The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
28 views

Stopping syslogd also closes /dev/log UNIX domain socket

I am working on a project and from some testing I found out that stopping syslogd daemon also closes /dev/log socket. Is there some other way so that even if syslogd is down, /dev/log socket still ...
1
vote
1answer
70 views

How do I troubleshoot ssh tunnels disconnection?

I am using SSH tunnels launched via autossh at boot on a device installed at remote locations. Up to now everything was working fine but yesterday the connection partly went down and autossh wouldn't ...
3
votes
1answer
25 views

Extract file from completely disconnected machine, possibly via Kernel messages

I have a VPS running inside an OpenStack cloud that has more or less crashed completely - the provider hasn't been able to get any kind of networking on it for over 2 days, seems completely broken on ...
0
votes
1answer
40 views

When does Linux send a root mail and how to force it for testing purposes?

Let's say I want to test root mail functionality after I set up nullmailer, how do I force my Debian Linux system to send a root mail? And furthermore on which events does Linux send root mails at ...
3
votes
1answer
134 views

Why does abrt take over log output for a process that didn't crash?

Short version: I have a long-running process (web proxy) that logs (verbosely) to syslog Something bad happens, and abrt steps in somehow The process continues to run... ...but all log messages to ...
1
vote
2answers
75 views

HPUX Logging Logins

I'm trying to enable security logging on some HPUX11 systems. I can get HPUX to generate a message that: a login is being attempted (username, no source IP) a login failed (no username or source ...
0
votes
0answers
24 views

Syslog log analyzer

Is there any syslog log analyzer script I can install on hosting to track user activity? I have giant user log and I need more specific log details.
2
votes
1answer
170 views

How to disable systemd's “Time has been changed” message spam in /var/log/syslog on Debian jessie?

Due to combined use of Debian jessie, that uses systemd by default, and sdwdate (that uses Slow Clock Adjuster ( gh )), my system clock is frequently changed. As a result /var/log/syslog gets ...
0
votes
1answer
40 views

dansguardian not using syslog

I configured dansguardian to use syslog, but I still see files in /var/log/dansguardian getting populated. I saw there was a bug for Fedora 12, I am using Fedora 20. Is this a known issue or is it a ...
0
votes
1answer
595 views

Logstash agent does not send logs to Redis server

I can't ship logs from Logstash to Redis server. Getting this error: Failed to send event to redis {:event=>#<LogStash::Event:0x7ccb7867 @cancelled=false, @data={"message"=>"welocwelcome", ...
1
vote
1answer
210 views

upstart writing to syslog in a simple way

I have an upstart script that uses pre-start script exec >/dev/kmsg 2>&1 echo starting program # run my program here npm install node app.js end script to redirect output of a ...
3
votes
0answers
285 views

Why does rsyslogd not honor the following lines in rsyslog.d

This is somewhat related to my previous question here. I have three files in /etc/rsyslog.d which is included from /etc/rsyslog.conf: 00-iptables.conf 50-default.conf postfix.conf The first one ...
2
votes
1answer
96 views

Remote syslog command line Client

I use logger pretty regularly, but is there a FOSS command line tool for remote submission of syslog messages over the network? Right now, I have to configure a facility/priority pair to submit to a ...
4
votes
1answer
56 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
3
votes
1answer
1k views

rsyslog not logging

This is an odd issue. I was testing the chrony/ntp services on a RHEL7 VM and was resetting its time as well as the host's. Once I was satisfied with it I checked /var/log/messages and realized it ...
4
votes
2answers
117 views

rsyslog - action AND action

I want to create rule to send data from facility to file AND to MySQL database. How it can realized? Only by adding second line like: syslog.* /var/log/syslog.log syslog.* ...
6
votes
1answer
371 views

Where does the kernel ring buffer sit compared to rsyslog?

Is rsyslog just an abstraction layer on top of the kernel ring buffer? Or is the kernel ring buffer its own entity and rsyslogs interaction is like that of any other "application"?
2
votes
1answer
109 views

Best practices for maintaining error logs (system, device driver & application)

I have many Pandaboards with Ubuntu armhf and one PC server networked with Wi-Fi. On each embedded board I have a real-time application running constantly. I don't know how to reasonably maintain the ...
2
votes
1answer
361 views

How to redirect Tomcat logs back to catalina.out instead of syslog?

In the release notes for openSUSE 13.1, developers proudly stated that Tomcat logs are no longer being written into catalina.out, but rather written to syslog. I saw similar behaviour with new ...
1
vote
2answers
44 views

Basic syslog confusion

When an application logs using syslog does it mean that it stores the logs somewhere under /var/log? Or can it be elsewhere as well?
0
votes
1answer
155 views

Separate SSHD Authpriv logs into /var/log/sshd, all other authpriv logging goes to messages

Right now, sshd is using the authpriv facility. The level of logging is fine, but I don't want it in the syslog, I want it to go to /var/log/sshd (which doesn't yet exist) on Red Hat Linux/Enterprise ...
6
votes
3answers
571 views

How to send snmp trap when syslog is logged?

I need to send snmp trap n number of host whenever any syslog is logged in /var/log/messages. How can I do this, can anybody give me any idea?
3
votes
1answer
723 views

Does “syslogd” cause “cat /proc/kmsg” not to work properly?

I'm using cat /proc/kmsg to determine which process and file was involved in certain disc writes. I'm using the method given in this answer. But when I use cat /proc/kmsg, the output doesn't always ...
1
vote
1answer
131 views

journalctl process groups

I recently tried setting up the ChrootDirectory property in sshd_config and ran into the ownership problems for chroot targets. After i have fixed the problem i noticed that syslog-ng had created log ...
2
votes
3answers
2k views

How to make log-rotate change take effect

I followed this link to change log-rotate configuration. https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s1-logfiles-locating.html After I made the ...
0
votes
1answer
55 views

Getting info from syslog.txt

I am looking for some cool commands I can use to pull pieces of information out of a syslog. Mostly using this as a learning experience. Let's say I have a syslog showing dropped/accepted ...
1
vote
1answer
394 views

syslog-ng won't write to log file - “No such file or directory”

I have set up a fresh instance of syslog-ng using the conf file included below. I can see that messages are trying to route to the right place (var/log/bash) when I look in val/log/messages. But I ...
0
votes
1answer
145 views

Failover with Syslog-ng?

Is it possible to set up a failover mechanism with Syslog-NG opensource edition? I want that the syslog-ng Daemon logs to a remote Loghost and switches to an other server if the first would go down ...
0
votes
0answers
61 views

Smarter log rotation

I want to reduce the amount of logs in my system, but reduce them smartly. The general idea is, each time you rotate, look for any warning/error/critical level logs, and keep 2 minutes of log context ...
2
votes
0answers
56 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
3
votes
1answer
214 views

rsyslog conf file problem

I'm running Fedora (F19) and my /var/log/messages is filled with info coming from avahi-daemon: stuff like: Jan 21 14:13:42 localhost avahi-daemon[554]: Invalid response packet from host 10.10.22.3. ...
3
votes
2answers
152 views

How to implement logwatch functionality on top of systemd journal?

Logwatch scans logfiles with regular intervals, collects errors and stuff, then mails it to the admin. This was back in syslog and logfiles days. What's the corresponding solution for systemd's ...
2
votes
2answers
263 views

Linux Mint 15 (Ubuntu 13.04) Spontaneously Crashing: Please help me understand the syslog messages

I'm running Linux Mint 15, and my machine is spontaneously rebooting. It appears to happen when the computer is under load. Normal use doesn't seem to cause it, but I'm trying to create a windows vm ...
1
vote
0answers
31 views

syslog: process specific priority

I have two user processes A and B. Both use syslog using facility LOG_USER. I want to have different threshold levels for them: For A, only messages of priority ERR-and-above must be logged For B, ...
2
votes
1answer
213 views

Why Linux syslog file does not follow the RFC3339 protocol?

Why Linux syslog file: /var/log/syslog does not follow the timestamp format defined in the protocol http://tools.ietf.org/html/rfc5424#page-11?
0
votes
0answers
173 views

What is causing my UMTS modem to hang up?

I am trying to established PPP communication to my mobile ISP with wvdial, but I always get modem hang up message. In my syslog I can see some activity: Oct 29 07:48:47 linuxbox kernel: ...
2
votes
1answer
592 views

How do I send all information in /var/adm/message file to a remote system?

I'm trying to figure out how to send all information that is normally identified in the /var/adm/message file on a Solaris system to a remote system.
1
vote
2answers
955 views

init, syslog and stdout/stderr

I'm trying to build an embedded system with linux. (Means very few resources and not much else than busybox.) I'd like to make sure, that everything is going to syslog. I'm using the newest version of ...
1
vote
1answer
194 views

Ubuntu 12.04LTS becoms slow and jerky randomly for a mintue and then becomes normal by itself [closed]

I am using Ubuntu 12.04LTS on my Toshiba satellite L510 and I have only Ubuntu installed. The system becomes slow and jerky by itself after every 10minutes or so and the remains like that for less ...
4
votes
1answer
6k views

How can I configure syslog.conf file, to log iptables messages in a separate file?

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
4
votes
1answer
82 views

dmesg email digest

I have a remote server which has some issues (Seem hardware related) which means that it logs KVM errors and then sometime later it becomes unresponsive and locked up. There is an often an early ...
1
vote
0answers
25 views

Configure syslog.conf file [duplicate]

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
0
votes
3answers
145 views

Search in iptables.log file takes a long time

I have used iptables to save information about connections by modifying the /etc/syslog.conf file to save information in /var/log/iptables.log. So, every X hours, I need to extract information from ...
2
votes
1answer
263 views

Syslog TLS Compression and Message Buffering

Where I work, we have a site-to-site VPN tunnel set up between our main data center and a third party data center that does some Oracle PaaS for us. Since they charge per-VM, we're monitoring the ...
4
votes
2answers
2k views

What is the local6 (and all other local#) facilities in syslog?

What I understand On *nix servers, we configure sending logs using facility.severity, where facility is the name of the (let's call it) "component" of the system, such as kernel, authentication, and ...
3
votes
1answer
3k views

How can dmesg content be logged into a file?

I'm running a Linux OS that was built from scratch. I'd like to save the kernel message buffer (dmesg) to a file that will remain persistent between reboots. I've tried running syslogd but it just ...
2
votes
1answer
237 views

Solaris 11 and syslog over TLS

Does Oracle support support remote syslog over TLS/SSL on Solaris 11? I found it can be done with rsyslog, but is rsyslog default on Solaris 11 and if rsyslog is not default, does Oracle support a ...
2
votes
1answer
445 views

Periodically get new lines from file, possibly logrotated

I'm looking for a fairly simple way (no development involved -- I could write this in Python but I'm hoping there's something already out there). I have a log file (in my case written by rsyslogd). ...
2
votes
1answer
3k views

Messages from syslogd, what do they mean and what do I do?

Recently, these messages started popping up straight into my prompt when I'm connected to the OpenSUSE system in question via PuTTY: Message from syslogd@host at Aug 5 11:04:03 ... kernel:[ ...
1
vote
1answer
1k views

Pimp rsyslogd to have less i/o (cron, pam,…) and less logging

On my raspberry I really don't need crons and pam logging and I want to have less i/o to make the SD card life a little longer.. I have already removed cron with the second line cron.none, I'm ...