The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
7 views

syslog-ng and how to parse for jsession id from tomcat

Just like the title says. I'm trying to parse for the jsessionid from tomcat. Here is what my tomcat server.xml config file looks like: <Valve ...
0
votes
1answer
8 views

logrotate create group not working

cat /etc/issue Welcome to SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) - Kernel \r (\l). rpm -qf /etc/logrotate.conf logrotate-3.7.7-10.22 tail -n15 /etc/logrotate.d/syslog ...
0
votes
1answer
26 views

Upgrading `popt` requires to upgrade too many packages

I am currently in the process of upgrading syslog-ng using rpm. In the upgrade process, I found out that syslog-ng has a dependency with rpm-libs which have a dependency with popt. The dependency tree ...
9
votes
1answer
409 views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
2
votes
2answers
953 views

syslog-ng service not starting with systemd but command works fine

I have a freshly installed version on CentOS 7 once which I have installed syslog-ng from the EPEL repositories. ~: yum list | grep syslog syslog-ng.x86_64 3.5.6-1.el7 ...
0
votes
1answer
37 views

Log transfer using syslog-ng 3.3.5

I want to transfer client logs to a log server but the problem i am facing is that each time client's file gets modified , whole file is transfered to log server so i am getting redundant message at ...
2
votes
1answer
2k views

nginx send log to remote syslog server

I wnat to send nginx access log to a remote syslog-ng server. I installed syslog-ng on each side (server-client). Client: 10.10.10.2 Server: 10.10.10.1 Some log files (messages,syslog,mail.log) are ...
2
votes
1answer
74 views

Preferred approaches to remote logging of a script / daemon?

I run a script as a daemon which gets started and stopped via /etc/init.d on a Raspberry Pi. For a number of reasons - including limited local file storage - I'd like to direct stdout and stderr from ...
4
votes
1answer
83 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
1
vote
1answer
911 views

syslog-ng won't write to log file - “No such file or directory”

I have set up a fresh instance of syslog-ng using the conf file included below. I can see that messages are trying to route to the right place (var/log/bash) when I look in val/log/messages. But I ...
0
votes
1answer
479 views

Failover with Syslog-ng?

Is it possible to set up a failover mechanism with Syslog-NG opensource edition? I want that the syslog-ng Daemon logs to a remote Loghost and switches to an other server if the first would go down ...
3
votes
2answers
5k views

Log every command typed in any shell: output (from logger function to syslog-ng/journald) contains duplicate entries for commands?

I installed syslog-ng to use on my desktop (Gentoo 64bit, upgraded to systemd i.e. was OpenRC before, with Openbox and Slim only) with my normal user to log all commands I type in the shell (bash ...
0
votes
2answers
127 views

Syslog-ng failover: logserver to local file

We want to use a central Logserver for our Webservers so we can manage everyhing on one machhine. I'm a bit scared of what happens if the network breaks or the Logserver is down. Is it possible that ...
1
vote
0answers
128 views

ssh log sent to email in Cygwin

I am using Cygwin in Windows 7. I am trying to make my syslog-ng daemon send a ssh log via email to me when ever someone tries to log into my computer. I tried using the code below (entered into ...
2
votes
1answer
537 views

Syslog TLS Compression and Message Buffering

Where I work, we have a site-to-site VPN tunnel set up between our main data center and a third party data center that does some Oracle PaaS for us. Since they charge per-VM, we're monitoring the ...
1
vote
1answer
211 views

syslog-ng ignores MSSQL database name

syslog-ng ignores the database defined in syslog-ng.conf and instead uses the default database of the user when logging to MSSQL destination. destination d_mssql { sql(type(mssql) ...
1
vote
1answer
123 views

syslog-ng difference between “not message(something)” and “not match(something)”?

What is the difference between these two?: filter f_avc { not message(something); }; and: filter f_avc { not match(something); }; it's hard to google for these types of questions :D
3
votes
1answer
509 views

Rsyslog Central Log Host

I'm moving from a syslog-ng central log host to rsyslog. I can't even seem to find syslog-ng in the CentOS repos these days. I want to filter logs by hostname and facility. Here is how I do it in ...
4
votes
3answers
3k views

How to exclude given lines in syslog-ng?

I need to exclude a given line in the messages file: Oct 25 04:09:23 SERVERNAME PFILTER-DROP: IN=ifeth4 OUT= MAC=ff:ff:ff:ff:ff:ff:AA:AA:AA:AA:AA:AA:AA:AA SRC=192.168.202.4 DST=192.168.202.255 ...
2
votes
1answer
468 views

Configure & Compile syslog-ng from source, got: Threads are not supported on this platform

I have configure, gmake, and gmake installed syslog-ng-3.4.0alpha1 with eventlog-0.2.12 and other dependencies. From then output of the ./configure --prefix=/syslog --with-gnu-ld, I can see that the ...
2
votes
1answer
3k views

Starting syslog-ng

I've recently installed syslog-ng but am confused about how to start it (on Fedora). I do: /etc/init.d/syslog-ng start which reports that it's started ok. However, it doesn't actually do anything ...
4
votes
1answer
6k views

Converting syslog-ng 3.0? format to 3.2 format

Just rebooted my system to this warning :: Starting Syslog-NG [BUSY] WARNING: Configuration file format is too old, please update ...
2
votes
2answers
254 views

Can I send the ouput of a log to a command as an argument to an option in syslog-ng?

According to the documentation I can execute a program somewhat like so: destination knotifier { program('/path/to/executable'; }; And it will send the log to the stdin of the executable. But what ...