Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
1
vote
2answers
15 views

“Certificate authority” messages are not being recorded in /var/log/messages

I am running an openssl server on my CentOS device. I am using an expired certificate and expect to see a "Certificate authority error" msg in /var/log/messages, but there is no ...
0
votes
1answer
11 views

Transferring system logs to a remote port

I want to transfer all system logs to a remote machine's port. RHEL version : Red Hat Enterprise Linux Server release 5.11 The performed actions: Adding below line to /etc/syslog.conf *.* @10.100.7.2:...
0
votes
1answer
35 views

Temporarily disable all kernel logging?

I know it's generally a bad idea to disable all kernel logging and in any other situation I would not be attempting to do this, but for my current applications having a period of time where the kernel ...
0
votes
1answer
23 views

Changing of MAC Address with Network Manager on Debian 10

Looking at syslog files on Debian 10 form a previous session I have noticed a MAC Address change and I do not know why it is happening. Any ideas on how to stop this? Jun 8 15:43:46 NetworkManager[...
0
votes
0answers
12 views

Debian syslog-ng TCP server and auth logs from CentOS

Update 1 Looks like rsyslog AND syslog-ng are running on the client. I kicked syslog-ng and configured rsyslog to send it's logs to the server via TCP and it works. So, looks ok with this solution --...
1
vote
1answer
50 views

cron: send errors to syslog, instead of MTA

I don't have MTA installed on my desktop. Whenever there is a problem with a cronjob script, I see this in my logs: CRON: (CRON) info (No MTA installed, discarding output) A script that was ...
0
votes
0answers
16 views

Forward all Graylog logs to another Syslog collector

I am having a Graylog Syslog server v.3.3.0 which is collecting the logs of a couple of Linux machines. I want to forward all the captured syslogs to another syslog server. I was looking that in the ...
0
votes
1answer
23 views

How to replace timestamp of messages received on an rsyslog server with a local timestamp?

I have a router that forwards its logs to an rsyslog server and I'd like to configure the rsyslog server to replace the timestamp with a local timestamp. The message format looks like this: Jan 1 00:...
1
vote
0answers
11 views

Unable to create nested Syslog filter with NOT condition

I have a syslog filter setup in my syslog.conf file and data is getting filtered and coming in. source s_network { tcp(port(6514) max-connections(100) keep-alive(yes) tls( key_file("/opt/certs/cert....
0
votes
0answers
21 views

Redirecting log result into a file

I want to create a date stamped log file called e.g. log_file_10_11_2017 containing a list of who is logged into the system, the disk usage and my currently running processes. The file I want ...
0
votes
0answers
30 views

How can a bash script detect in real time when an ARM error occurs?

How can a Linux bash script detect in real time when an error, such as Internal error: Oops: 37 [#1} ARM, occurs ? I'd rather my script not have to constantly scan system logs looking for such errors. ...
1
vote
1answer
16 views

What does the field MESSAGE_ID in systemd's journals signify?

When digging into logging from shell scripts and applications I found that the logger utility gives the option to log directly to systemd's journals. The man page advocates in these cases to fill in ...
0
votes
1answer
37 views

Is UDP data lost when executing kill -HUP on rsyslog?

I am very new to rsyslog and I am going through the documentation as well as seeing examples of what other people have done with their configuration and a question came to mind when the topic of log ...
0
votes
1answer
39 views

Understanding rsyslog log format and filtering

I am working on filtering logs from syslog and forwading to another log. I am able too capture/filter the log based on "internal-sftp". By using if $programname == 'internal-sftp' then /var/log/...
2
votes
0answers
63 views

Rsyslog and Journald - Log processing in Linux

I do not really understand the forwarding from Journald to Rsyslog. Basically I understood it in the way that the 'pipeline' is built up as follows: Kernel logs through printk() → /proc/kmesg ← ...
0
votes
1answer
19 views

Rsyslog not saving logs from another servers into custom directories

I am receving logs on UDP 514 from another server and i have configured rsyslog.conf to save the logs to another custom directory but i am unable to do so, i confirmed through tcpdump logs are getting ...
1
vote
2answers
38 views

Cron task does not work

I am developing a backup script in my NAS running a docker container. Inside my container I have cron running with this /etc/crontab: root@backups-nas:/code# cat /etc/crontab SHELL=/bin/bash PATH=/...
0
votes
0answers
95 views

Is there something that can be done about these WARN messages or should I not worry about them?

I was using zoom and these messages popped up on my laptop's /var/log/syslog. I am using Ubuntu 19.10 on a Lenovo Thinkpad X220i. My kernel version is: 5.3.0-42-generic Mar 16 14:45:07 a thermald[617]...
1
vote
1answer
44 views

rsyslog logs are not stored in queue files

I’m using rsyslog 8.40 and I’m trying to setup logforwarding with queues. I was able to send logs to the forwarding servers using the following configurations. action(type="omfwd" target="host1" ...
1
vote
0answers
19 views

syslog tag for systemd dotnet service keeps changing between SyslogIdentifier and process name

I have a number of .NET Core applications running as systemd services on Ubuntu 18.04 (systemd 237). The unit files look like this: [Unit] Description=my-service dotnet service [Service] Type=simple ...
1
vote
1answer
47 views

How can I add lastlog support to Alpine Linux?

Apparently, musl, the default library for Alpine Linux does not support lastlog. Generally you will use Alpine to deploy containers that do not need that kind of support, but it could be used also to ...
0
votes
0answers
19 views

4G connection drop Airtel Syslog message (7/8)

My 4G device is on an automobile that travels around 500 kms in a night. The network disconnects sometimes. And this is the log I see in the Syslog. Can someone help me understand what is going on? ...
1
vote
0answers
30 views

My epoch time in syslog is 8 hours behind. How do I fix it?

I am in the PST (UTC -8) timezone. My syslog in stamping all messages as PST -8 instead of UTC, or even UTC -8 (so the timestamps are 8 hours behind my local time!). regular date command is correct ...
0
votes
0answers
40 views

Syslog-ng stops logging randomly after some time

I have a Linux server who forwards all the log flux to another central Syslog server. Both run Centos 7 with Syslog-ng 3.18.1. After some time (could be two hours, one day or two weeks...), the ...
0
votes
1answer
105 views

OpenSSH Server: Directive 'SyslogFacility' is not allowed within a Match block

I want a specific matched User to have its 'ssh/scp' activities logged in an alternative facility. The current default is AUTH, but I'd like to log stuff for user 'dummy' to syslog Facility 'LOCAL2'. ...
1
vote
0answers
84 views

What happens to rsyslog queue files after they have been processed?

I am working on a machine (ubuntu 18.04) that generates logs at times when it's not connected to a network. I have configured rsyslog to forward some of these logs to an aggregator service (fluentd) ...
1
vote
0answers
20 views

Log user status (archlinux)

I'd like to write a code that restricts myself from accessing the laptop for too long. To do that, I have to have access to user's active time. Currently, I use ac (a part of GNU accounting utils) to ...
5
votes
4answers
905 views

I don't know what is producing the gigabytes of error in syslog

The error is showing itself like this: Jan 11 16:39:52 pop-os org.gnome.Nautilus[1514]: [00007fa4fc465ce0] vdpau_chroma filter error: video mixer rendering failure: An invalid handle value was ...
0
votes
1answer
142 views

Using syslog for user/application logs on Centos 7/8

I want to use syslog(3) to write application logs to a central recorder. The application runs on a collection of computers on the same subnet. Not interested (at present) in capturing system (non-...
0
votes
0answers
38 views

Bash syslog events skip systemd-journald and send directly to syslog daemon

I want to send Bash history information to syslog on a Linux (CentOS 7 system) with systemd, but I want to skip the intrusive systemd-journal service which typically forwards to the syslog daemon, ...
0
votes
0answers
52 views

Faulty usb device: how to disable to get rid of dmesg errors

I bought a second hand computer, which seems to have a faulty USB port (or something - I haven't encountered it). The only real annoyance is that my syslogs are spammed with the same messages: [...
1
vote
0answers
13 views

want to live monitor all log files in one vieuw

I like to view all log files live like tail -n0 somelog.log But then for literally all log files on the system (CentOS 7) Or an other way to do this is also nice. I want to output this to a web page ...
0
votes
1answer
165 views

How to stop PAM messages in auth.log for a specific script run with sudo?

I've set up a bash script to run automatically (from crontab) with sudo privileges using this visudo solution. Since the script requires multiple runs, it pollutes my /var/log/auth.log, so I disabled ...
0
votes
1answer
769 views

Stuck at “Loading initial ramdisk” after attempt to update the kernel

I have an Asus FX433N with an UHD 620 Intel graphics. The system has a dual-boot with windows 10 and debian stable, where both system works just fine. I was trying to use wine and the system complain ...
0
votes
0answers
51 views

Pipe systemd StandardOutput and StandardError to both Syslog and File?

I have a systemd process that currently runs with the options StandardOutput=syslog StandardError=syslog I would like to continue sending logs to syslog, while also sending each to a different log ...
0
votes
0answers
157 views

Best way to intercept dnsmasq query logs

I have a Dnsmasq server, on which I want to parse query logs to be able to build stats based on queries / responses. The Dnsmasq provides two logging mechanisms: By default, it logs to syslog If a ...
1
vote
1answer
31 views

Can I block a syslog message with iptables

I've got a few firewalls that I don't personally manage sending junk syslog messages through my ubuntu machine (which acts as a software router). Is there an easy way for me to block forwarding a ...
0
votes
0answers
74 views

Tomcat 7 / logback produces logs to /var/log/message & journactl

Since we change our server from Centos 6 / Tomcat 6 to Centos 7 / Tomcat 7, tomcat's logs have changed places. Before the were located inside catalina.out and now they are in /var/log/message (and ...
0
votes
0answers
24 views

Disconnect desktop apps output from going to journald/syslog

At our university/department we run a bunch of Debian 10 labs. When people start applications from their desktop environment, some output goes to systemd journal + syslog (+ remote syslog collection) -...
0
votes
1answer
32 views

mysqldump cron job filling up my syslog

I have the following job in my crontab: 0 */4 * * * /usr/bin/mysqldump -u root -p'PASSWORD' --all-databases | /bin/gzip -9 > /home/USER/_mysql_backup/`date "+\%F--\%H-\%M"`.databases.sql.gz ; rm -...
1
vote
1answer
2k views

OpenLDAP v2.4 enable logging

I have openldap v 2.4 running on centos7 and working but i cannot get it to log anything. I have tried adding the below line to the rsyslog.conf file but i still do not get any log file. LOCAL4.* ...
1
vote
2answers
1k views

Can I avoid debian-sa1 lines in my syslog?

My syslog is chock-full of the following: Oct 28 23:35:01 myhost CRON[17705]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1) Oct 28 23:45:01 myhost CRON[18392]: (root) ...
0
votes
0answers
17 views

stop hddtemp syslog

I am using hddtemp to log the temperatures of my HDDs. Firstly I set it to log it every 60 secs, but that's too much, so after that I set that to 600 seconds, but now it logs every 60 and 600 seconds. ...
0
votes
1answer
352 views

/var/log/messages - not compressing while rotating

I'm trying to compress the messages cause its growing huge in size and there is not much space. I tried all from - compress-messages - to compress the messages but its with glob finding old rotated ...
2
votes
2answers
247 views

How to split logs into monthly, daily and hourly folders when bringing in syslog events?

I am bringing in log files via rsyslog and my config looks like the following: root@rhel:/etc/rsyslog.d# head mail_prod_logs.conf if $fromhost-ip=="10.10.10.10" and $programname=="AMP_Logs" then -/...
0
votes
1answer
22 views

How to edit my config file to create two log files while ingesting syslog events?

I am sending mail message logs and amp logs from the same server 10.10.10.10 via syslog to my RHEL7 server. I am running rsyslog and have the following config file: mail_logs.conf $template ...
0
votes
0answers
24 views

How to read from syslog using systemd service

Does anyone know what the proper way is to create a systemd service and read from syslog write the logs out to the network? I had this in a service: tail -f /var/log/syslog | ...
0
votes
0answers
41 views

rsyslogd missing message?

I set up a logging host in the ryslogd config using python, restart daemon etc and get a correct message: Sep 20 09:03:20 Desk-r6 CLI[13845]: (admin) (root) (192.168.1.10) startup : Success Code to ...
-1
votes
1answer
177 views

allow user access to syslog

I'm running an embedded Linux (Dreadnaught), and I'd like to be able to manually enter a line into the syslog as the user login, and have the result of other commands stored in the syslog. e.g.: ...
0
votes
0answers
58 views

How to mute syslog from console, without using actual syslog daemon?

I usually switch between Xorg and (framebuffer) text console a lot. But every time I switch to text console, I got a message like this on the text console: acpid: client 7251[0:0] has disconnected ...

1
2 3 4 5
7