Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
-1 votes
0 answers
29 views

What is the equivalent for 'syslog' user for CentOs 8? [closed]

CentOs 8 doesn't recognize user, syslog. I want to give ownership permission for some files at location /var/log. When I am running the command chown syslog.adm /var/log/phpmail.log /var/log/...
user avatar
-1 votes
2 answers
39 views

Best way to run child process in C++ if you want to get output of the called command

I am writing an application in C++. In many places in my code I use system() function to run some commands. I am not sure this is an elegant solution and I would like to replace using this function by ...
user avatar
0 votes
1 answer
16 views

Syslog console and file

I want to log everything to syslog in my application. I will be logging mostly at two levels. Info and debug. Debug messages I do not want end users to be able to see or access. As such these messages ...
user avatar
0 votes
0 answers
10 views

Where are docker events stored? Can they be redirected to syslog server?

I have a server with docker running. I can use the command docker events to monitor events as they occur. But I can also use the command option --since <timestamp> to list previously occured ...
user avatar
  • 179
0 votes
1 answer
42 views

Bind error logging syslog

Im have this strange behaviour where my bind server is just forwarding info and notice errors to my remote syslog server. Current configuration on the named.conf file is: logging { channel syslog ...
user avatar
0 votes
0 answers
45 views

Send audit log to syslog server as independent stream

I have a system which is currently set up via rsyslogd to send /var/log/messages to a syslog server. I also want to send the logs contained in /var/log/audit/audit.log to the same server. One of the ...
user avatar
1 vote
1 answer
49 views

Can I reliably determine if the last reboot was due to a kernel panic

I have an embedded Linux system which I would like to reboot automatically in case it encounters a Kernel Panic. However, is there a way I can reliably determine on boot-time whether the last reboot ...
user avatar
  • 75
0 votes
0 answers
14 views

linux joournalctl read specified input file and not the local syslog

I know this is a long shot. Im missing something from the man pages I can find. I've setup remote event /system logging to a log server (syslog-ng). That works fine. It has its own log dir and each ...
user avatar
0 votes
0 answers
19 views

Example for Systemlogging with an output on the screen

Does anyone have an example to illustrate how to write a simple configuration on rsyslog that gives an output on the console?
user avatar
  • 37
0 votes
0 answers
31 views

rsyslog: discriminate between boots with new files or break line

I've got a system that uses rsyslog for logging. Some of the messages being logged I want to store on the device (error messages) so that if something has gone wrong I can review them later. All works ...
user avatar
  • 1
0 votes
0 answers
15 views

How to avoid "# messages dropped." when logging?

I am logging messages from a low-level C application that is actually running on Android. Whenever my code goes to the crucial part of a library I am using, I get the log message "1002 messages ...
user avatar
0 votes
0 answers
27 views

Syslog entries getting out of sequence

I have an embedded Linux installation completely self-cross-compiled using Yocto Poky. Beside the many system services I also have a completely custom application running as headless daemon. ...
user avatar
  • 728
0 votes
1 answer
29 views

How does this command with which to "refresh the syslog process" work?

On http://www.cs.newpaltz.edu/~easwaran/Resources/commands.html the following command is listed as being meant to "Refresh the syslog process": kill -1 `cat /var/run/syslogd.pid` I have ...
user avatar
  • 5,641
0 votes
0 answers
45 views

Bash command to select only specific actions from log files

Hello there I have the following example for a log file below: Mon, 22 Mar 2020 13:15:39 +0200|185.34.66.225|user_1| - |user logged in| - Mon, 22 Mar 2020 13:15:39 +0200|185.34.66.225|user_1| - |user ...
user avatar
  • 1
0 votes
0 answers
101 views

start-stop-daemon syslog as non-root

I have a Yocto based embedded Linux build using busybox-1.24.1 and its sylogd and start-stop-daemon utilities. root:~# ls -l /sbin/syslogd lrwxrwxrwx 1 root root 19 Nov 2 17:57 /sbin/syslogd -> /...
user avatar
0 votes
0 answers
7 views

MariaDB: sanitizing data before INSERT, keeping raw data AND extract excerpt to another column

Objective: Receive syslog data from Kiwi Syslog, in same query insert both the raw message to column rawmsg AND excerpt source and destination info from raw message to columns source and destination. ...
user avatar
  • 467
6 votes
2 answers
674 views

syslog message at boot: uninitialized urandom read

CPU is AMD GX-412TC SOC: GX-412TC GE412TIYJ44JB 4 6W 2MB 1.0GHz/ 1.4GHz N/A N/A DDR-1333 0-90°C which does not have rdrand: grep rdrand /proc/cpuinfo # nothing I see following messages in my syslog ...
user avatar
0 votes
0 answers
22 views

What could have caused automount to try to mount this nonexistent directory?

In /var/log/messages I found entries like this Oct 18 2:10:15 linux automount[946]: attempting to mount entry /home/randomusername Oct 18 2:10:15 linux automount[946]: key "randomusername" ...
user avatar
  • 21
0 votes
0 answers
44 views

Remote server instance randomly hits 100% CPU when not logged in

I'm running an AWS (micro) instance with very light usage. Most of the time it sticks at around 2-4% CPU, but sometimes usage spikes up to 100% and hangs there until I reboot the instance. Not sure ...
user avatar
2 votes
1 answer
61 views

Tracing actions by user on a shared SSH key access

Imagine we have a shared ssh key/(username & password) between two users, We call them Bob and Alice. Bob has connected to the server and has executed some chain of commands that led to the ...
user avatar
  • 121
0 votes
0 answers
54 views

Syslog is filling up the entire disk space with those entries

I just installed a fresh copy of ElementaryOS, and shortly after i did i get my / filesystem filled with large syslog and syslog.1 files the log files are filled with this entry io.elementary.w[1638]: ...
user avatar
0 votes
1 answer
58 views

Write string that include \n \t in syslog

Does any one know if it's possible to write a string that contains characters \n and \t in syslog? I used a C program and I tried to create a string variable that contains \n and \t. Then I tried to ...
user avatar
0 votes
0 answers
25 views

How to avoid multiple sequence numbers with logrotate

I want to use a central syslog-server (Ubuntu 20.04) to collect log events from other linux servers. This is the logrotate.d config file I use: rotate 90 daily missingok nocompress dateext dateformat ...
user avatar
  • 1
1 vote
2 answers
136 views

Rsyslog - Parsing audit.log / omprog change log value

I'm trying to parse audit.log with rsyslog by using a bash script in order to transform the hex part of proctitle to ascii. However I do not get ressults: the file audit_ascii.log do not have lines ...
user avatar
0 votes
0 answers
38 views

Redirecting specific logs to a separate file with sysklogd

I would like to redirect some specific log messages to a separate file. I can do it with rsyslog. I use the following syntax: :msg, contains, "my_message" /path/to/file.log. The problem is ...
user avatar
1 vote
1 answer
102 views

Sending logs between rsyslog (client) and syslogd (server)

I have two machines. First of them runs embedded Linux and the second one runs FreeBSD. The machine with Linux has rsyslog and needs to be a syslog client. The other one has installed syslogd and ...
user avatar
0 votes
0 answers
257 views

Ubuntu 20.04 freezes on keystroke (rfkill: input handler disabled)

Ubuntu 20.04 Lenovo Legion 5, 16 GB, Intel i7 10th gen, nvidia GTX 1560ti Runnig dual boot, windows just works fine. But on ubuntu I am recently getting random crashes or crash like behavior all on a ...
user avatar
  • 111
0 votes
1 answer
70 views

how to check validity of /etc/logrotate.d/syslog

we want to check the validity of the configuration file /etc/logrotate.d/syslog and that because we made some changes on that file from our bash script so we use the following approach to check the ...
user avatar
  • 10.9k
1 vote
0 answers
148 views

how to write logs to specific file from kernel space?

I have a kernel module that uses printk() for debugging. printk() logs to /var/log/messages. /var/log/messages contains information of other modules too. I am trying to implement dynamic tracing for ...
user avatar
  • 11
0 votes
0 answers
73 views

How to redirect some specific messages to a particular file with syslogd?

I would like syslogd to write one specific log message to a specific file. I foud the syntax for rsyslog: :msg, contains, "some text" /path/to/file When I add it to /etc/syslog.conf and try ...
user avatar
0 votes
0 answers
66 views

Getting rsyslog to fwd to Splunk from Ubuntu .20.04

So I've got an Ubuntu 20.04 LTS server setup with Haproxy and I'm trying to fwd log info to Splunk Cloud. I have the Haproxy.cfg with a Global entry: log 127.0.0.1 local4 And I've got an entry in /...
user avatar
  • 53
2 votes
1 answer
694 views

Stop systemd from flooding logs with "Ignoring unknown escape sequence"

This is my service [Unit] Description=Cleanup service I made [Service] ExecStart=/home/me/scripts/cleanup.sh -d /home/me/scripts/testfolder/ -f ".*/*.[0-9]\{4\}-[0-9]\{2\}-[0-9]\{2\}-[0-9]\{2\}-[...
user avatar
  • 285
0 votes
2 answers
36 views

What's the easiest way to track exact time of a user ssh to another system

env - centos/rhel I have two systems. Bastion and DEV. Bastion - Bastion has many individual users. (apple, orange... etc) Users can directly ssh to Bastion. DEV - DEV has only one user. (fruit) ...
user avatar
  • 147
1 vote
1 answer
46 views

How to save logfile in non-volatile memory

I have an embedded device with NAND flash as rootfs. Logfiles are kept in RAM, as they are usually boring and must not wear out the flash. But seldom the devices enters a defective state which I need ...
user avatar
  • 11.1k
0 votes
0 answers
26 views

How to manually send a log file with specefic count and rate to a server

I have a txt log file (syslog format) that i want to send it with specific count(number of lines) and rate(logs per second) to a server (ELK Stack) that parse this logs on port 514. i see the logger ...
user avatar
  • 101
0 votes
1 answer
36 views

Is "syslog" often used to refer to both a protocol and an implementation?

Is "syslog" by definition a protocol? Is "syslog" often used to refer to both a protocol and an implementation? If it is sometimes used to refer to an implementation, how may I ...
user avatar
  • 81
-1 votes
1 answer
120 views

/var/log/syslog as background image

I like to have a text file (vor example /var/log/syslog) as a background image within years. So for example a script that automatically turns the syslog file into a jpg file and then sets it as ...
user avatar
  • 15
1 vote
0 answers
167 views

What are the message formats in `/var/log/syslog` and the output of `dmesg`?

On Debian or Ubuntu, what are the formats of /var/log/syslog and the output of dmesg? In /var/log/syslog, I figure from Apr 1 08:15:01 mycomputer CRON[12494]: (root) CMD (command -v debian-sa1 > /...
user avatar
  • 81
-1 votes
1 answer
84 views

Is inetutils not included in Debian or Ubuntu?

Is inetutils or some programs in it provided or installed by default in Debian or Ubuntu? If not, why does Debian or Ubuntu not include it? Is it because they have better alternative programs in other ...
user avatar
  • 81
0 votes
1 answer
485 views

In syslog or rsyslog, are ring buffer, queue of message, and write buffer the same?

Are the ring buffer, the queue of messages, and the write buffer the same? If not, how do ring buffer, queue and write buffer work together in syslogd or rsyslogd? Most implementations of syslogd ...
user avatar
  • 81
1 vote
0 answers
273 views

Rsyslog - send logs to remote server

I'm trying to send service log files to a centralized Rsyslog server. On the Syslog server, I have a simple configuration $template DailyPerHostLogs,"/var/log/syslog/%$DAY%/%Fromhost-ip%/%...
user avatar
  • 11
0 votes
0 answers
305 views

Netcat listener: Line break between syslog messages

I am playing with netcat command. On this linux system, I have set up a netcat listener on UDP 514, so that I get to see syslog messages from remote systems. $ sudo nc -v -ulp 514 listening on [::]:...
user avatar
5 votes
1 answer
507 views

What format does syslog() use when writing to /dev/log?

I initially thought to post this to StackOverflow because my interest was primarily from a programming focus, but after reading about the history tag (and the question it linked to), I posted it to ...
user avatar
  • 889
0 votes
0 answers
85 views

What is the syntax of a crashed service log message in /var/log/messages?

A few weeks ago we had a monitoring service crash which resulted in our monitoring being down for over 12 hours. I've set up a secondary log collection service for these servers, but our previous logs ...
user avatar
0 votes
1 answer
218 views

Computer froze and unable to restart for tens of minutes : can my syslog show if the trouble comes from a memory stick, a package or its power unit?

I encounter a bug that made my computer, under Debian 10, crash two times in ten days, and being unable to restart for ten minutes to half an hour. Today during an Eclipse session, before while ...
user avatar
  • 729
0 votes
1 answer
91 views

Debian - Copy packets incoming to rsyslog and send to localhost on another port

I am trying to configure a server that will have two syslog servers. One is storing all messages and the other is analyzing them for statistics. The only way I can figure out how to do this is to have ...
user avatar
  • 87
0 votes
1 answer
87 views

Forwarding Data From rsyslog

We have set up a centralized syslog server (RHEL 7 running rsyslogd) that receives syslog data from most of our hosts. Our Security team wants to receive data as well. I'd prefer not to duplicate the ...
user avatar
0 votes
1 answer
182 views

run command after every line of grep output appears

I'm wanting to constantly monitor syslog and perform some computations after a regex pattern appears, and use the grep output in the command, as well as continue to monitor for new matching lines. The ...
user avatar
  • 486
0 votes
1 answer
1k views

Enhance Journalctl to show /var/log/messages

I am not able to find /var/log/messages under journald. Is there any way I can integrate journald with /var/log/messages such that journalctl shows logs from /var/log/messages?
user avatar
3 votes
1 answer
829 views

dmesg + how to enable dmesg history logs

We have RHEL server version 7.2 and we noticed that dmesg files from previous sessions under /var/log are not created what we have under /var/log are only ls -ltr | grep dmesg -rw-r--r-- 1 root ...
user avatar
  • 10.9k

1
2 3 4 5
8