Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

0
votes
0answers
17 views

Centralized application logging that combines matching log lines to a single output [migrated]

We have a solution where we have multiple data centers and per data center we have multiple servers with the same application. The application is handling stateless traffic and produces a lot of ...
0
votes
0answers
14 views

Can I issue a command when a specific message issued in the syslog [duplicate]

I am having power problems with my USB devices which is proving difficult to resolve. However I can see on the syslog that there is a specific error message which shows there is a problem. What I ...
0
votes
0answers
14 views

syslog-ng execute script on syslog pattern

I have a simple requirement. I want to receive all syslog messages coming from user facility and store them in a file. If the syslog message contains a specific pattern, I want to execute a script. ...
1
vote
0answers
63 views

How to monitor system with `snort` and send emails about `alerts`

PROBLEM: I have been configuring snort on my systems and would like to get emails from the systems if there are any alerts. What I have tried is swatch but I can't find much documentation on it, can ...
0
votes
1answer
26 views

`syslog` spammed by `dbus-daemon`, claims that unit `tracker-extract.service` is masked

[5.0.9-arch1-1-ARCH with gnome-desktop 3.32.1.2-1 and tracker 2.2.1] This is a follow-up on a previous answered question, where I unmasked the tracker-store.service, which was spamming my syslog at ...
-2
votes
1answer
66 views

OpenVPN doesn't seem to run: active (exited), code=exited, status=0/SUCCESS

I'm trying to run OpenVPN on Ubuntu remote server. I've been following this tutorial. As of now, I'm right before Step 3, trying to get "VPN 'server' is running" message. However, when I run service ...
1
vote
1answer
63 views

Gnome-desktop's 'tracker' spams syslog at boot

[5.0.9-arch1-1-ARCH with gnome-desktop 3.32.1.2-1 and tracker 2.2.1] My syslog at boot ($ sudo journalctl -b) is being spammed by messages about tracker-miner not being able to execute sparql along ...
1
vote
0answers
27 views

Docker Debian, getting some specific syslog in the docker container log

I have been installing SSH in the Debian Docker. Since I wanted to have some extra log, I also installed the Rsyslog as described in this question. Result was that some extra logs are created e.g. ...
0
votes
0answers
15 views

Losing syslog packets between hosts

I am losing syslog packets between two redhat servers. They are both virtual machines and have a couple of virtual firewalls inbetween them. I have no access to the firewalls but am assured that the ...
1
vote
0answers
39 views

Messages from syslogd flooding the terminal when waking up from sleep [closed]

I am using Tmux, and I see these message appearing on every session, attached or not, after waking the laptop up from sleep: Message from syslogd@parrot at Mar 28 23:17:54 ... kernel:[177769.535034] ...
0
votes
1answer
47 views

Logrotate is not compressing

I need to compress the files in var/log/remots/*/* with the following logrotate rule /var/log/remots/*/* { rotate 178 daily maxage 178 compress } located in /etc/logrotate.d/remots. ...
0
votes
0answers
7 views

Failing to install my syslog-startup.conf via yocto bitbake

I'm trying to install my own syslog-startup.conf file as a part of the busybox recipe. The file will look like this: DESTINATION=file # log destinations (buffer file remote) LOGFILE=/mnt/userrw/...
0
votes
1answer
44 views

Syslog to console, drawbacks?

I am wondering are there any drawback (performance wise) when output from some software is not logged to a file, but instead to console? Specific case would be running Docker containers, as some of ...
0
votes
1answer
85 views

How to keep kern.log out of syslog

I'm working on Ubuntu 16.04.3 and I found that I could get the log of kernel from two places: /var/log/kern.log and /var/log/syslog. /var/log/syslog contains other logs but I could find /var/log/kern....
0
votes
0answers
10 views

ksystemlog not working on Red Hat 7: “Error: BadDrawable (invalid Pixmap or Window parameter) 9”

Launching ksystemlog from the UI or the command sudo /bin/ksystemlog --icon utilities-log-viewer results in blank window and a ton of errors like this: Error: BadDrawable (invalid Pixmap or Window ...
0
votes
2answers
53 views

Syslog Output File Splitting HOURLY at Syslog Server

I have implemented syslog server on CentOS and using below Template to generate output file on daily basis - $template TmplNationalIP_PL, "/var/log/NIPFW/MX480/CGNAT_PL_%$year%.%$month%.%$day%" if ($...
4
votes
1answer
56 views

I have three different timezones on my Debian Linux

I use Debian 9.5.1. I used the dpkg-reconfigure tzdata command to set my timezone to Tehran. Now I have three timezones in my Linux. I execute the following three command together and look at logs: ...
1
vote
0answers
107 views

CentOS: Collecting and analysing logs using NXlog and OSSIM

Objective: Forward logs from all servers to OSSIM, correctly formatted and readable. Steps: Deploying one NXlog Collector/proxy node in each network zone - DONE Deploying one NXlog Collector/master ...
0
votes
0answers
326 views

Error while dialing dial unix /run/containerd/containerd.sock: connect: connection refused\“” module=libcontainerd namespace=plugins.moby`

Can someone explain what the following error in/var/log/syslog means? I don't know if I picked the relevant part, there is a lot more information in the log. Feb 4 10:57:51 chriad-VirtualBox dockerd[...
0
votes
2answers
75 views

How can I configure a running kernel to output dmesg info directly to the tty, without involving any userspace programs?

There are a large variety of questions floating around the 'net from people who want to watch the output of dmesg in real time. All the suggestions and answers involve using dmesg -w, tail, journalctl ...
1
vote
0answers
189 views

Nvidia-persistenced in syslog

On boot, I saw multiple lines about nvidia flashing on-screen before the X login screen. Looking at the /var/log/syslog, grep showed many entries about nvidia-persistenced on boot. It seems to start ...
-1
votes
2answers
25 views

log file question [closed]

I have a program that put out a log file to the /var/log/myfiles/ directory. these files are kept small in size and the file name is incremented by number . at the end of the day I want to cat the ...
0
votes
0answers
62 views

rsyslog: send logs to different file by filtering syslogs

I have a CentOS based rsyslog server which have the below settings, where it's getting all the remote NATing events from multiple hosts. $template TmplcpFW, "/var/log/%HOSTNAME%.log" if ($hostname == ...
2
votes
1answer
98 views

Source of this error: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted

We have this log in our syslog: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted Why do we get this error and how do we solve it? Our environment: Ubuntu 12.04; LXC;...
1
vote
1answer
30 views

Track active logging to log files

Is there a way to track which service/file is actively logging to a log file? In this case taking info from the syslog file and creating a file called filtered.log. I'm not seeing a process for ...
0
votes
1answer
572 views

rsyslog: send logs to different file using custom template

So, I'm using systemd to send the logs to rsyslog, and I want to write the logs to /var/log/app.log. Since it is a Java app with its own log format, I don't want to have timestamps or anything on it,...
1
vote
1answer
77 views

My attempts to use rsyslog to route messages to a log file

In myapp.service, I have : StandardOutput=syslog StandardErr=syslog When I do : $ journalctl -e -u myapp I can see each line of log contains "myapp[PID]". I've tried to set up /etc/rsyslog.d/...
0
votes
1answer
126 views

syslog-ng modification issue for unix socket

I am having issue researching the right way to go about a problem. The problem is the syslog-ng file in the salt master server at the moment only enforces unix-stream as follows: source s_sys { ...
3
votes
1answer
42 views

Find what program accessed a kernel module

How do I access a list of users/programs that accessed a certain module? I run: lsmod | grep ^uvcvideo This returns this line when no application is using my video camera: uvcvideo ...
-1
votes
1answer
114 views

Could I disable syslog.service after installing rsyslog on Ubuntu 18.04 server?

I am making a minimal Ubuntu for embedded system starting from Ubuntu base. Our samba-related script code relies on rsyslog so I installed this package. systemctl shows there is also a syslog.service,...
0
votes
1answer
548 views

Why is there no /var/log/kern.log?

I have an embedded system running a slim installation of Buildroot Linux with kernel 3.10.105. Apparently most commands come from BusyBox here, and it seems those do not always implement the full ...
1
vote
1answer
845 views

Where does cron log by default?

On Ubuntu 18.04, man cron says cron logs its action to the syslog facility 'cron', and logging may be controlled using the standard syslogd(8) facility Also, the default configuration of ...
0
votes
1answer
157 views

syslog forwarding

I'm using Solaris and have an application that writes to a log file /app/data/log/foo_log.021118. Am I able to use syslog to forward that specific log file to a remote server? Should I put ...
1
vote
2answers
300 views

Rsyslog - How to disable udp syslog?

Currently rsyslog is listening on both UDP socket and UNIX socket, as shown below: [root@machine ~]# netstat -ap | grep rsyslog udp 0 0 0.0.0.0:59018 0.0.0.0:* ...
2
votes
1answer
41 views

Possibility to disable or hide CRON notification about starting one specific process

I was wondering if it is possible to having multiple cron jobs in crontab active, but only one of them starts each minute. The problem here is I wish to keep log of all others jobs informations with ...
1
vote
1answer
149 views

Encryption of syslog & auditd in local disk? [closed]

We need to use encrypted syslog and auditd in local disk. Is it possible to save syslog and auditd message encrypted in disk ?
0
votes
0answers
137 views

How can I make syslog-ng to filter for a user name?

I've found a nice feature of the syslog-ng: if I use the logger to log things from the user process, I get the logging user name. Around so: peterh$ echo test log message|logger then I get this in /...
-1
votes
1answer
610 views

SyslogNG-How to optimise filter and log statements? [closed]

Below is the current configuration for Syslog-NG logging, locally, source s_network { udp( flags(syslog_protocol) keep_hostname(yes) ...
1
vote
1answer
259 views

Deployment of haproxy between devices and Syslog server

Below is the current architecture of Syslog-NG to avoid single point of failure. Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the ...
1
vote
1answer
198 views

Message forwarding with de-duplication - SyslogNG

Based on the advice from answer that says: Simply adding both servers and always write to both is the easiest one, we have setup syslog-NG server on two machines that receive same syslog message and ...
0
votes
2answers
948 views

syslog-ng won't start because error binding socket with permission denied

I've recently rebooted one of my machines after a long time and a now I'm having a lot of problems with configuration changes. syslog-ng service is not working anymore with the following error from ...
0
votes
1answer
29 views

How can a syslog configuration be set to place a log in the users home directory?

I want to use one of Drupal's syslog modules but place the log in a the user's home directory so there are not permissions issues when the user wants to view or analyze the file. Is there a way a ...
0
votes
1answer
372 views

How to omit PAM log messages for specific user (pam_succeed_if quiet)

I'm using a monitoring agent (telegraf) to monitor fail2ban. Unfortunately, it requires SuperUser rights to execute fail2ban-client, which causes 24 system log messages every 10 seconds... Do the math,...
0
votes
3answers
49 views

How to ensure syslog captures maximum possible log before abrupt system power off

I observe that syslog file (/var/log/messages) doesn't seem to capture the latest possible log before abrupt system shutdown. (My Linux system is running and then abruptly there is a power loss.) How ...
0
votes
1answer
85 views

Forwarding messages with certain filter

Scenario is to receive all incoming messages and store all of those messages in /app/syslog-ng/custom/output/all_devices.log, but forward only certain messages(by filtering). filter tag is used to ...
5
votes
2answers
3k views

Examining /dev/log

/dev/log is the default entry for system logging. In the case of a sytemd implementation (this case) it's a symlink to whatever /run/systemd/journal/dev-log. It used to be a receiving end of a unix ...
0
votes
1answer
22 views

Configuring event log - RHEL

In the Readme, it mentions to invoke ./configure before make & make install of eventlog on RHELinux. But, I do not see configure script except configure.in. Do I need to rename configure.in to ...
0
votes
1answer
27 views

Why is 'logger' always executed as the same user?

I'm using rsyslog 8.24 on debian. Each time I trigger logger "some message" the syslog refers to the same and only system user - it does not matter if I switch user (even as root), the messages are ...
3
votes
1answer
2k views

Sending bash history to syslog

Bash version 4.N has apparently the ability to write command-history to syslog, but I can't find information about how to configure this. I have read several pages which offer hacks using the ...
1
vote
2answers
365 views

Pass kernel and boot logs to syslog

I have a systemd based system and for some services I had to set up remote logging. The simplest way to set this was to use rsyslog and set the StandardOutput=syslog in the unit file. Now I also ...