syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

learn more… | top users | synonyms

0
votes
0answers
17 views

Ubuntu Server 16.04 - OpenVPN seems not to start, no logs get written

I installed and oepnvpn on a ubuntu server 16.04 by following the following guideline how-to-set-up-an-openvpn-server-on-ubuntu when I start the openVPN server with: service openvpn start it looks ...
0
votes
0answers
15 views

dmesg - force using syslog, sysctl

I know how to tell dmesg to write messages to syslog, but I cannot find the property I want so that I don't have to issue a command and just have it be a "configuration" automatically applied via ...
3
votes
1answer
54 views

How can I determine what is printing on my console?

how determine the owner of this output?? what is flooding my console? udev syslog syslogng? edit to accepted answer: I'll accept answer but... I don't use init instead I use systemd. kernel ...
0
votes
0answers
11 views

How to redirect kernel: lockd: messages to another file from syslog.conf

I do not understand the syntax in syslog.conf for redirecting the following kind of messages (kernel: lockd: ): Jun 13 11:53:43 myserver kernel: lockd: cannot monitor 192.254.223.233 I believe ...
0
votes
0answers
23 views

rsyslog remote logging capturing local messages

We have setup a RHEL 6 server to capture syslogs from remote hosts. Although its working and I am capturing the logs, all of the local system logs are being directed into the remote log directory ...
1
vote
1answer
36 views

fail to log through rsyslog on an archlinux system

Using release 2016.03.01 from Archlinux, with package rsyslogd 8.18.0, I started from the minimal configuration built from Very simple config : # cat rsyslog.conf $ModLoad immark $ModLoad imudp $...
1
vote
0answers
49 views

Why does journalctl say “— no entries --”?

For example: ┌─[10:50:38/hypership/root/~] └─╼ journalctl -b No journal files were found. -- No entries -- ┌─[10:50:46/hypership/root/~] └─╼ journalctl --verify No journal files were found. /var/...
1
vote
0answers
36 views

fail to log from my app through rsyslogd in a linux container

Running an archlinux container on an archlinux host, both using rsyslog with the same configuration file: $ cat /etc/rsyslog.conf # Minimal config $ModLoad imuxsock # provides support for local ...
2
votes
1answer
48 views

Systemd Python service not sending all output to syslog

I have a custom service and have explicitly called for all stdout & stderr to be sent to syslog in the config file, however only some of the output appears in both syslog and the journal (they are ...
1
vote
1answer
45 views

Strange lines in /var/log/message folder of Centos machine

Below are lines from my /var/log/messages. Can someone help me to understand what these lines mean? I am running a syslog server on this machine. I want to know if these messages would stop the ...
1
vote
1answer
68 views

File location for Syslogs in Centos machine

I am running syslog server (rsyslog 8) on my centos machine. I want to map other device in my network to send the logs to this syslog server. If mapping is done correctly where exactly the syslogs ...
1
vote
1answer
30 views

Separate server's hostname appearing in this server's cron logs

I get entries like these in /var/log/cron, in a host named SERV2 (RHEL 6.2): Apr 21 14:50:01 SERV1 CROND[14799]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1) Apr 21 15:20:01 serv2 CROND[24438]: (root) ...
2
votes
1answer
24 views

use a different socket than /dev/log, system-wide

Is there a way to make a whole Debian (Jessie) installation use a different syslog socket than /dev/log (like, for example, /tmp/my-other-log) ? Reason: I'm running Debian Jessie in a chroot ...
0
votes
2answers
195 views

Can I stop IPv6 “Router Advertisement” filling syslog without disabling IPv6?

My syslog looks like this: Apr 1 19:05:25 raspberrypi dhcpcd[699]: eth0: Router Advertisement from fe80::c23e:fff:fe63:5170 Apr 1 19:07:35 raspberrypi dhcpcd[699]: eth0: Router Advertisement from ...
1
vote
1answer
50 views

Changing the Facility of outgoing syslog message using rsyslog configuration

I need to change the facility of the syslog message going out to a remote syslog server. I am using rsyslog in my system. I am using the following configuration to forward logs to another syslog ...
0
votes
0answers
151 views

System log full of session and slice messages

I have a new CentOS 7 installation, and noticed that my /var/log/messages file is full of messages like this Mar 6 08:40:01 myhostname systemd: Started Session 2043 of user root. Mar 6 08:40:01 ...
0
votes
0answers
20 views

NetworkManager[1027] errors in syslog

Looking at my /var/logs/syslog I see many errors regarding the network manager. What is causing this? Being that I can connect to wifi and ethernet, what is going on here and it is causing undesirable ...
1
vote
0answers
41 views

Arch Linux - Cronie is not working and nestat does not output logs?

I added a cronjob via crontab -e which is to be executed every minute. I enabled and started cronie on systemctl. Set editor $ export EDITOR=vim Add cront tasks $ crontab -e * * * * * Rscript /...
2
votes
2answers
296 views

How to configure logging inside a Docker container?

I was trying to dockerize (into Debian 8.2) an OpenVPN server (yes, I do know, there already are such containers) but something went wrong inside the container and the server failed to start. I ...
1
vote
1answer
50 views

syslog configuration - repeated alert?

i am using solaris 10 and saw this line in /etc/syslog.conf *.err;kern.debug;daemon.notice;mail.crit;auth.debug;local2.notice /var/adm/messages Does it mean that, if I have a auth.err, the ...
1
vote
0answers
249 views

how to have syslog not log particular warnings?

Short Version: I want to stop the following message from appearing in my syslog. They pertain to a USB port on my keyboard that can be ignored: Feb 9 23:33:45 sunfire kernel: [ 8163.156041] usb 3-6....
0
votes
0answers
37 views

How to get syslog from another device to ubuntu

I am trying to get syslog from my router, and seems it is sending the messages to my Ubuntu 15.10. I have restarted the syslog but I don't see any logs. I believe I need to configure the file 50-...
0
votes
0answers
17 views

Rsyslog not creating dynamic directories

I have Red Hat Enterprise Linux Server release 6.5 running rsyslogd 5.8.10 I'm trying to collect logs from a remote client (VM1) and I have the following line configured if $inputname == 'imudp' ...
0
votes
0answers
15 views

How can I query rsyslog settings?

I am using rsyslog for program logging and system logging so I have unified log files. I'm having some messages dropping out and I'm not sure why, but I think it may be a configuration option set ...
0
votes
0answers
19 views

log of cron,mail, auth are coming to syslog

I have log messages configured separately for mail, cron, auth. But it's still appears in syslog, also there are 0 MB files created in syslog. What might be the reason? $ cat /etc/rsyslog.conf # ...
0
votes
0answers
23 views

Debian stretch logs complaining about cracklib.conf “file: not found”

For some reason, my Debian Stretch system has libcrack2 and related libraries installed. Now, every once in a while I get an anacron about a failure in updating cracklib: /usr/sbin/update-cracklib: ...
1
vote
1answer
63 views

Capture Linux shell Commands to file

I'm trying to capture all Linux Shell command to some file. I tried to use the auditd service but it's not giving me the output I want. I searched a little and found some nice solution . Step 1: vi ...
1
vote
2answers
166 views

Merging log files with different timestamp formats

I have two types of log files Standard Syslog format The timestamp looks as below 5:2015 Dec 21 07:35:06:ABC:foo1:1559: common.c:946:Enabling filter 6:2015 Dec 21 07:35:08:ABC:bar1:1461: api.c:...
1
vote
0answers
93 views

Error cannot open tty-output Linux

I have installed one paravirtualized image, Debian 8, in XenServer, and I'm adding a script to create a template that come. Added in the startup script with the command systemctl enable script. Scritp ...
0
votes
1answer
11 views

soft-macros are empty in csv parser

I'm trying to parse log messages that are received from a udp port and insert them into a MYSQL database. My destination in my syslog-ng.conf file is as follows: source syslog_udp { udp(port(<...
2
votes
1answer
719 views

Send Logs to multiple syslog servers

Previously we were using one Logging server. But now we have added one extra Logging server which will also be storing logs received from client . I need to know how to add these two Syslog servers on ...
0
votes
1answer
138 views

Disable syslog logging for auditd

auditd sending logs to /var/logs/messages we want to disable it. How to do that? /etc/audisp/plugins.d/syslog.conf i changee active = no but still sending lots to syslog
1
vote
0answers
14 views

Syslog config syntax

I have setup a syslog server to test it out and its working perfectly fine. I want to understand what this syntax is actually doing in the rsyslog.conf file of the server that I added as guided by ...
1
vote
0answers
33 views

accessing old data from syslog

I look after various MySQL DB's which we have recently moved to Linux servers (from Windows). They run fine and everything is good. However, this morning i needed to check the error logs, but these ...
3
votes
1answer
157 views

Disable logging to syslog

I am experimenting with aircrack-ng and I managed to fill up / with the syslog file complaining about what I'm doing to the poor wifi card. How can I disable logging to syslog for the duration of my ...
1
vote
0answers
23 views

Suppress Rsyslog to terminal

When I use Rsyslog (in bash using logger and in Node using winston-syslog), all log levels are also shown on the terminal window. I only want to log these events, and silent the output unless they ...
1
vote
1answer
123 views

File descriptor to read kernel log messages?

I am using syslog to read kernel log messages with SYSLOG_ACTION_READ. I would like to know if it's possible to "obtain" a file descriptor to "something" that would send the kernel logs (like what ...
5
votes
1answer
285 views

logging to /dev/xconsole does not work properly

I am using rsyslog, and I want to send logs to /dev/xconsole. I have following relevant line in /etc/rsyslog.conf *.*;cron.!=info;mail.!=info |/dev/xconsole This works only partially. It looks ...
3
votes
0answers
165 views

NUL entry in syslog?

My servers went down on the 30th. It just came back online today. At first I thought it was the router because the router the server is connected to is a bit squirrely but when I checked syslog I have ...
0
votes
1answer
95 views

rsyslogd running but cannot connect on port?

These are my configuration lines on rsyslog.conf $ModLoad imudp $UDPServerAddress 127.0.0.1 $UDPServerRun 1029 After restarting I run sudo netstat -taupn | grep syslog and it's running on port ...
1
vote
0answers
182 views

Where do these boot log entries come from and who creates them?

I'm wondering what kind of code writes these first two lines into /var/log/syslog while booting my machine: Aug 4 10:13:48 HOSTNAME kernel: imklog 5.8.11, log source = /proc/kmsg started. Aug 4 10:...
0
votes
0answers
125 views

VSFTP user login & activity monitoring

We have a linux box that is configured with vsftp for our ftp sessions. Unfortunately, for the last few days, we've found that files served by vsftpd have been lost (deleted). I would like to know: ...
1
vote
2answers
415 views

What causes the ata exceptions in my syslog and how to solve them

I have a new system with debian (omv) a SSD hard drive for the OS and a software RAID 6 for the data. I only saw now that I have very regular exceptions in my syslog. I'm worried now, what could ...
4
votes
1answer
4k views

What does “kernel:NMI watchdog: BUG: soft lockup” followed by other errors mean?

I have my terminal always opened (Fedora 22), because all my work I do from there. Sometimes I search some info in browser or just have fun. After 20-30 minutes of browsing (browser starts not from ...
0
votes
1answer
501 views

Is there a way to force syslog flushes to disk immediately?

I have this vague recollection of there being a switch you can configure syslog with which would force it to flush logs to disk right away so when your system hung you might be able to get some useful ...
0
votes
2answers
409 views

syslog error, unknown priority name “”

I am editing syslog and want to log ppp to a log. I added the last two lines to do so, as recommended in the ppp configuration. It appears to log ppp but also other things, due to the * I guess. I ...
2
votes
1answer
1k views

How do I disable local syslog, and is it a good idea?

I use centralized logging with rsyslog, which means that there are dedicated logging servers which collect syslog messages from all servers. All inspections of logs are done from those logging ...
2
votes
1answer
266 views

How to explain strange kernel messages?

I have a server running on Debian Wheezy 3.2.68-1+deb7u1 x86_64. Lately strange records in /var/log/messages appeared. First messages of this log starts just after server reboot. 6.222.18 LEN=44 TOS=...
13
votes
1answer
5k views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
1
vote
0answers
69 views

Failed umount /home (ZFS) on shutdown

During shutdown I notice an error reported in the logging messages on the screen that the umounting of /home (a ZFS filesystem) failed. (After restart I don't find any respective log entry in the ...