Syslog is a standard for computer data logging. It separates the software that generates messages from the system that stores them and the software that reports and analyzes them.

learn more… | top users | synonyms

21
votes
5answers
45k views

How to stop kernel messages from flooding my console?

I'm using Centos 6, rsyslog logging. Console is flooded with kernel messages. Klogd is not running (I'm using rsyslog) Rsyslog config does not direct anything to the console Even tried stopping ...
9
votes
2answers
14k views

Rsyslog outputting to custom log file

Can anyone tell me what I did wrong here? Here is the ultimate question: Why when I use the logger command can I not get it to output to a custom log file in /var/log? In my script: logger -i -t ...
4
votes
3answers
5k views

How do I permanently delete /var/log/lastlog?

My /var/log/lastlog file is huge. I know it's really only a few kilobytes, but tar isn't smart enough to know that, so when I image a virtual machine, my restore fails because it thinks I'm trying to ...
4
votes
1answer
2k views

Why is syslog so much slower than file IO?

I wrote a simple test program to measure the performance of the syslog function. This are the results of my test system: (Debian 6.0.2 with Linux 2.6.32-5-amd64) Test Case Calls ...
4
votes
2answers
13k views

Bad minute in crontab?

I get the following error in my syslog: Oct 17 13:14:03 tracker cron[873]: (*system*) ERROR (Syntax error, this crontab file will be ignored) Oct 17 13:14:03 tracker cron[873]: Error: bad minute; ...
4
votes
1answer
2k views

Configuring syslogd to accept remote connections on OS X Mountain Lion and assign them a category

From another thread here on Stack Exchange, I have discovered that it's pretty easy to enable syslogd on Lion or Mountain Lion to accept incoming connections. cd /System/Library/LaunchDaemons sudo ...
3
votes
2answers
10k views

Monitor Postfix outgoing mail delivery

I'm using GNU Mailman with Postfix to run a mailing list, and would like to monitor the delivery of outgoing mail, that is: for each mail sent from the list, check whether a 250 (OK) message was ...
2
votes
2answers
2k views

Configure a UNIX server to send its logs to a remote syslog server?

Is it possible? If so, how is it done exactly? The syslog.conf file doesn't help too much.
2
votes
2answers
192 views

Any ideas how I could get cpu and disk information from 2 raspberry pis connected on a network and displays them on my mac?

I have 2 raspberry pis on my home network performing different tasks. sometimes, I'd like to see their cpu and disk usage on my mac, without needing to login via ssh. is there a service (can this be ...
2
votes
2answers
10k views

How to enable syslog on AIX?

I'm trying to enable syslog on AIX. I followed the instructions in this post but it didn't work. This is my /etc/syslog.conf: mail.debug /var/log/mail.log rotate size 500k files 10 kern.debug ...
2
votes
1answer
442 views

Does the shellshock vulnerability leave any traces in log files?

I've patched my servers, but I'd also like to review my logs to see if there have been any compromises on them. Are there any consistent traces of exploits using this bug?
2
votes
1answer
88 views

Hostname is not displayed appropriately on command prompt & syslog messages

I try to set my hostname as 0.6.0.07252014 but when i see on command prompt and syslog messages, it is not getting displayed appropriately. Entered hostname: 0.6.0.07252014 Command prompt output: ...
2
votes
1answer
3k views

configure rsyslog server to log incomming messages with time of the rsyslog server

I would like to configure our rsyslog server to drop the timestamp of the incoming messages and replace them with time from the rsyslog server. Reason for this is that we have some system that don't ...
2
votes
1answer
288 views

How can I get Minecraft’s log into rsyslog?

Minecraft has a log file like this: 2012-10-27 21:45:47 [INFO] Starting Minecraft server on *:25565 2012-10-27 21:45:47 [INFO] Preparing level "../worlds/world3" 2012-10-27 21:45:48 [INFO] Preparing ...
2
votes
1answer
87 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
1
vote
1answer
786 views

Handling network plug/unplug in (Debian) Linux

I want to run a script when the switch goes down and an other when it goes up. Is there an easy way to pull this off in Debian (preferably with no other than system tools)? I suppose there is no ...
1
vote
1answer
820 views

How to capture the remote [ rsh/rcp ] login events and information using syslog.conf

I am exploring ways to capture the remote login events in my Linux server [ Oracle Linux 5x ]. Many users are connecting to the server using rcp and rsh protocols , I wish to capture the events [ such ...
1
vote
2answers
11k views

Why am I not getting text into /var/log/messages?

Today, I went to look at a backup RHEL5 server that doesn't usually need to get looked at very often. I found that /var/log/messages existed, but had a size of zero. Similarly, messages.1, messages.2, ...
1
vote
1answer
823 views

Useless nm_dbus_manager_init_bus error messages fill log

My system runs fine, but /var/log/messages repeats this message every few seconds, filling up my log directory: Oct 13 09:10:57 barry NetworkManager: <WARN> nm_dbus_manager_init_bus(): Could ...
1
vote
1answer
113 views

Setup for rsyslog to log from two network devices

I have 2 VOIP devices on my network (ht502 and ht704) which are both capable of sending their log info as syslog data. Receiver is a little Raspberry on Raspbian. I wanted to configure syslog to ...
1
vote
1answer
273 views

Centralized and local syslog

Right now I have my clients send any syslog messages to my centralized syslog server. However, if that server went down, I would be unable to capture any logs. Is there an option to have syslog write ...
1
vote
1answer
491 views

how to setup syslogd for network equipment such as routers

I seen syslog server logging options on various pieces of equipment on my network. I was wondering how would I setup a syslog server for them to broadcast to? Is there anything special I need to do. I ...
1
vote
0answers
23 views

rsyslogd: How to prevent logging in the /var/kern.log file and redirecting to another file?

I am trying to redirect iptables log to another file. Based upon my reading on the net, I did the following: In my iptables rule, I have rules like: iptables -A INPUT -s ... -j LOG --log-prefix ...
1
vote
1answer
283 views

Debian Jessie shutting down too fast (<1 second)

I recently have bought an SSD for my laptop and installed fresh Debian Jessie on it (I used Wheezy before). As a result, most operations on the laptop have sped up, and one operation in particular ...
1
vote
1answer
132 views

Snort installed on Ubuntu not sending alerts to syslog

I have a Magento website setup on a Linux machine that is based on a Bitnami ready-made image. The main goal is to be notified by email whenever there might be a potential attack on the site. My ...
1
vote
1answer
154 views

How can I use Pacemaker to setup a virtual IP for receiving syslog messages?

I need to setup a VIP / floating IP that network devices will send their syslog messages to. The idea behind the VIP is to have a highly available setup in an attempt to minimize the amount of logs ...
1
vote
0answers
180 views

boot.log created with permissions 644 instead of 600

My rsyslog.conf file has this line in it. #### GLOBAL DIRECTIVES #### $FileCreateMode 0600 Yet after every reboot the file permissions of /var/log/boot.log are still changed to 644. Every other ...
1
vote
1answer
293 views

Millisecond precision in syslogd on OS X

When I log messages to syslog in OS X (10.10.1), it truncates the timestamp to the second. If I log to a file, for example, I am able to capture milliseconds. Milliseconds matter when logs are coming ...
1
vote
0answers
74 views

rsyslog block by dns

rsyslog version is 5.8.6 The rsyslog client send message to remote server by udp, the remote server is used by domain, when the domian can't resolv and timeout, the rsyslog will be blocked. I add ...
1
vote
1answer
55 views

How do I view syslogs on a remote server with Windows and a web browser?

I have Ubuntu Clients running 12.04 LTS and a Ubuntu machine as the server. Now I have configured Ubuntu machines as syslog clients and they are intended to send their logs to the Ubuntu machine. But ...
1
vote
1answer
2k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
1
vote
2answers
67 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
1
vote
0answers
228 views

how to get logs in DD/MM/YYYY format and ipaddress format using rsyslog in ubuntu

Feb 4 10:32:57 master sshd[2070]: pam_unix(sshd:session): session opened for user root by (uid=0) Feb 4 10:32:59 master sshd[2070]: Received disconnect from 192.168.0.107: 11: disconnected by user ...
1
vote
0answers
151 views

Can a hostname be added to syslog-ng?

How can syslog-ng be configured to send both the hostname and the IP address. Currently, logs are sent with the IP address of the device/machine, but we want to add the hostname so I could keep my ip ...
1
vote
2answers
399 views

Making log message priority show up in syslog

I'm using Red Hat 6.0 on a testing server. My code contains syslog(pri,"(%u)%s",(unsigned int)getTid(),buf); The log message in syslog looks like (18597)DES=Recved confirmation of successful ...
0
votes
2answers
63 views

How to get Syslog Referer URL

I have two urls one.example.com and two.example.com, is there a way in the syslog conf of capturing which URL was used to hit the server? I need to modify a database filed based on this information. ...
0
votes
1answer
1k views

Logrotate says “log needs rotating” and then does nothing

I have the following logrotate configuration, and a 2 GB /var/log/messages: /var/log/messages /var/log/secure /var/log/maillog /var/log/spooler /var/log/boot.log /var/log/cron /var/log/network { ...
0
votes
1answer
320 views

Are there any command line syslog listeners for Linux?

We have several embedded systems that can be configured to send log data to a remote server for debugging purposes. However such is the hassle of configuring the developers machine to listen and ...
0
votes
1answer
76 views

Catching malware and demonstrate it through windows logs

I need to catch a virus/malware on purpose on a VM and demonstrate the infection through windows logs analysis. I am using both syslog and eventlog analyzer, but no sign of events logged. I caught on ...
0
votes
1answer
66 views

Is there a standard way of redirecting syslog events to the terminal?

Say I have a program which is a source of syslog events that I'd like to observe. Is there a standard way to run the program while sending the syslog events to its controlling terminal? Answers to ...
0
votes
0answers
35 views

Cisco ASA 5505 Syslog notifications Email setup

First of all, sorry for my bad english, I hope you will understand me. Iam using a Cisco ASA 5505 as my firewall and would like to setup syslog notifications when there is an error, to my Email. The ...
0
votes
0answers
34 views

Error in the rsyslog.conf file, how to log more than one device?

I am trying to log my dd-wrt router and my nas4free device. All logs are sent to a spare raspberrypi with a usb disk connected to to store the log files. But there is a problem with my rsyslog.conf ...
0
votes
0answers
70 views

Rsyslog: how to separate incoming logs with IP addresses

I am trying to setup an Rsyslog with the following configuration: I listen to the 514 port to receive data from different hosts: 172.16.111.222, 172.16.111.111 and 172.16.222.111. And I want to store ...
0
votes
0answers
27 views

Is there a general solution to delivering bytes to a destination with reliability and buffering configuration?

I have some application events. I want these events to be delivered to a few places: a periodically rotated file (in proprietary TSV format in my case), a message bus (Kafka in my case), for archival ...
0
votes
0answers
105 views

ISC DHCP Spamming /var/log/messages

I recently setup a Linux box to run a DHCP server. One of the prerequisites was to get all of its log messages onto a specific file outside of the /var/log folder. For that purpose, I inserted the ...
0
votes
0answers
17 views

Syslog declare variable and rewrite

I need to create a variable in syslog ng and manipulate the string. I have been through the docs and cannot seem to pinpoint what I need. So far I have the following: @define TEST "${TAGS}" rewrite ...
0
votes
0answers
38 views

Configuring a centralized rsyslog server with MySQL database, gathering events from multiple servers

I'm trying to configure my rsyslog server to collect logs from many servers and write them to a local database. The problem is, the server writes the data to the DB as local (host, ip, etc) I'm ...
0
votes
2answers
69 views

What does it mean when a kernel terminates a process with status 131?

I am trying to debug an issue where a redis-server process died, and in the syslog I see: Mar 9 23:56:44 ip-10-236-158-228 kernel: [25188369.962457] init: redis1-server main process (2822) ...
0
votes
0answers
60 views

rsyslog loses messages from firewall

I am trying to make rsyslog to log messages from iptables MASQUERADE. I have iptables LOG rule in nat table and PREROUTING chain before the MASQUERADE rules. The actual iptables rules: iptables -t ...
0
votes
1answer
36 views

File monitoring using syslog

Can rsyslog, syslog-ng programs monitor change of file? I want to monitor files and receive the changes made to the file by syslog on server. Thank you.