Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

-1
votes
0answers
5 views

Logrotate debug mode errors

I have the following logrotate script /path/to/folder { daily rotate 30 notifempty sharedscripts copytruncate compress dateext preremove if file --mime-type "$1" | grep ...
1
vote
0answers
21 views

Docker Debian, getting some specific syslog in the docker container log

I have been installing SSH in the Debian Docker. Since I wanted to have some extra log, I also installed the Rsyslog as described in this question. Result was that some extra logs are created e.g. ...
0
votes
0answers
13 views

Losing syslog packets between hosts

I am losing syslog packets between two redhat servers. They are both virtual machines and have a couple of virtual firewalls inbetween them. I have no access to the firewalls but am assured that the ...
1
vote
0answers
31 views

Messages from syslogd flooding the terminal when waking up from sleep [closed]

I am using Tmux, and I see these message appearing on every session, attached or not, after waking the laptop up from sleep: Message from syslogd@parrot at Mar 28 23:17:54 ... kernel:[177769.535034] ...
0
votes
1answer
25 views

Logrotate is not compressing

I need to compress the files in var/log/remots/*/* with the following logrotate rule /var/log/remots/*/* { rotate 178 daily maxage 178 compress } located in /etc/logrotate.d/remots. ...
0
votes
0answers
5 views

Failing to install my syslog-startup.conf via yocto bitbake

I'm trying to install my own syslog-startup.conf file as a part of the busybox recipe. The file will look like this: DESTINATION=file # log destinations (buffer file remote) LOGFILE=/mnt/userrw/...
0
votes
1answer
33 views

Syslog to console, drawbacks?

I am wondering are there any drawback (performance wise) when output from some software is not logged to a file, but instead to console? Specific case would be running Docker containers, as some of ...
0
votes
1answer
33 views

How to keep kern.log out of syslog

I'm working on Ubuntu 16.04.3 and I found that I could get the log of kernel from two places: /var/log/kern.log and /var/log/syslog. /var/log/syslog contains other logs but I could find /var/log/kern....
0
votes
0answers
8 views

ksystemlog not working on Red Hat 7: “Error: BadDrawable (invalid Pixmap or Window parameter) 9”

Launching ksystemlog from the UI or the command sudo /bin/ksystemlog --icon utilities-log-viewer results in blank window and a ton of errors like this: Error: BadDrawable (invalid Pixmap or Window ...
0
votes
2answers
34 views

Syslog Output File Splitting HOURLY at Syslog Server

I have implemented syslog server on CentOS and using below Template to generate output file on daily basis - $template TmplNationalIP_PL, "/var/log/NIPFW/MX480/CGNAT_PL_%$year%.%$month%.%$day%" if ($...
4
votes
1answer
52 views

I have three different timezones on my Debian Linux

I use Debian 9.5.1. I used the dpkg-reconfigure tzdata command to set my timezone to Tehran. Now I have three timezones in my Linux. I execute the following three command together and look at logs: ...
1
vote
0answers
68 views

CentOS: Collecting and analysing logs using NXlog and OSSIM

Objective: Forward logs from all servers to OSSIM, correctly formatted and readable. Steps: Deploying one NXlog Collector/proxy node in each network zone - DONE Deploying one NXlog Collector/master ...
0
votes
0answers
182 views

Error while dialing dial unix /run/containerd/containerd.sock: connect: connection refused\“” module=libcontainerd namespace=plugins.moby`

Can someone explain what the following error in/var/log/syslog means? I don't know if I picked the relevant part, there is a lot more information in the log. Feb 4 10:57:51 chriad-VirtualBox dockerd[...
0
votes
2answers
66 views

How can I configure a running kernel to output dmesg info directly to the tty, without involving any userspace programs?

There are a large variety of questions floating around the 'net from people who want to watch the output of dmesg in real time. All the suggestions and answers involve using dmesg -w, tail, journalctl ...
1
vote
0answers
116 views

Nvidia-persistenced in syslog

On boot, I saw multiple lines about nvidia flashing on-screen before the X login screen. Looking at the /var/log/syslog, grep showed many entries about nvidia-persistenced on boot. It seems to start ...
-1
votes
2answers
24 views

log file question [closed]

I have a program that put out a log file to the /var/log/myfiles/ directory. these files are kept small in size and the file name is incremented by number . at the end of the day I want to cat the ...
0
votes
0answers
49 views

rsyslog: send logs to different file by filtering syslogs

I have a CentOS based rsyslog server which have the below settings, where it's getting all the remote NATing events from multiple hosts. $template TmplcpFW, "/var/log/%HOSTNAME%.log" if ($hostname == ...
2
votes
1answer
79 views

Source of this error: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted

We have this log in our syslog: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted Why do we get this error and how do we solve it? Our environment: Ubuntu 12.04; LXC;...
1
vote
1answer
25 views

Track active logging to log files

Is there a way to track which service/file is actively logging to a log file? In this case taking info from the syslog file and creating a file called filtered.log. I'm not seeing a process for ...
0
votes
1answer
307 views

rsyslog: send logs to different file using custom template

So, I'm using systemd to send the logs to rsyslog, and I want to write the logs to /var/log/app.log. Since it is a Java app with its own log format, I don't want to have timestamps or anything on it,...
1
vote
1answer
50 views

My attempts to use rsyslog to route messages to a log file

In myapp.service, I have : StandardOutput=syslog StandardErr=syslog When I do : $ journalctl -e -u myapp I can see each line of log contains "myapp[PID]". I've tried to set up /etc/rsyslog.d/...
0
votes
1answer
108 views

syslog-ng modification issue for unix socket

I am having issue researching the right way to go about a problem. The problem is the syslog-ng file in the salt master server at the moment only enforces unix-stream as follows: source s_sys { ...
3
votes
1answer
39 views

Find what program accessed a kernel module

How do I access a list of users/programs that accessed a certain module? I run: lsmod | grep ^uvcvideo This returns this line when no application is using my video camera: uvcvideo ...
-1
votes
1answer
83 views

Could I disable syslog.service after installing rsyslog on Ubuntu 18.04 server?

I am making a minimal Ubuntu for embedded system starting from Ubuntu base. Our samba-related script code relies on rsyslog so I installed this package. systemctl shows there is also a syslog.service,...
0
votes
1answer
368 views

Why is there no /var/log/kern.log?

I have an embedded system running a slim installation of Buildroot Linux with kernel 3.10.105. Apparently most commands come from BusyBox here, and it seems those do not always implement the full ...
1
vote
1answer
614 views

Where does cron log by default?

On Ubuntu 18.04, man cron says cron logs its action to the syslog facility 'cron', and logging may be controlled using the standard syslogd(8) facility Also, the default configuration of ...
0
votes
1answer
116 views

syslog forwarding

I'm using Solaris and have an application that writes to a log file /app/data/log/foo_log.021118. Am I able to use syslog to forward that specific log file to a remote server? Should I put ...
1
vote
2answers
198 views

Rsyslog - How to disable udp syslog?

Currently rsyslog is listening on both UDP socket and UNIX socket, as shown below: [root@machine ~]# netstat -ap | grep rsyslog udp 0 0 0.0.0.0:59018 0.0.0.0:* ...
2
votes
1answer
39 views

Possibility to disable or hide CRON notification about starting one specific process

I was wondering if it is possible to having multiple cron jobs in crontab active, but only one of them starts each minute. The problem here is I wish to keep log of all others jobs informations with ...
1
vote
1answer
128 views

Encryption of syslog & auditd in local disk? [closed]

We need to use encrypted syslog and auditd in local disk. Is it possible to save syslog and auditd message encrypted in disk ?
0
votes
0answers
86 views

How can I make syslog-ng to filter for a user name?

I've found a nice feature of the syslog-ng: if I use the logger to log things from the user process, I get the logging user name. Around so: peterh$ echo test log message|logger then I get this in /...
-1
votes
1answer
391 views

SyslogNG-How to optimise filter and log statements? [closed]

Below is the current configuration for Syslog-NG logging, locally, source s_network { udp( flags(syslog_protocol) keep_hostname(yes) ...
1
vote
1answer
194 views

Deployment of haproxy between devices and Syslog server

Below is the current architecture of Syslog-NG to avoid single point of failure. Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the ...
1
vote
1answer
150 views

Message forwarding with de-duplication - SyslogNG

Based on the advice from answer that says: Simply adding both servers and always write to both is the easiest one, we have setup syslog-NG server on two machines that receive same syslog message and ...
0
votes
2answers
673 views

syslog-ng won't start because error binding socket with permission denied

I've recently rebooted one of my machines after a long time and a now I'm having a lot of problems with configuration changes. syslog-ng service is not working anymore with the following error from ...
0
votes
1answer
27 views

How can a syslog configuration be set to place a log in the users home directory?

I want to use one of Drupal's syslog modules but place the log in a the user's home directory so there are not permissions issues when the user wants to view or analyze the file. Is there a way a ...
0
votes
1answer
291 views

How to omit PAM log messages for specific user (pam_succeed_if quiet)

I'm using a monitoring agent (telegraf) to monitor fail2ban. Unfortunately, it requires SuperUser rights to execute fail2ban-client, which causes 24 system log messages every 10 seconds... Do the math,...
0
votes
3answers
45 views

How to ensure syslog captures maximum possible log before abrupt system power off

I observe that syslog file (/var/log/messages) doesn't seem to capture the latest possible log before abrupt system shutdown. (My Linux system is running and then abruptly there is a power loss.) How ...
0
votes
1answer
83 views

Forwarding messages with certain filter

Scenario is to receive all incoming messages and store all of those messages in /app/syslog-ng/custom/output/all_devices.log, but forward only certain messages(by filtering). filter tag is used to ...
5
votes
2answers
2k views

Examining /dev/log

/dev/log is the default entry for system logging. In the case of a sytemd implementation (this case) it's a symlink to whatever /run/systemd/journal/dev-log. It used to be a receiving end of a unix ...
0
votes
1answer
22 views

Configuring event log - RHEL

In the Readme, it mentions to invoke ./configure before make & make install of eventlog on RHELinux. But, I do not see configure script except configure.in. Do I need to rename configure.in to ...
0
votes
1answer
27 views

Why is 'logger' always executed as the same user?

I'm using rsyslog 8.24 on debian. Each time I trigger logger "some message" the syslog refers to the same and only system user - it does not matter if I switch user (even as root), the messages are ...
3
votes
1answer
1k views

Sending bash history to syslog

Bash version 4.N has apparently the ability to write command-history to syslog, but I can't find information about how to configure this. I have read several pages which offer hacks using the ...
0
votes
0answers
141 views

pptpd always failed to accept a new connection

Log text from syslog(by pptpd): Jul 18 17:25:25 user1 pppd[20577]: Using interface ppp0 Jul 18 17:25:25 user1 pppd[20577]: Connect: ppp0 <--> /dev/pts/1 Jul 18 17:25:46 user1 systemd-logind: ...
1
vote
2answers
293 views

Pass kernel and boot logs to syslog

I have a systemd based system and for some services I had to set up remote logging. The simplest way to set this was to use rsyslog and set the StandardOutput=syslog in the unit file. Now I also ...
2
votes
2answers
331 views

nvme fstrim causing crash on linux, disabling with systemctl doesn't help

I have a Linux (Ubuntu 18, kernel 4.15) desktop booting from an M2 nvme disk. Once a week, it will crash around midnight. The relevant log file output from /var/log/syslog.* is below: Jul 16 00:00:...
0
votes
0answers
36 views

React to a writing error

Hi there, I'm curently working on a debian system, this system (under Jessie) write datas to an SDcard really often, sometimes (i'm working on it but it is not the question here) the system is unable ...
1
vote
2answers
261 views

OpenVPN riddling syslog with errors, but otherwise seems to work flawlessly

Yesterday I configured OpenVPN on a Ubuntu 18.04 server which seems to work. I can connect no problem and systemctl status openvpn gives me green. However, my syslog is being riddled with errors which ...
0
votes
1answer
291 views

Syslog-ng not sending messages to localhost port 514 on centos 7.5

tcpdump -nnAs0 -i eth0 port 514 As I understand it this should display any logging msgs sent to syslog locally. However I send many via python syslog module, which I can tail via /var/log/messages ...
1
vote
1answer
553 views

How to set up syslog to log to both file && buffer

I'm using an embedded Linux OS which was built using yocto. I'm trying to alter busybox syslogd in order to have it output to both a file & buffer. so I can use logread -f as well as have the ...