The tag has no usage guidance, but it has a tag wiki.

learn more… | top users | synonyms

0
votes
0answers
5 views

How to get syslog from another device to ubuntu

I am trying to get syslog from my router, and seems it is sending the messages to my Ubuntu 15.10. I have restarted the syslog but I don't see any logs. I believe I need to configure the file ...
0
votes
0answers
8 views

Rsyslog not creating dynamic directories

I have Red Hat Enterprise Linux Server release 6.5 running rsyslogd 5.8.10 I'm trying to collect logs from a remote client (VM1) and I have the following line configured if $inputname == 'imudp' ...
0
votes
0answers
6 views

How can I query rsyslog settings?

I am using rsyslog for program logging and system logging so I have unified log files. I'm having some messages dropping out and I'm not sure why, but I think it may be a configuration option set ...
0
votes
0answers
12 views

log of cron,mail, auth are coming to syslog

I have log messages configured separately for mail, cron, auth. But it's still appears in syslog, also there are 0 MB files created in syslog. What might be the reason? $ cat /etc/rsyslog.conf # ...
0
votes
0answers
8 views

Debian stretch logs complaining about cracklib.conf “file: not found”

For some reason, my Debian Stretch system has libcrack2 and related libraries installed. Now, every once in a while I get an anacron about a failure in updating cracklib: /usr/sbin/update-cracklib: ...
1
vote
1answer
30 views

Capture Linux shell Commands to file

I'm trying to capture all Linux Shell command to some file. I tried to use the auditd service but it's not giving me the output I want. I searched a little and found some nice solution . Step 1: vi ...
1
vote
2answers
53 views

Merging log files with different timestamp formats

I have two types of log files Standard Syslog format The timestamp looks as below 5:2015 Dec 21 07:35:06:ABC:foo1:1559: common.c:946:Enabling filter 6:2015 Dec 21 07:35:08:ABC:bar1:1461: ...
1
vote
0answers
45 views

Error cannot open tty-output Linux

I have installed one paravirtualized image, Debian 8, in XenServer, and I'm adding a script to create a template that come. Added in the startup script with the command systemctl enable script. Scritp ...
1
vote
0answers
6 views

soft-macros are empty in csv parser

I'm trying to parse log messages that are received from a udp port and insert them into a MYSQL database. My destination in my syslog-ng.conf file is as follows: source syslog_udp { ...
3
votes
1answer
144 views

Send Logs to multiple syslog servers

Previously we were using one Logging server. But now we have added one extra Logging server which will also be storing logs received from client . I need to know how to add these two Syslog servers on ...
0
votes
1answer
62 views

Disable syslog logging for auditd

auditd sending logs to /var/logs/messages we want to disable it. How to do that? /etc/audisp/plugins.d/syslog.conf i changee active = no but still sending lots to syslog
1
vote
0answers
12 views

Syslog config syntax

I have setup a syslog server to test it out and its working perfectly fine. I want to understand what this syntax is actually doing in the rsyslog.conf file of the server that I added as guided by ...
1
vote
0answers
28 views

accessing old data from syslog

I look after various MySQL DB's which we have recently moved to Linux servers (from Windows). They run fine and everything is good. However, this morning i needed to check the error logs, but these ...
3
votes
1answer
80 views

Disable logging to syslog

I am experimenting with aircrack-ng and I managed to fill up / with the syslog file complaining about what I'm doing to the poor wifi card. How can I disable logging to syslog for the duration of my ...
1
vote
0answers
19 views

Suppress Rsyslog to terminal

When I use Rsyslog (in bash using logger and in Node using winston-syslog), all log levels are also shown on the terminal window. I only want to log these events, and silent the output unless they ...
1
vote
1answer
72 views

File descriptor to read kernel log messages?

I am using syslog to read kernel log messages with SYSLOG_ACTION_READ. I would like to know if it's possible to "obtain" a file descriptor to "something" that would send the kernel logs (like what ...
5
votes
1answer
126 views

logging to /dev/xconsole does not work properly

I am using rsyslog, and I want to send logs to /dev/xconsole. I have following relevant line in /etc/rsyslog.conf *.*;cron.!=info;mail.!=info |/dev/xconsole This works only partially. It looks ...
2
votes
0answers
76 views

NUL entry in syslog?

My servers went down on the 30th. It just came back online today. At first I thought it was the router because the router the server is connected to is a bit squirrely but when I checked syslog I have ...
0
votes
1answer
33 views

rsyslogd running but cannot connect on port?

These are my configuration lines on rsyslog.conf $ModLoad imudp $UDPServerAddress 127.0.0.1 $UDPServerRun 1029 After restarting I run sudo netstat -taupn | grep syslog and it's running on port ...
1
vote
0answers
74 views

Where do these boot log entries come from and who creates them?

I'm wondering what kind of code writes these first two lines into /var/log/syslog while booting my machine: Aug 4 10:13:48 HOSTNAME kernel: imklog 5.8.11, log source = /proc/kmsg started. Aug 4 ...
0
votes
0answers
78 views

VSFTP user login & activity monitoring

We have a linux box that is configured with vsftp for our ftp sessions. Unfortunately, for the last few days, we've found that files served by vsftpd have been lost (deleted). I would like to know: ...
1
vote
2answers
226 views

What causes the ata exceptions in my syslog and how to solve them

I have a new system with debian (omv) a SSD hard drive for the OS and a software RAID 6 for the data. I only saw now that I have very regular exceptions in my syslog. I'm worried now, what could ...
4
votes
1answer
2k views

What does “kernel:NMI watchdog: BUG: soft lockup” followed by other errors mean?

I have my terminal always opened (Fedora 22), because all my work I do from there. Sometimes I search some info in browser or just have fun. After 20-30 minutes of browsing (browser starts not from ...
0
votes
1answer
252 views

Is there a way to force syslog flushes to disk immediately?

I have this vague recollection of there being a switch you can configure syslog with which would force it to flush logs to disk right away so when your system hung you might be able to get some useful ...
0
votes
1answer
110 views

syslog error, unknown priority name “”

I am editing syslog and want to log ppp to a log. I added the last two lines to do so, as recommended in the ppp configuration. It appears to log ppp but also other things, due to the * I guess. I ...
2
votes
1answer
629 views

How do I disable local syslog, and is it a good idea?

I use centralized logging with rsyslog, which means that there are dedicated logging servers which collect syslog messages from all servers. All inspections of logs are done from those logging ...
2
votes
0answers
181 views

How to explain strange kernel messages?

I have a server running on Debian Wheezy 3.2.68-1+deb7u1 x86_64. Lately strange records in /var/log/messages appeared. First messages of this log starts just after server reboot. 6.222.18 LEN=44 ...
12
votes
1answer
2k views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
1
vote
0answers
60 views

Failed umount /home (ZFS) on shutdown

During shutdown I notice an error reported in the logging messages on the screen that the umounting of /home (a ZFS filesystem) failed. (After restart I don't find any respective log entry in the ...
1
vote
0answers
204 views

Syslog flooded with “pci 0000:00:14.4: PCI bridge to [bus 04” messages, what's going on here?

I operate an HP Microserver N54L for offsite backups operated by Ubuntu 14.04 LTS (running Linux 3.16), which I recently equipped with an HP MicroServer Remote Access Card 615095-B21. Since plugging ...
0
votes
1answer
86 views

/var/lib/puppet/state/agent_catalog_run.lock exists

I'm seeing the following error on CentOS 6.4: # puppet agent --test Run of Puppet configuration client already in progress; skipping (/var/lib/puppet/state/agent_catalog_run.lock exists) What ...
1
vote
1answer
282 views

Skip syslog/rsyslog logging of certain cron jobs

In most GNU/Linux distributions the default is to log start (and many different events) of every cron job to syslog. It's rather convenient, but not for a very frequent jobs, which started, say, every ...
0
votes
1answer
45 views

Understanding syslog rotation, to implement own syslog rotation

I am trying to implement a simple syslog server (UDP based). On this , we are trying to implment SYSLOG rotation feature. Currently the roatation of logs is done by rename C API. By doing this we ...
1
vote
1answer
315 views

how to show colors in syslog

I have a node.js server logging output to syslog. I am starting the server like this: node app.js 2>&1 | logger -t app I am using some node libraries to colorize the output (within the app ...
0
votes
1answer
106 views

How do I diagnose why a VPS is freezing?

I have a Ubuntu 14.04 VPS (1cpu, 512MB ram, swap 1024MB) with Apache, mySQL, sendmail and sshd, sometime it freeze, I can't access neither through ssh nor with VNC provided by the vps provider, the ...
4
votes
0answers
142 views

Logging apt/dpkg activity to syslog

My goal is to log apt/dpkg activity using syslog (rsyslog), so that log entries are sent to central syslog server. dpkg writes to /var/log/dpkg.log, apt writes to /var/log/apt directory. I did some ...
1
vote
1answer
57 views

Analyzing logs offsite, with a different computer

I have a computer deployed with no internet access. I have small windows in which to copy the log directory to a USB stick and analyze offsite. If I pull the logs off of a CentOS / RHEL system ...
1
vote
1answer
118 views

Create new syslog file on boot

I want to create a new syslog file each time the system boots and save the old data in another file so that I can detect abnormal behavior on the current boot if any. Is there any configuration for ...
6
votes
1answer
436 views

Why does the syslog timestamp not include a year?

I am planning to store some of my log messages for more than a year, but the syslog timestamp description from RFC3164 does not include a year in the timestamp portion of a log entry. An example ...
1
vote
1answer
100 views

syslog set tag from api?

I can pump messages into rsyslog with a syslogtag using the following from the command line using the -t option: myprogram | logger -t MYTAG And later filter based on that tag: :syslogtag, ...
0
votes
2answers
79 views

Save syslog from honeypot to a host virtual machine

So im making a research honeypot. The host is ubuntu 14.04. I want to store all of the logs from the honeypot ssh to the ubuntu host so the data is not lost. Does anyone know anything about this? I ...
0
votes
2answers
676 views

syslog-ng.conf under SLES 12

Where can I find the syslog config file under SLES 12? rsyslog and syslog-service are installed according to YaST2 and rcsyslog status outputs: ServerName:~ # rcsyslog status Usage: /sbin/rcsyslog ...
0
votes
0answers
26 views

syslog - remote logging (remote server)

I have few applications running on my machine. Example: : /var/cacti/logs/Eload1.log Whatever is written to this log i would like it to be logging/written to: @syslogserver Is this possible?
1
vote
1answer
57 views

Why is logcheck reporting successful Horde logins?

I'm running Ubuntu 14.04 LTS server and use logcheck to report log messages. I have the logcheck-database installed which contains a horde3 ignore file for the server: ^\w{3} [ :0-9]{11} ...
0
votes
0answers
74 views

Equivalent to syslog-ng program-override option for rsyslog

I would like to know what is the rsyslog equivalent to the program-override option in syslog-ng?
1
vote
0answers
205 views

Why doesn't syslog traffic show up in netstat and lsof output?

I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in lsof or netstat results. I've even tried stuff like watch -n .1 'netstat -l -u -n --program' to make sure ...
0
votes
1answer
1k views

How to redirect logs to syslog for an application which doesn't support syslog yet?

Nginx adds logging to syslog feature in version 1.7.1. I can only get the version 1.6.2 from ppa:nginx/stable, or the version 1.4.6 from the default Ubuntu package sources. I have a common log ...
0
votes
1answer
134 views

Understanding network problem (syslog)

I am running a lubuntu 14.04 server and its always worked well, except for the last couple of days it keeps dropping off the LAN. I am using a couple of powerlink adapters to connect it up as WiFi was ...
1
vote
0answers
275 views

Is there a “supported” way in RHEL/CentOS 7 to union-mount a directory tree on top of an NFS mount point?

I have an NFS share containing almost 500 chrooted (s)ftp user's home directories. This NFS share is mounted on several FTP servers forming a highly available FTP cluster. I would like to enable ...
0
votes
1answer
46 views

Disable log of specified crontab item

How can i disable logging for specified item/line in crontab? (i´m on debian/raspbian) I have a script that checks if wlan0 is up every minute, but i don't like that cron logs every minute on syslog ...