Hot answers tagged

23 votes

How to stop kernel messages from flooding my console?

You can also temporarily suppress all kernel logging to the console by using: sudo dmesg -n 1 See also: https://askubuntu.com/questions/97256/how-do-i-disable-messages-or-logging-from-printing-on-...
Marius's user avatar
  • 331
13 votes
Accepted

Simple way to generate syslog over TCP?

Netcat Send each line of file.log towards syslog server 127.0.0.1 on port 514 nc -q0 127.0.0.1 514 < file.log Send a simple string that will generate a single log entry: echo "message" | nc -q0 ...
Gohu's user avatar
  • 979
7 votes

Disable rsyslog remote server 's console messages

If you have the following line in your rsyslog.conf, you might consider commenting it out: *.emerg :omusrmsg:* But you might also consider seeing if ...
iwaseatenbyagrue's user avatar
7 votes
Accepted

Why does `& ~` mean "discard the messages that were matched in the previous line"?

It has nothing to do with bash nor iptables (as your question tags originally suggested). This /etc/rsyslog.d/iptables.conf is a part of rsyslogd config, not iptables config. & is a part of ...
Kamil Maciorowski's user avatar
5 votes

Rsyslog: how to separate incoming logs with IP addresses

You can't use placeholders directly in the rules. Use templates instead. The following should work: $template DynaFile,"/var/log/%FROMHOST-IP%/%syslogfacility-text%.log" *.* -?DynaFile Or, to be ...
MOzSalles's user avatar
  • 161
5 votes

rsyslog changing file owner

According to this documentation page, the PrivDropToUser and PrivDropToGroup directives tell rsyslog which user/group to become after initial startup. I would hypothesize that the syslog user doesn't ...
Joe Carey's user avatar
3 votes

OSX High Sierra wake reason syslog location?

Update/answer: syslog files are now part of Unified Logging, stored here: /var/db/diagnostics/ /var/db/uuidtext/ reference here for more info: https://eclecticlight.co/2017/09/23/sierras-unified-...
cc970's user avatar
  • 61
3 votes

How do I stop Tomcat / rsyslog from logging to console?

Found it (duh). Commenting out this in /etc/rsyslog.conf stopped the messages: # Everybody gets emergency messages *.emerg * And also found out the the fact that tomcat is ...
Jacco's user avatar
  • 51
3 votes

Bad minute in crontab?

Cron tab requires at least the first and last lines of the file not to be actual cron instructions. You can put comments instead - such as those below in a file: # START CRON JOB LIST * * * * * /path/...
Al Zziwa's user avatar
  • 131
3 votes
Accepted

How can I get my Cygwin SSH server to log into a file?

Do the following: Check whether sure you have an up-to-date Cygwin's setup utility (typically named setup-x86_64.exe); if you don't have one, get it from Cygwin.com. Run the Cygwin setup utility ...
einpoklum's user avatar
  • 9,393
3 votes
Accepted

How to get SSH logs and send to remote syslog server in macOS?

I ended using the log command to stream the messages to a file, and then use an external program (remote_syslog2) to stream the file contents to the remote syslog server. To write log messages to a ...
weiyin's user avatar
  • 251
2 votes

Bad minute in crontab?

I have faced a similar issue with this error: crontab: installing new crontab "/tmp/crontab.MswKCq":0: bad minute errors in crontab file, can't install. Do you want to retry the same edit? n crontab: ...
harshi gupta's user avatar
2 votes

How to stop kernel messages from flooding my console?

As this is a stack overflow related site, I'll start by saying you shouldn't switch off the output, you should address the errors. If you're in a console and can't even see what you're doing because ...
Geoff Johnson's user avatar
2 votes
Accepted

Debian Jessie with systemd: bloated log files are never deleted

logrotated does indeed manage those logs (for rsyslog and others). But... you are seeing the same file names constantly so that may be what you are thinking. Default config is to keep 4 or 7 old logs ...
ivanivan's user avatar
  • 2,942
2 votes
Accepted

How to disable RC4 cipher when using Syslog-NG 3.5 as Syslog Server over TCP/TLS?

Use the openssl ciphers -v command to see which ciphers your system supports, select one that that supports TLSv1.2, and set it in the cipher-suite() option. Or you can upgrade to a newer syslog-ng ...
Robert Fekete's user avatar
2 votes

Rsyslog: how to separate incoming logs with IP addresses

"~" means discard or stop, which is a rsyslog "action". So: if $fromhost-ip=='172.16.111.222' then /var/log/prod1/%FROMHOST-IP%/%syslogfacility-text%.log & ~ means that if the "if ... then ..." ...
Wei Wang's user avatar
  • 161
2 votes
Accepted

syslog : How can I filter syslog messages on windows 10?

how I can filter syslog messages to get only the ones I am interested in on Windows 10? Windows does not use syslog to save information about system events such as identification/authentication of ...
DavidPostill's user avatar
  • 156k
2 votes
Accepted

List of all the syslog messages?

Such a list is impossible, as unlike Windows events (which have a static list of IDs, a specific template for each ID, and only fill in parameters) syslog messages are simply free-form text. To ...
u1686_grawity's user avatar
2 votes

Rsyslog only log snort and dns

Add the # character to the beginning of the line to comment it out. For example: #module(load="imuxsock") # provides support for local system logging
user1061141's user avatar
2 votes
Accepted

Rsyslog logs readable by all users

This command tells rsyslog to create the file with only write permissions for group and other: $FileCreateMode 0022 Demonstration: touch x chmod 0022 x ls -l x -----w--w-+ 1 roaima roaima 0 Mar 28 09:...
Chris Davies's user avatar
  • 3,749
1 vote

Watch (rotating) log in screen

You need tail --follow=name /var/log/syslog The reason is that by default—supposedly for performance reason—tail opens the specified file and then watches the file descriptor it obtains from that ...
kostix's user avatar
  • 2,836
1 vote

Send specific rsyslog facility to remote server and not local

Many default rsyslog configs already have an example of excluding facilities: auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none /var/log/syslog The second line will ...
u1686_grawity's user avatar
1 vote
Accepted

How to disable syslog messaging to /var/log/syslog

Probably all you need is to comment out following (or similar) line in your /etc/rsyslog.conf: syslog.* /var/log/syslog Or reduce it to some more limiting level, like warn or err: ...
Jaroslav Kucera's user avatar
1 vote
Accepted

rsyslogd: how can you use $ModLoad imfile more than once?

I'm not familiar with loggly.com in particular, but I am familiar with rsyslog. All of the conf files in /etc/rsyslog.d/ are being incorporated by the /etc/rsyslog.conf file where it says: $...
TopHat's user avatar
  • 356
1 vote

Running OSX as a syslog server

I had the same issue, needed a syslog server running on my OSX platform to capture syslog events from my network devices. I solved this issue by downloading and installing the following application "...
Mary.S's user avatar
  • 11
1 vote
Accepted

php7 - prevent errors being broadcast

Turns out that putting ForwardToWall=no & ForwardToSyslog=yes into /etc/systemd/journald.conf resolves the issue. Emerg message from PHP get caught with this custom Rsyslog config: user.* ...
IanB's user avatar
  • 687
1 vote
Accepted

Missing /var/log/messages file in CentOS 6.8

Unless you have any specific requirement not to, I'd remove the old version & its config and install the current (version 8) with a fresh config file and try with a fresh install. Presuming you ...
user3788685's user avatar
1 vote

Monitor Postfix outgoing mail delivery

You can use pflogsumm to get an overview of entries in the logs: cat /var/log/mail.log | pflogsumm Grand Totals ------------ messages 26 received 25 delivered 0 forwarded ...
cweiske's user avatar
  • 1,977
1 vote

Monitor Postfix outgoing mail delivery

try this cat /var/log/maillog |grep -v "relay=local" |grep "relay=" |grep "status=sent" you will find very helpful info here http://en.redinskala.com/postfix-maillog-interpretation/
Christoforos's user avatar
1 vote

Rsyslog outputting to custom log file

@Atomiklan mentioned he had to change the owner/group of his custom file to syslog/adm. I tried that and it worked... But the comment from @MichaelKjörling seemed right, too: why not just let the ...
Dan H's user avatar
  • 141

Only top scored, non community-wiki answers of a minimum length are eligible