23
votes
How to stop kernel messages from flooding my console?
You can also temporarily suppress all kernel logging to the console by using:
sudo dmesg -n 1
See also: https://askubuntu.com/questions/97256/how-do-i-disable-messages-or-logging-from-printing-on-...
13
votes
Accepted
Simple way to generate syslog over TCP?
Netcat
Send each line of file.log towards syslog server 127.0.0.1 on port 514
nc -q0 127.0.0.1 514 < file.log
Send a simple string that will generate a single log entry:
echo "message" | nc -q0 ...
7
votes
Disable rsyslog remote server 's console messages
If you have the following line in your rsyslog.conf, you might consider commenting it out:
*.emerg :omusrmsg:*
But you might also consider seeing if ...
7
votes
Accepted
Why does `& ~` mean "discard the messages that were matched in the previous line"?
It has nothing to do with bash nor iptables (as your question tags originally suggested). This /etc/rsyslog.d/iptables.conf is a part of rsyslogd config, not iptables config.
& is a part of ...
5
votes
Rsyslog: how to separate incoming logs with IP addresses
You can't use placeholders directly in the rules. Use templates instead. The following should work:
$template DynaFile,"/var/log/%FROMHOST-IP%/%syslogfacility-text%.log"
*.* -?DynaFile
Or, to be ...
5
votes
rsyslog changing file owner
According to this documentation page, the PrivDropToUser and PrivDropToGroup directives tell rsyslog which user/group to become after initial startup. I would hypothesize that the syslog user doesn't ...
3
votes
OSX High Sierra wake reason syslog location?
Update/answer: syslog files are now part of Unified Logging, stored here:
/var/db/diagnostics/
/var/db/uuidtext/
reference here for more info:
https://eclecticlight.co/2017/09/23/sierras-unified-...
3
votes
How do I stop Tomcat / rsyslog from logging to console?
Found it (duh).
Commenting out this in /etc/rsyslog.conf stopped the messages:
# Everybody gets emergency messages
*.emerg *
And also found out the the fact that tomcat is ...
3
votes
Bad minute in crontab?
Cron tab requires at least the first and last lines of the file not to be actual cron instructions. You can put comments instead - such as those below in a file:
# START CRON JOB LIST
* * * * * /path/...
3
votes
Accepted
How can I get my Cygwin SSH server to log into a file?
Do the following:
Check whether sure you have an up-to-date Cygwin's setup utility (typically named setup-x86_64.exe); if you don't have one, get it from Cygwin.com.
Run the Cygwin setup utility
...
3
votes
Accepted
How to get SSH logs and send to remote syslog server in macOS?
I ended using the log command to stream the messages to a file, and then use an external program (remote_syslog2) to stream the file contents to the remote syslog server.
To write log messages to a ...
2
votes
Bad minute in crontab?
I have faced a similar issue with this error:
crontab: installing new crontab
"/tmp/crontab.MswKCq":0: bad minute
errors in crontab file, can't install.
Do you want to retry the same edit? n
crontab: ...
2
votes
How to stop kernel messages from flooding my console?
As this is a stack overflow related site, I'll start by saying you shouldn't switch off the output, you should address the errors.
If you're in a console and can't even see what you're doing because ...
2
votes
Accepted
Debian Jessie with systemd: bloated log files are never deleted
logrotated does indeed manage those logs (for rsyslog and others). But... you are seeing the same file names constantly so that may be what you are thinking. Default config is to keep 4 or 7 old logs ...
2
votes
Accepted
How to disable RC4 cipher when using Syslog-NG 3.5 as Syslog Server over TCP/TLS?
Use the openssl ciphers -v command to see which ciphers your system supports, select one that that supports TLSv1.2, and set it in the cipher-suite() option.
Or you can upgrade to a newer syslog-ng ...
2
votes
Rsyslog: how to separate incoming logs with IP addresses
"~" means discard or stop, which is a rsyslog "action".
So:
if $fromhost-ip=='172.16.111.222' then /var/log/prod1/%FROMHOST-IP%/%syslogfacility-text%.log
& ~
means that if the "if ... then ..." ...
2
votes
Accepted
syslog : How can I filter syslog messages on windows 10?
how I can filter syslog messages to get only the ones I am interested in on Windows 10?
Windows does not use syslog to save information about system events such as identification/authentication of ...
2
votes
Accepted
List of all the syslog messages?
Such a list is impossible, as unlike Windows events (which have a static list of IDs, a specific template for each ID, and only fill in parameters) syslog messages are simply free-form text.
To ...
2
votes
Rsyslog only log snort and dns
Add the # character to the beginning of the line to comment it out.
For example: #module(load="imuxsock") # provides support for local system logging
2
votes
Accepted
Rsyslog logs readable by all users
This command tells rsyslog to create the file with only write permissions for group and other:
$FileCreateMode 0022
Demonstration:
touch x
chmod 0022 x
ls -l x
-----w--w-+ 1 roaima roaima 0 Mar 28 09:...
1
vote
Watch (rotating) log in screen
You need tail --follow=name /var/log/syslog
The reason is that by default—supposedly for performance reason—tail
opens the specified file and then watches the file descriptor it obtains
from that ...
1
vote
Send specific rsyslog facility to remote server and not local
Many default rsyslog configs already have an example of excluding facilities:
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none /var/log/syslog
The second line will ...
1
vote
Accepted
How to disable syslog messaging to /var/log/syslog
Probably all you need is to comment out following (or similar) line in your /etc/rsyslog.conf:
syslog.* /var/log/syslog
Or reduce it to some more limiting level, like warn or err:
...
1
vote
Accepted
rsyslogd: how can you use $ModLoad imfile more than once?
I'm not familiar with loggly.com in particular, but I am familiar with rsyslog. All of the conf files in /etc/rsyslog.d/ are being incorporated by the /etc/rsyslog.conf file where it says:
$...
1
vote
Running OSX as a syslog server
I had the same issue, needed a syslog server running on my OSX platform to capture syslog events from my network devices. I solved this issue by downloading and installing the following application "...
1
vote
Accepted
php7 - prevent errors being broadcast
Turns out that putting ForwardToWall=no & ForwardToSyslog=yes into /etc/systemd/journald.conf resolves the issue.
Emerg message from PHP get caught with this custom Rsyslog config:
user.* ...
1
vote
Accepted
Missing /var/log/messages file in CentOS 6.8
Unless you have any specific requirement not to, I'd remove the old version & its config and install the current (version 8) with a fresh config file and try with a fresh install.
Presuming you ...
1
vote
Monitor Postfix outgoing mail delivery
You can use pflogsumm to get an overview of entries in the logs:
cat /var/log/mail.log | pflogsumm
Grand Totals
------------
messages
26 received
25 delivered
0 forwarded
...
1
vote
Monitor Postfix outgoing mail delivery
try this
cat /var/log/maillog |grep -v "relay=local" |grep "relay=" |grep "status=sent"
you will find very helpful info here http://en.redinskala.com/postfix-maillog-interpretation/
1
vote
Rsyslog outputting to custom log file
@Atomiklan mentioned he had to change the owner/group of his custom file to syslog/adm. I tried that and it worked...
But the comment from @MichaelKjörling seemed right, too: why not just let the ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
syslog × 144linux × 63
logging × 33
ubuntu × 12
syslogd × 11
networking × 9
macos × 9
redhat-enterprise-linux × 7
debian × 6
centos × 6
systemd × 5
security × 4
docker × 4
windows × 3
performance × 3
unix × 3
iptables × 3
remote × 3
console × 3
selinux × 3
elasticsearch × 3
command-line × 2
router × 2
ssh × 2
usb × 2