Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
183
votes
4answers
747k views

Where are Apache file access logs stored?

Does anyone know where file access logs are stored, so I can run a tail -f command in order to see who is accessing a particular file. I have XAMPP, which is an Apache server installed on my machine, ...
100
votes
4answers
219k views

How to make log-rotate change take effect

I followed this link to change log-rotate configuration for RHEL 6 After I made the change to config file, what should I do to let this take effect?
63
votes
2answers
56k views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
44
votes
2answers
68k views

What is the local6 (and all other local#) facilities in syslog?

What I understand On *nix servers, we configure sending logs using facility.severity, where facility is the name of the (let's call it) "component" of the system, such as kernel, authentication, and ...
27
votes
2answers
32k views

add new syslog facility

I would like to use syslog to log messages coming from my PHP based site. My question is - can I add custom facility name? I know there are predefined facilities like: auth, authpriv, cron, dæmon, ...
25
votes
5answers
13k views

Receiving Syslog messages with a systemd Arch Linux

I'm feeling like I've overlooked the obvious, but I can't figure out how to get my Arch Linux server, which uses systemd, to receive and log syslog messages from a remote system. I have a Cisco 678 ...
22
votes
4answers
47k views

make a log file

Is there any way to make a log file for maintaining some data in /var/log/ with the help of some library function or system call in c language in linux. And I also want to know the standards that we ...
21
votes
1answer
9k views

Is systemd-journald a syslog implementation?

I wonder if systemd-journald is a new implementation of syslog protocol, or rather, it uses syslog implementations, such as rsyslog, syslog-ng I've googled a bit, but I didn't find nothing convincing ...
18
votes
3answers
59k views

How can dmesg content be logged into a file?

I'm running a Linux OS that was built from scratch. I'd like to save the kernel message buffer (dmesg) to a file that will remain persistent between reboots. I've tried running syslogd but it just ...
18
votes
2answers
36k views

Difference between authpriv and auth?

What's the difference between authpriv and auth in syslog configuration? It wasn't mentioned in syslog.conf, only tells me that such facility exists.
17
votes
3answers
57k views

rsyslog not logging

This is an odd issue. I was testing the chrony/ntp services on a RHEL7 VM and was resetting its time as well as the host's. Once I was satisfied with it I checked /var/log/messages and realized it ...
15
votes
1answer
4k views

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour ...
14
votes
2answers
24k views

Configuring syslogd in Ubuntu

In CentOS and many other distros you can configure syslogd using /etc/syslog.conf but in Ubuntu there is no such file. Which file I should edit for configuring syslogd in Ubuntu.
14
votes
2answers
32k views

System log full of session and slice messages

I have a new CentOS 7 installation, and noticed that my /var/log/messages file is full of messages like this Mar 6 08:40:01 myhostname systemd: Started Session 2043 of user root. Mar 6 08:40:01 ...
13
votes
1answer
15k views

learning about general logging/logrotation on linux?

Assume, that beside the Apache web server logs I never had any contact with any kind of (professional) logs on any operation system. So Logging, although I understand some basics, is all together a ...
12
votes
5answers
27k views

Ubuntu Server 16.04 - OpenVPN seems not to start, no logs get written

I installed and oepnvpn on an Ubuntu server 16.04 by following the following guideline how-to-set-up-an-openvpn-server-on-ubuntu When I start the openVPN server with: service openvpn start it looks ...
12
votes
2answers
5k views

Is it possible to make seek() operations on a named pipe return successful?

Is there any way to make it so that when programs try to perform seek() operations on a named pipe it will come back successful (but act as if the pipe was an empty file) instead of 'Illegal seek'? I ...
11
votes
2answers
8k views

Mint 18.1 - A whole lot of “Soliciting pool server xxx.xxx.xxx.xxx”

I was looking in syslog to look into an audio issue and I see a hell of a lot of the Soliciting pool server ntp daemon messages. I've run other linux in past and never recall seeing so many ntp log ...
10
votes
2answers
52k views

How can I configure syslog.conf file, to log iptables messages in a separate file?

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
10
votes
3answers
22k views

Cleaning log files under linux

I am using a kvm ubuntu 10.04 virtual machine to test some features of a kernel module. I grep through the /var/log files to observe the kernel messages about that module. To start from a clean state,...
10
votes
1answer
14k views

Suppress duplicate messages in rsyslog?

Is there a way to configure rsyslog to suppress identical duplicate messages? In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every ...
9
votes
1answer
21k views

Remote syslog command line Client

I use logger pretty regularly, but is there a FOSS command line tool for remote submission of syslog messages over the network? Right now, I have to configure a facility/priority pair to submit to a ...
9
votes
1answer
3k views

Where does the kernel ring buffer sit relative to rsyslog?

Is rsyslog just an abstraction layer on top of the kernel ring buffer? Or is the kernel ring buffer its own entity and rsyslogs interaction is like that of any other "application"?
9
votes
1answer
21k views

What does “kernel:NMI watchdog: BUG: soft lockup” followed by other errors mean?

I have my terminal always opened (Fedora 22), because all my work I do from there. Sometimes I search some info in browser or just have fun. After 20-30 minutes of browsing (browser starts not from ...
8
votes
5answers
6k views

Switch off syslog on laptop?

Is there any point in keeping logs on my laptop? This is not a server to debug problems via syslog. I occassionally want to look at dmesg | tail but that does not mean I need anything on disk. Wastes ...
7
votes
2answers
7k views

Can I redirect logfiles to syslog?

I have a Node.js server that is being monitored by forever. Forever generates three logfiles: the server STDOUT, STDERR and the log of forever itself. $ forever -l forever.log -o out.log -e err.log ...
7
votes
1answer
12k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
7
votes
2answers
5k views

How should I send systemd logs to a dedicated logging server

In the past, I have used syslog-ng or rsyslog to send system logs to a dedicated logging server somewhere else on the network. With systemd however, things like the sudo commands that previously were ...
7
votes
1answer
4k views

rsyslog filling up /var/log puts the system down

Sometimes a process goes wrong and the logs in /var/log grow up so much they ultimately fill up the whole partition. It happened me once on a server due to a wrong postfix config, and once on a ...
7
votes
2answers
3k views

Why does the syslog timestamp not include a year?

I am planning to store some of my log messages for more than a year, but the syslog timestamp description from RFC3164 does not include a year in the timestamp portion of a log entry. An example ...
7
votes
2answers
2k views

Logging apt/dpkg activity to syslog

My goal is to log apt/dpkg activity using syslog (rsyslog), so that log entries are sent to central syslog server. dpkg writes to /var/log/dpkg.log, apt writes to /var/log/apt directory. I did some ...
6
votes
2answers
2k views

rsyslog - action AND action

I want to create rule to send data from facility to file AND to MySQL database. How it can realized? Only by adding second line like: syslog.* /var/log/syslog.log syslog.* ...
6
votes
1answer
8k views

cronjob does not execute when not logged in

SOLVED, see 'useless' answer. I have a cronjob in my crontab. When I specify the job to be executed in 2minutes, I wait, and then I can see files created by the job, I can see the process with ps. ...
6
votes
1answer
204 views

What do you use the -t “tag” option for in logger?

When using the "logger" command to write messages to the system logs from scripts, I use the -t "tag" to store the scripts name along side the message it's written to the log. I do this to make ...
6
votes
2answers
1k views

How to implement logwatch functionality on top of systemd journal?

Logwatch scans logfiles with regular intervals, collects errors and stuff, then mails it to the admin. This was back in syslog and logfiles days. What's the corresponding solution for systemd's ...
6
votes
2answers
8k views

How to configure logging inside a Docker container?

I was trying to dockerize (into Debian 8.2) an OpenVPN server (yes, I do know, there already are such containers) but something went wrong inside the container and the server failed to start. I ...
6
votes
2answers
5k views

Examining /dev/log

/dev/log is the default entry for system logging. In the case of a sytemd implementation (this case) it's a symlink to whatever /run/systemd/journal/dev-log. It used to be a receiving end of a unix ...
6
votes
2answers
4k views

Why does rsyslogd not honor the following lines in rsyslog.d

This is somewhat related to my previous question here. I have three files in /etc/rsyslog.d which is included from /etc/rsyslog.conf: 00-iptables.conf 50-default.conf postfix.conf The first one is ...
6
votes
3answers
5k views

How to send snmp trap when syslog is logged?

I need to send snmp trap n number of host whenever any syslog is logged in /var/log/messages. How can I do this, can anybody give me any idea?
6
votes
0answers
952 views

NUL entry in syslog? [closed]

My servers went down on the 30th. It just came back online today. At first I thought it was the router because the router the server is connected to is a bit squirrely but when I checked syslog I have ...
5
votes
2answers
5k views

centos 6.8: Deleted /var/log/messages … it didn't come back?

To make debugging an issue easier, I deleted /var/log/messages .... and it hasn't come back! I thought debug messages from kernel and modules like autofs were routed to this file. But even after I ...
5
votes
5answers
3k views

extract fields from “tail -f” of a syslog stream

Example line from syslog file: Aug 1 10:25:50 10.10.10.1 id=firewall sn=XXXX time="2012-08-01 14:35:18 UTC" fw=x.x.x.x pri=6 c=1024 m=537 msg="Connection Closed" f=11 n=195273698 src=x.x.x.x:60246:X3:...
5
votes
3answers
6k views

Can I stop IPv6 “Router Advertisement” filling syslog without disabling IPv6?

My syslog looks like this: Apr 1 19:05:25 raspberrypi dhcpcd[699]: eth0: Router Advertisement from fe80::c23e:fff:fe63:5170 Apr 1 19:07:35 raspberrypi dhcpcd[699]: eth0: Router Advertisement from ...
5
votes
1answer
4k views

How to disable systemd's “Time has been changed” message spam in /var/log/syslog on Debian jessie?

Due to combined use of Debian jessie, that uses systemd by default, and sdwdate (that uses Slow Clock Adjuster ( gh )), my system clock is frequently changed. As a result /var/log/syslog gets ...
5
votes
2answers
21k views

Messages from syslogd, what do they mean and what do I do?

Recently, these messages started popping up straight into my prompt when I'm connected to the OpenSUSE system in question via PuTTY: Message from syslogd@host at Aug 5 11:04:03 ... kernel:[ 6177....
5
votes
1answer
3k views

Systemd Python service not sending all output to syslog

I have a custom service and have explicitly called for all stdout & stderr to be sent to syslog in the config file, however only some of the output appears in both syslog and the journal (they are ...
5
votes
1answer
187 views

Separate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
5
votes
1answer
230 views

How to tell if syslog.conf has a typo

I recently did in fact have a typo in my syslog.conf file, but I had no idea initially why I couldn't restart the daemon. In Ubuntu, all I seemed to get was a FAIL message after a rather long wait ...
5
votes
2answers
560 views

How to prevent arp-scan from writing to syslog?

I am using arp-scan in a bash script to verify that a host is reachable. I have the script setup as a cron job that runs every minute and /var/log/syslog is filling up with the arp-scan output. I ...
5
votes
1answer
845 views

rsyslog rule inconsistently applied

I have created a rule to redirect messages containing {FILTER} in file /etc/rsyslog.d/40-filter.conf :msg,contains,"{FILTER}" /var/log/filter.log & ~ I have edited file /etc/rsyslog.conf so it ...