Syslog is a standard for computer data logging. It separates the software that generates messages from the system that stores them and the software that reports and analyzes them.

learn more… | top users | synonyms

17
votes
4answers
32k views

How to stop kernel messages from flooding my console?

I'm using Centos 6, rsyslog logging. Console is flooded with kernel messages. Klogd is not running (I'm using rsyslog) Rsyslog config does not direct anything to the console Even tried stopping ...
4
votes
3answers
4k views

How do I permanently delete /var/log/lastlog?

My /var/log/lastlog file is huge. I know it's really only a few kilobytes, but tar isn't smart enough to know that, so when I image a virtual machine, my restore fails because it thinks I'm trying to ...
4
votes
1answer
1k views

Why is syslog so much slower than file IO?

I wrote a simple test program to measure the performance of the syslog function. This are the results of my test system: (Debian 6.0.2 with Linux 2.6.32-5-amd64) Test Case Calls ...
4
votes
1answer
10k views

Bad minute in crontab?

I get the following error in my syslog: Oct 17 13:14:03 tracker cron[873]: (*system*) ERROR (Syntax error, this crontab file will be ignored) Oct 17 13:14:03 tracker cron[873]: Error: bad minute; ...
3
votes
2answers
7k views

Monitor Postfix outgoing mail delivery

I'm using GNU Mailman with Postfix to run a mailing list, and would like to monitor the delivery of outgoing mail, that is: for each mail sent from the list, check whether a 250 (OK) message was ...
3
votes
2answers
9k views

Rsyslog outputting to custom log file

Can anyone tell me what I did wrong here? Here is the ultimate question: Why when I use the logger command can I not get it to output to a custom log file in /var/log? In my script: logger -i -t ...
3
votes
1answer
1k views

Configuring syslogd to accept remote connections on OS X Mountain Lion and assign them a category

From another thread here on Stack Exchange, I have discovered that it's pretty easy to enable syslogd on Lion or Mountain Lion to accept incoming connections. cd /System/Library/LaunchDaemons sudo ...
2
votes
1answer
1k views

Configure a UNIX server to send its logs to a remote syslog server?

Is it possible? If so, how is it done exactly? The syslog.conf file doesn't help too much.
2
votes
2answers
189 views

Any ideas how I could get cpu and disk information from 2 raspberry pis connected on a network and displays them on my mac?

I have 2 raspberry pis on my home network performing different tasks. sometimes, I'd like to see their cpu and disk usage on my mac, without needing to login via ssh. is there a service (can this be ...
2
votes
2answers
8k views

How to enable syslog on AIX?

I'm trying to enable syslog on AIX. I followed the instructions in this post but it didn't work. This is my /etc/syslog.conf: mail.debug /var/log/mail.log rotate size 500k files 10 kern.debug ...
2
votes
1answer
406 views

Does the shellshock vulnerability leave any traces in log files?

I've patched my servers, but I'd also like to review my logs to see if there have been any compromises on them. Are there any consistent traces of exploits using this bug?
2
votes
1answer
74 views

Hostname is not displayed appropriately on command prompt & syslog messages

I try to set my hostname as 0.6.0.07252014 but when i see on command prompt and syslog messages, it is not getting displayed appropriately. Entered hostname: 0.6.0.07252014 Command prompt output: ...
2
votes
1answer
2k views

configure rsyslog server to log incomming messages with time of the rsyslog server

I would like to configure our rsyslog server to drop the timestamp of the incoming messages and replace them with time from the rsyslog server. Reason for this is that we have some system that don't ...
2
votes
1answer
52 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
1
vote
1answer
675 views

Handling network plug/unplug in (Debian) Linux

I want to run a script when the switch goes down and an other when it goes up. Is there an easy way to pull this off in Debian (preferably with no other than system tools)? I suppose there is no ...
1
vote
1answer
550 views

How to capture the remote [ rsh/rcp ] login events and information using syslog.conf

I am exploring ways to capture the remote login events in my Linux server [ Oracle Linux 5x ]. Many users are connecting to the server using rcp and rsh protocols , I wish to capture the events [ such ...
1
vote
2answers
7k views

Why am I not getting text into /var/log/messages?

Today, I went to look at a backup RHEL5 server that doesn't usually need to get looked at very often. I found that /var/log/messages existed, but had a size of zero. Similarly, messages.1, messages.2, ...
1
vote
1answer
753 views

Useless nm_dbus_manager_init_bus error messages fill log

My system runs fine, but /var/log/messages repeats this message every few seconds, filling up my log directory: Oct 13 09:10:57 barry NetworkManager: <WARN> nm_dbus_manager_init_bus(): Could ...
1
vote
1answer
31 views

Centralized and local syslog

Right now I have my clients send any syslog messages to my centralized syslog server. However, if that server went down, I would be unable to capture any logs. Is there an option to have syslog write ...
1
vote
1answer
447 views

how to setup syslogd for network equipment such as routers

I seen syslog server logging options on various pieces of equipment on my network. I was wondering how would I setup a syslog server for them to broadcast to? Is there anything special I need to do. I ...
1
vote
1answer
18 views

How can I use Pacemaker to setup a virtual IP for receiving syslog messages?

I need to setup a VIP / floating IP that network devices will send their syslog messages to. The idea behind the VIP is to have a highly available setup in an attempt to minimize the amount of logs ...
1
vote
0answers
48 views

boot.log created with permissions 644 instead of 600

My rsyslog.conf file has this line in it. #### GLOBAL DIRECTIVES #### $FileCreateMode 0600 Yet after every reboot the file permissions of /var/log/boot.log are still changed to 644. Every other ...
1
vote
1answer
125 views

Millisecond precision in syslogd on OS X

When I log messages to syslog in OS X (10.10.1), it truncates the timestamp to the second. If I log to a file, for example, I am able to capture milliseconds. Milliseconds matter when logs are coming ...
1
vote
0answers
67 views

rsyslog block by dns

rsyslog version is 5.8.6 The rsyslog client send message to remote server by udp, the remote server is used by domain, when the domian can't resolv and timeout, the rsyslog will be blocked. I add ...
1
vote
1answer
47 views

How do I view syslogs on a remote server with Windows and a web browser?

I have Ubuntu Clients running 12.04 LTS and a Ubuntu machine as the server. Now I have configured Ubuntu machines as syslog clients and they are intended to send their logs to the Ubuntu machine. But ...
1
vote
1answer
2k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
1
vote
2answers
61 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
1
vote
0answers
197 views

how to get logs in DD/MM/YYYY format and ipaddress format using rsyslog in ubuntu

Feb 4 10:32:57 master sshd[2070]: pam_unix(sshd:session): session opened for user root by (uid=0) Feb 4 10:32:59 master sshd[2070]: Received disconnect from 192.168.0.107: 11: disconnected by user ...
1
vote
1answer
204 views

How can I get Minecraft’s log into rsyslog?

Minecraft has a log file like this: 2012-10-27 21:45:47 [INFO] Starting Minecraft server on *:25565 2012-10-27 21:45:47 [INFO] Preparing level "../worlds/world3" 2012-10-27 21:45:48 [INFO] Preparing ...
1
vote
0answers
149 views

Can a hostname be added to syslog-ng?

How can syslog-ng be configured to send both the hostname and the IP address. Currently, logs are sent with the IP address of the device/machine, but we want to add the hostname so I could keep my ip ...
1
vote
2answers
309 views

Making log message priority show up in syslog

I'm using Red Hat 6.0 on a testing server. My code contains syslog(pri,"(%u)%s",(unsigned int)getTid(),buf); The log message in syslog looks like (18597)DES=Recved confirmation of successful ...
0
votes
2answers
29 views

How to get Syslog Referer URL

I have two urls one.example.com and two.example.com, is there a way in the syslog conf of capturing which URL was used to hit the server? I need to modify a database filed based on this information. ...
0
votes
1answer
262 views

Are there any command line syslog listeners for Linux?

We have several embedded systems that can be configured to send log data to a remote server for debugging purposes. However such is the hassle of configuring the developers machine to listen and ...
0
votes
1answer
45 views

Catching malware and demonstrate it through windows logs

I need to catch a virus/malware on purpose on a VM and demonstrate the infection through windows logs analysis. I am using both syslog and eventlog analyzer, but no sign of events logged. I caught on ...
0
votes
1answer
820 views

Logrotate says “log needs rotating” and then does nothing

I have the following logrotate configuration, and a 2 GB /var/log/messages: /var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron /var/log/network { ...
0
votes
1answer
65 views

Is there a standard way of redirecting syslog events to the terminal?

Say I have a program which is a source of syslog events that I'd like to observe. Is there a standard way to run the program while sending the syslog events to its controlling terminal? Answers to ...
0
votes
0answers
11 views

Syslog declare variable and rewrite

I need to create a variable in syslog ng and manipulate the string. I have been through the docs and cannot seem to pinpoint what I need. So far I have the following: @define TEST "${TAGS}" rewrite ...
0
votes
0answers
25 views

Configuring a centralized rsyslog server with MySQL database, gathering events from multiple servers

I'm trying to configure my rsyslog server to collect logs from many servers and write them to a local database. The problem is, the server writes the data to the DB as local (host, ip, etc) I'm ...
0
votes
2answers
40 views

What does it mean when a kernel terminates a process with status 131?

I am trying to debug an issue where a redis-server process died, and in the syslog I see: Mar 9 23:56:44 ip-10-236-158-228 kernel: [25188369.962457] init: redis1-server main process (2822) ...
0
votes
0answers
42 views

rsyslog loses messages from firewall

I am trying to make rsyslog to log messages from iptables MASQUERADE. I have iptables LOG rule in nat table and PREROUTING chain before the MASQUERADE rules. The actual iptables rules: iptables -t ...
0
votes
0answers
57 views

How to supress syslog from displaying messages to console

I have a docker container(phusion/baseimage-docker) running inside of VirtualBox virtual machine. When I attach to the container I constantly see the output of syslog(cron logs for example) which ...
0
votes
1answer
24 views

File monitoring using syslog

Can rsyslog, syslog-ng programs monitor change of file? I want to monitor files and receive the changes made to the file by syslog on server. Thank you.
0
votes
0answers
19 views

Event of file change

Good day, I have a cronjob that uses curl to get log file from server that only supports transmitting log via FTPS, and I know that this is not good way to monitor log file since every time the ...
0
votes
1answer
25 views

make particular service logs to be written in separate file in syslog.conf

One of the service is writting logs by default in /var/log/messages file. I want that service logs to be written other file. Logs in /var/log/messages files are being dislpalyed as below. Nov 20 ...
0
votes
1answer
1k views

Forward Windows system Event logs to a Linux Syslog Server with no agent

We have a SCOM 2012 server. We have SNARE agents for PCI compliance, but now we want to save money by gathering all events for all Windows servers using its native features. We also have a ...
0
votes
1answer
2k views

Cablemodem (SBG6580) firewall denying some outbound traffic? Why? Not configured

I finally got around to turning the syslog on for my cablemodem (Motorola Surfboard SBG6580) and I'm seeing about the expected amount of inbound attackage being blocked... 2014-05-30 21:59:02 ...
0
votes
1answer
100 views

Limiting messages in Centos log file

I have a Centos 6.4 server. I wish to view httpd and PHP errors in /var/log/messages. The log shows a bunch of kernel messages which I don't want to view. How can I either configure syslog to not ...
0
votes
1answer
627 views

Rsyslog hangs processes

I have a quite odd problem. At random times my dovecot daemon dies and I cannot receive/send emails while the host is still up. When trying to SSH into the server to see what happened, I discover that ...
0
votes
0answers
20 views

RAM related errors on a CentOS server [duplicate]

I am getting a series of what appears to be RAM related errors on a server. Are these something to worry about? This is being used for scientific computation, is there a risk of data corruption that ...
0
votes
1answer
1k views

Linux Mint syslog file?

I was checking my syslog file in the var/log directory. I am using Linux Mint. First of all, the log file is only showing the log for today's date. The log for yesterday is not showing. Does the ...