Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

4G connection drop Airtel Syslog message (7/8)

My 4G device is on an automobile that travels around 500 kms in a night. The network disconnects sometimes. And this is the log I see in the Syslog. Can someone help me understand what is going on? ...
1
vote
0answers
6 views

syslog tag for systemd dotnet service keeps changing between SyslogIdentifier and process name

I have a number of .NET Core applications running as systemd services on Ubuntu 18.04 (systemd 237). The unit files look like this: [Unit] Description=my-service dotnet service [Service] Type=simple ...
1
vote
1answer
2k views

how to have syslog not log particular warnings?

Short Version: I want to stop the following message from appearing in my syslog. They pertain to a USB port on my keyboard that can be ignored: Feb 9 23:33:45 sunfire kernel: [ 8163.156041] usb 3-6....
4
votes
1answer
4k views

Why does journalctl say “— no entries --”?

For example: ┌─[10:50:38/hypership/root/~] └─╼ journalctl -b No journal files were found. -- No entries -- ┌─[10:50:46/hypership/root/~] └─╼ journalctl --verify No journal files were found. /var/...
0
votes
1answer
1k views

Understanding network problem (syslog)

I am running a lubuntu 14.04 server and its always worked well, except for the last couple of days it keeps dropping off the LAN. I am using a couple of powerlink adapters to connect it up as WiFi was ...
1
vote
1answer
23 views

How can I add lastlog support to Alpine Linux?

Apparently, musl, the default library for Alpine Linux does not support lastlog. Generally you will use Alpine to deploy containers that do not need that kind of support, but it could be used also to ...
1
vote
0answers
20 views

My epoch time in syslog is 8 hours behind. How do I fix it?

I am in the PST (UTC -8) timezone. My syslog in stamping all messages as PST -8 instead of UTC, or even UTC -8 (so the timestamps are 8 hours behind my local time!). regular date command is correct ...
0
votes
0answers
16 views

Syslog-ng stops logging randomly after some time

I have a Linux server who forwards all the log flux to another central Syslog server. Both run Centos 7 with Syslog-ng 3.18.1. After some time (could be two hours, one day or two weeks...), the ...
0
votes
1answer
36 views

OpenSSH Server: Directive 'SyslogFacility' is not allowed within a Match block

I want a specific matched User to have its 'ssh/scp' activities logged in an alternative facility. The current default is AUTH, but I'd like to log stuff for user 'dummy' to syslog Facility 'LOCAL2'. ...
1
vote
0answers
19 views

What happens to rsyslog queue files after they have been processed?

I am working on a machine (ubuntu 18.04) that generates logs at times when it's not connected to a network. I have configured rsyslog to forward some of these logs to an aggregator service (fluentd) ...
1
vote
0answers
20 views

Log user status (archlinux)

I'd like to write a code that restricts myself from accessing the laptop for too long. To do that, I have to have access to user's active time. Currently, I use ac (a part of GNU accounting utils) to ...
1
vote
2answers
161 views

i dont know what is producing the gigabytes of error in syslog

the error is showing itself like this Jan 11 16:39:52 pop-os org.gnome.Nautilus[1514]: [00007fa4fc465ce0] vdpau_chroma filter error: video mixer rendering failure: An invalid handle value was ...
0
votes
1answer
44 views

Using syslog for user/application logs on Centos 7/8

I want to use syslog(3) to write application logs to a central recorder. The application runs on a collection of computers on the same subnet. Not interested (at present) in capturing system (non-...
1
vote
1answer
982 views

iptables does not generates log

I have this script make_firewall.sh with rules for iptables: iptables -F iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT iptables -A INPUT -s 127.0.0....
2
votes
3answers
7k views

syslog-ng.conf under SLES 12

Where can I find the syslog config file under SLES 12? rsyslog and syslog-service are installed according to YaST2 and rcsyslog status outputs: ServerName:~ # rcsyslog status Usage: /sbin/rcsyslog {...
3
votes
1answer
4k views

Is it possible to reduce systemd-journald size stored format (and thus size)?

I'm using systemd on raspberrypi machine with yocto based system. Recently I had some problems with redirecting messages to rsyslog.socket so I decided to get rid of rsyslog completely in favour of of ...
0
votes
0answers
23 views

Bash syslog events skip systemd-journald and send directly to syslog daemon

I want to send Bash history information to syslog on a Linux (CentOS 7 system) with systemd, but I want to skip the intrusive systemd-journal service which typically forwards to the syslog daemon, ...
0
votes
0answers
34 views

Faulty usb device: how to disable to get rid of dmesg errors

I bought a second hand computer, which seems to have a faulty USB port (or something - I haven't encountered it). The only real annoyance is that my syslogs are spammed with the same messages: [...
1
vote
1answer
1k views

How to interpret SCSI device (sd) timeout logs

In /var/log/messages, I find the following log: Oct 23 21:48:53 localhost kernel: sd 3:0:0:0: timing out command, waited 180s Please explain the values that are separated by colons. Also where ...
1
vote
0answers
13 views

want to live monitor all log files in one vieuw

I like to view all log files live like tail -n0 somelog.log But then for literally all log files on the system (CentOS 7) Or an other way to do this is also nice. I want to output this to a web page ...
0
votes
1answer
1k views

Constant UFW Block in Syslog

In reviewing my syslog, I've found that 99% of it consists of UFW BLOCK statements from 3 or 4 IP's (see below; edited for space). Is this normal? What do these entries mean? If they are safe, how can ...
0
votes
1answer
61 views

How to stop PAM messages in auth.log for a specific script run with sudo?

I've set up a bash script to run automatically (from crontab) with sudo privileges using this visudo solution. Since the script requires multiple runs, it pollutes my /var/log/auth.log, so I disabled ...
0
votes
1answer
2k views

syslog-ng fail to start

centos 7(x64),syslog-ng v 3.5 Below is my syslog-ng.cfg @version:3.5 @include "scl.conf" options { flush_lines (0); time_reopen (10); log_fifo_size (1000); chain_hostnames (off); ...
0
votes
1answer
236 views

Stuck at “Loading initial ramdisk” after attempt to update the kernel

I have an Asus FX433N with an UHD 620 Intel graphics. The system has a dual-boot with windows 10 and debian stable, where both system works just fine. I was trying to use wine and the system complain ...
1
vote
1answer
1k views

Skip syslog/rsyslog logging of certain cron jobs

In most GNU/Linux distributions the default is to log start (and many different events) of every cron job to syslog. It's rather convenient, but not for a very frequent jobs, which started, say, every ...
0
votes
0answers
29 views

Pipe systemd StandardOutput and StandardError to both Syslog and File?

I have a systemd process that currently runs with the options StandardOutput=syslog StandardError=syslog I would like to continue sending logs to syslog, while also sending each to a different log ...
0
votes
0answers
96 views

Best way to intercept dnsmasq query logs

I have a Dnsmasq server, on which I want to parse query logs to be able to build stats based on queries / responses. The Dnsmasq provides two logging mechanisms: By default, it logs to syslog If a ...
1
vote
1answer
2k views

system log stop logging

Was trying to enable log for chroot users May have done sth. wrong ,find ls -l in /var/log most log files size stay 0. Try to fix it followed this answer # systemctl restart systemd-journald.socket #...
1
vote
1answer
1k views

/var/lib/puppet/state/agent_catalog_run.lock exists

I'm seeing the following error on CentOS 6.4: # puppet agent --test Run of Puppet configuration client already in progress; skipping (/var/lib/puppet/state/agent_catalog_run.lock exists) What should ...
1
vote
1answer
25 views

Can I block a syslog message with iptables

I've got a few firewalls that I don't personally manage sending junk syslog messages through my ubuntu machine (which acts as a software router). Is there an easy way for me to block forwarding a ...
0
votes
0answers
38 views

Tomcat 7 / logback produces logs to /var/log/message & journactl

Since we change our server from Centos 6 / Tomcat 6 to Centos 7 / Tomcat 7, tomcat's logs have changed places. Before the were located inside catalina.out and now they are in /var/log/message (and ...
0
votes
0answers
19 views

Disconnect desktop apps output from going to journald/syslog

At our university/department we run a bunch of Debian 10 labs. When people start applications from their desktop environment, some output goes to systemd journal + syslog (+ remote syslog collection) -...
0
votes
1answer
26 views

mysqldump cron job filling up my syslog

I have the following job in my crontab: 0 */4 * * * /usr/bin/mysqldump -u root -p'PASSWORD' --all-databases | /bin/gzip -9 > /home/USER/_mysql_backup/`date "+\%F--\%H-\%M"`.databases.sql.gz ; rm -...
1
vote
1answer
1k views

Separate SSHD Authpriv logs into /var/log/sshd, all other authpriv logging goes to messages

Right now, sshd is using the authpriv facility. The level of logging is fine, but I don't want it in the syslog, I want it to go to /var/log/sshd (which doesn't yet exist) on Red Hat Linux/Enterprise ...
1
vote
1answer
333 views

OpenLDAP v2.4 enable logging

I have openldap v 2.4 running on centos7 and working but i cannot get it to log anything. I have tried adding the below line to the rsyslog.conf file but i still do not get any log file. LOCAL4.* ...
1
vote
2answers
451 views

Can I avoid debian-sa1 lines in my syslog?

My syslog is chock-full of the following: Oct 28 23:35:01 myhost CRON[17705]: (root) CMD (command -v debian-sa1 > /dev/null && debian-sa1 1 1) Oct 28 23:45:01 myhost CRON[18392]: (root) ...
0
votes
0answers
12 views

stop hddtemp syslog

I am using hddtemp to log the temperatures of my HDDs. Firstly I set it to log it every 60 secs, but that's too much, so after that I set that to 600 seconds, but now it logs every 60 and 600 seconds. ...
0
votes
1answer
112 views

/var/log/messages - not compressing while rotating

I'm trying to compress the messages cause its growing huge in size and there is not much space. I tried all from - compress-messages - to compress the messages but its with glob finding old rotated ...
2
votes
2answers
67 views

How to split logs into monthly, daily and hourly folders when bringing in syslog events?

I am bringing in log files via rsyslog and my config looks like the following: root@rhel:/etc/rsyslog.d# head mail_prod_logs.conf if $fromhost-ip=="10.10.10.10" and $programname=="AMP_Logs" then -/...
0
votes
1answer
21 views

How to edit my config file to create two log files while ingesting syslog events?

I am sending mail message logs and amp logs from the same server 10.10.10.10 via syslog to my RHEL7 server. I am running rsyslog and have the following config file: mail_logs.conf $template ...
1
vote
1answer
111 views

Does not write logs into /var/log/security after I modified this file

I run a script that modifies /var/log/security. If someone tries to connect to my server via ssh, this event writes into /var/log/security.( I have set firewall_enable="YES" and firewall_logging="...
1
vote
0answers
199 views

Auditd, Syslog and Journald

I have been investigating about these three logging solutions auditd, syslog, and journald, but still there are thing that unclear to me. According to the things I read, auditd audits events in the ...
0
votes
0answers
19 views

How to read from syslog using systemd service

Does anyone know what the proper way is to create a systemd service and read from syslog write the logs out to the network? I had this in a service: tail -f /var/log/syslog | ...
0
votes
0answers
17 views

rsyslogd missing message?

I set up a logging host in the ryslogd config using python, restart daemon etc and get a correct message: Sep 20 09:03:20 Desk-r6 CLI[13845]: (admin) (root) (192.168.1.10) startup : Success Code to ...
-1
votes
1answer
72 views

allow user access to syslog

I'm running an embedded Linux (Dreadnaught), and I'd like to be able to manually enter a line into the syslog as the user login, and have the result of other commands stored in the syslog. e.g.: ...
0
votes
0answers
46 views

How to mute syslog from console, without using actual syslog daemon?

I usually switch between Xorg and (framebuffer) text console a lot. But every time I switch to text console, I got a message like this on the text console: acpid: client 7251[0:0] has disconnected ...
0
votes
0answers
86 views

Logger on remote server

I am trying to send log message to my virtual machine from work station. Command : logger -n 192.168.122.78 Test After this command nothing shows up in /var/log/messages of VM, or work station. No ...
0
votes
0answers
21 views

Syslog problems when running an old version of wu-ftpd in Docker

I am implementing the ftpd exploit found here in a Docker container. I have downloaded the rpm, and I install it with the following dockerfile: FROM centos:7 WORKDIR /ftpd/ COPY ...
0
votes
0answers
29 views

$InputTCPMaxListeners and $InputTCPMaxSessions not being respected

I have set up many rulesets with $RulesetCreateMainQueue on and when I prepend $InputTCPMaxListeners and $InputTCPMaxSessions before any $InputTCPServerRun directives, the $InputTCPMaxListeners and $...
1
vote
2answers
215 views

rsyslog filter severity not working

I have following Rsyslog config to send logs to remote servers. Problem is its sending lots of INFO mesg to remote server and i don't want that noise. I am trying to configure filter so it send all ...

1 2 3 4 5 7