming logs with IP addresses

I am trying to setup an Rsyslog with the following configuration: I listen to the 514 port to receive data from different hosts: 172.16.111.222, 172.16.111.111 and 172.16.222.111. And I want to store ...
0
votes
0answers
27 views

Is there a general solution to delivering bytes to a destination with reliability and buffering configuration?

I have some application events. I want these events to be delivered to a few places: a periodically rotated file (in proprietary TSV format in my case), a message bus (Kafka in my case), for archival ...
0
votes
0answers
123 views

ISC DHCP Spamming /var/log/messages

I recently setup a Linux box to run a DHCP server. One of the prerequisites was to get all of its log messages onto a specific file outside of the /var/log folder. For that purpose, I inserted the ...
0
votes
0answers
17 views

Syslog declare variable and rewrite

I need to create a variable in syslog ng and manipulate the string. I have been through the docs and cannot seem to pinpoint what I need. So far I have the following: @define TEST "${TAGS}" rewrite ...
0
votes
0answers
40 views

Configuring a centralized rsyslog server with MySQL database, gathering events from multiple servers

I'm trying to configure my rsyslog server to collect logs from many servers and write them to a local database. The problem is, the server writes the data to the DB as local (host, ip, etc) I'm ...
0
votes
0answers
62 views

rsyslog loses messages from firewall

I am trying to make rsyslog to log messages from iptables MASQUERADE. I have iptables LOG rule in nat table and PREROUTING chain before the MASQUERADE rules. The actual iptables rules: iptables -t ...
0
votes
0answers
462 views

How do I configure rsyslog to write to /var/log/{hostname of sender} when receiving remote logs?

My ADSL modem supports remote logging via syslog. I have set up my server, running rsyslog, to accept the log messages from the modem and they are being show in /var/log/syslog along with the messages ...
0
votes
0answers
336 views

How do I setup syslog.conf configuration to log into a custom log file?

I am using syslog in my application, I have created a rule in syslog.conf file to log data from my application in to specific file. This is working correctly, but it is also writing to the standard ...