The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
27 views

rsyslog not logging

This is an odd issue. I was testing the chrony/ntp services on a RHEL7 VM and was resetting its time as well as the host's. Once I was satisfied with it I checked /var/log/messages and realized it ...
4
votes
2answers
49 views

rsyslog - action AND action

I want to create rule to send data from facility to file AND to MySQL database. How it can realized? Only by adding second line like: syslog.* /var/log/syslog.log syslog.* ...
2
votes
1answer
28 views

IPsec doesn't read configuration when the tunnel is deleted

I've created a tunnel between tow Sites using IPsec. I've made an error in configuration, the address of the destination was false. I delete this tunnel. But the ipsec try after deleting to establish ...
3
votes
1answer
26 views

Where does the kernel ring buffer sit compared to rsyslog?

Is rsyslog just an abstraction layer on top of the kernel ring buffer? Or is the kernel ring buffer its own entity and rsyslogs interaction is like that of any other "application"?
2
votes
1answer
22 views

Best practices for maintaining error logs (system, device driver & application)

I have many Pandaboards with Ubuntu armhf and one PC server networked with Wi-Fi. On each embedded board I have a real-time application running constantly. I don't know how to reasonably maintain the ...
1
vote
1answer
45 views

How to redirect Tomcat logs back to catalina.out instead of syslog?

In the release notes for openSUSE 13.1, developers proudly stated that Tomcat logs are no longer being written into catalina.out, but rather written to syslog. I saw similar behaviour with new ...
0
votes
1answer
23 views

Basic syslog confusion

When an application logs using syslog does it mean that it stores the logs somewhere under /var/log? Or can it be elsewhere as well?
0
votes
0answers
29 views

Separate SSHD Authpriv logs into /var/log/messages, all other authpriv logging goes to messages

Right now I have SSHD using AUTHPRIV facility. The level of logging is fine, but I dont want it in the syslog, I want it to go to /var/log/sshd (which doesnt yet exist) Red Hat Linux/Enterprise ...
5
votes
2answers
93 views

How to send snmp trap when syslog is logged?

I need to send snmp trap n number of host whenever any syslog is logged in /var/log/messages. How can I do this, can anybody give me any idea?
3
votes
1answer
86 views

Does “syslogd” cause “cat /proc/kmsg” not to work properly?

I'm using cat /proc/kmsg to determine which process and file was involved in certain disc writes. I'm using the method given in this answer. But when I use cat /proc/kmsg, the output doesn't always ...
1
vote
1answer
47 views

journalctl process groups

I recently tried setting up the ChrootDirectory property in sshd_config and ran into the ownership problems for chroot targets. After i have fixed the problem i noticed that syslog-ng had created log ...
1
vote
3answers
77 views

How to make log-rotate change take effect

I followed this link to change log-rotate configuration. https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s1-logfiles-locating.html After I made the ...
0
votes
1answer
35 views

Getting info from syslog.txt

I am looking for some cool commands I can use to pull pieces of information out of a syslog. Mostly using this as a learning experience. Let's say I have a syslog showing dropped/accepted ...
1
vote
1answer
71 views

syslog-ng won't write to log file - “No such file or directory”

I have set up a fresh instance of syslog-ng using the conf file included below. I can see that messages are trying to route to the right place (var/log/bash) when I look in val/log/messages. But I ...
0
votes
1answer
48 views

Failover with Syslog-ng?

Is it possible to set up a failover mechanism with Syslog-NG opensource edition? I want that the syslog-ng Daemon logs to a remote Loghost and switches to an other server if the first would go down ...
0
votes
0answers
50 views

Smarter log rotation

I want to reduce the amount of logs in my system, but reduce them smartly. The general idea is, each time you rotate, look for any warning/error/critical level logs, and keep 2 minutes of log context ...
2
votes
0answers
26 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
2
votes
1answer
74 views

rsyslog conf file problem

I'm running Fedora (F19) and my /var/log/messages is filled with info coming from avahi-daemon: stuff like: Jan 21 14:13:42 localhost avahi-daemon[554]: Invalid response packet from host 10.10.22.3. ...
3
votes
0answers
86 views

How to implement logwatch functionality on top of systemd journal?

Logwatch scans logfiles with regular intervals, collects errors and stuff, then mails it to the admin. This was back in syslog and logfiles days. What's the corresponding solution for systemd's ...
2
votes
1answer
102 views

Linux Mint 15 (Ubuntu 13.04) Spontaneously Crashing: Please help me understand the syslog messages

I'm running Linux Mint 15, and my machine is spontaneously rebooting. It appears to happen when the computer is under load. Normal use doesn't seem to cause it, but I'm trying to create a windows vm ...
1
vote
0answers
17 views

syslog: process specific priority

I have two user processes A and B. Both use syslog using facility LOG_USER. I want to have different threshold levels for them: For A, only messages of priority ERR-and-above must be logged For B, ...
2
votes
1answer
129 views

Why Linux syslog file does not follow the RFC3339 protocol?

Why Linux syslog file: /var/log/syslog does not follow the timestamp format defined in the protocol http://tools.ietf.org/html/rfc5424#page-11?
0
votes
0answers
138 views

What is causing my UMTS modem to hang up?

I am trying to established PPP communication to my mobile ISP with wvdial, but I always get modem hang up message. In my syslog I can see some activity: Oct 29 07:48:47 linuxbox kernel: ...
2
votes
1answer
223 views

How do I send all information in /var/adm/message file to a remote system?

I'm trying to figure out how to send all information that is normally identified in the /var/adm/message file on a Solaris system to a remote system.
1
vote
2answers
334 views

init, syslog and stdout/stderr

I'm trying to build an embedded system with linux. (Means very few resources and not much else than busybox.) I'd like to make sure, that everything is going to syslog. I'm using the newest version of ...
1
vote
1answer
139 views

Ubuntu 12.04LTS becoms slow and jerky randomly for a mintue and then becomes normal by itself [closed]

I am using Ubuntu 12.04LTS on my Toshiba satellite L510 and I have only Ubuntu installed. The system becomes slow and jerky by itself after every 10minutes or so and the remains like that for less ...
3
votes
1answer
2k views

How can I configure syslog.conf file, to log iptables messages in a separate file?

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
4
votes
1answer
58 views

dmesg email digest

I have a remote server which has some issues (Seem hardware related) which means that it logs KVM errors and then sometime later it becomes unresponsive and locked up. There is an often an early ...
1
vote
0answers
23 views

Configure syslog.conf file [duplicate]

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
0
votes
2answers
124 views

Search in iptables.log file

I have used iptables to save information about connections. So i have modified /etc/syslog.conf file in order to save information in /var/log/iptables.log. So, every X hour, i will extract ...
2
votes
1answer
109 views

Syslog TLS Compression and Message Buffering

Where I work, we have a site-to-site VPN tunnel set up between our main data center and a third party data center that does some Oracle PaaS for us. Since they charge per-VM, we're monitoring the ...
3
votes
1answer
638 views

What is the local6 (and all other local#) facilities in syslog?

What I understand On *nix servers, we configure sending logs using facility.priority, where facility is the name of the (let's call it) "component" of the system, such as kernel, authentication, and ...
2
votes
1answer
781 views

How can dmesg content be logged into a file?

I'm running a Linux OS that was built from scratch. I'd like to save the kernel message buffer (dmesg) to a file that will remain persistent between reboots. I've tried running syslogd but it just ...
2
votes
1answer
162 views

Solaris 11 and syslog over TLS

Does Oracle support support remote syslog over TLS/SSL on Solaris 11? I found it can be done with rsyslog, but is rsyslog default on Solaris 11 and if rsyslog is not default, does Oracle support a ...
2
votes
1answer
240 views

Periodically get new lines from file, possibly logrotated

I'm looking for a fairly simple way (no development involved -- I could write this in Python but I'm hoping there's something already out there). I have a log file (in my case written by rsyslogd). ...
2
votes
1answer
1k views

Messages from syslogd, what do they mean and what do I do?

Recently, these messages started popping up straight into my prompt when I'm connected to the OpenSUSE system in question via PuTTY: Message from syslogd@host at Aug 5 11:04:03 ... kernel:[ ...
1
vote
1answer
586 views

Pimp rsyslogd to have less i/o (cron, pam,…) and less logging

On my raspberry I really don't need crons and pam logging and I want to have less i/o to make the SD card life a little longer.. I have already removed cron with the second line cron.none, I'm ...
4
votes
1answer
60 views

How to tell if syslog.conf has a typo

I recently did in fact have a typo in my syslog.conf file, but I had no idea initially why I couldn't restart the daemon. In Ubuntu, all I seemed to get was a FAIL message after a rather long wait ...
9
votes
2answers
692 views

Receiving Syslog messages with a systemd Arch Linux

I'm feeling like I've overlooked the obvious, but I can't figure out how to get my Arch Linux server, which uses systemd, to receive and log syslog messages from a remote system. I have a Cisco 678 ...
0
votes
1answer
236 views

newsyslog.conf logrotate when file is older than 6 month

I would like to delete following files with newsyslog.conf when the files are older than 6 month: # logfile [owner:group] mode count size when flags [/pid_file] ...
2
votes
1answer
81 views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
2
votes
3answers
1k views

Easy way to parse syslog date format

I'd like to write a script that analyses the last week's syslog. But my syslog logs in a stupid date format, e.g. "May 22". If it logged as 2013-05-22, this task would be trivial. Is there a way ...
1
vote
1answer
149 views

Errors in Syslog

Im getting this error on one of the server May 21 16:45:42 ERPSSO gconfd (root-24528): Failed to write "/root/.gconf/apps/puplet/%gconf.xml": Failed to move temporary file ...
5
votes
1answer
80 views

What do you use the -t “tag” option for in logger?

When using the "logger" command to write messages to the system logs from scripts, I use the -t "tag" to store the scripts name along side the message it's written to the log. I do this to make ...
1
vote
0answers
55 views

Nested filtering in rsyslogd

I'm using rsyslogd and trying to figure out why things like if $hostname startswith 'd.42ba7373' and $programname == 'app' then /var/log/bla2app work just fine, but if $hostname startswith ...
3
votes
2answers
146 views

How to get time synced outputs (different timezones on servers)?

So imagine there are ~100 servers with different timezones (not all diff., but many-many timezones). There are outputs on the server logs like: server1:BFE4C025 0420201413 P H sysplanar0 ...
1
vote
0answers
313 views

After ubuntu install + software raid 0 config, we see: rejecting I/O to offline device

I'm trying to pin down what this error rejecting I/O to offline device is, as seen towards the end of this syslog. Ideas: Problem with RAID-0 configuration (we have 2 4TB disks in RAID-0 and I do ...
1
vote
1answer
425 views

Analyze system logs with logwatch --range other than just “yesterday”

The manpage of logwatch says: The format of the range option is: --range "date_range [period]" Parameter date_range (and optional period) must be enclosed in quotes if it is ... ...
2
votes
1answer
374 views

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour ...
3
votes
1answer
829 views

Logger command - how to store logs in given file?

Please explain what below command does. logger_cmd="logger -p local0.info ${program-name}[$$]:" $logger_cmd "There is some files missing in ${dest-dir}" How can I write any message in log file? I ...