Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
191
votes
4answers
817k views

Where are Apache file access logs stored?

Does anyone know where file access logs are stored, so I can run a tail -f command in order to see who is accessing a particular file. I have XAMPP, which is an Apache server installed on my machine, ...
119
votes
4answers
256k views

How to make log-rotate change take effect

I followed this link to change log-rotate configuration for RHEL 6 After I made the change to config file, what should I do to let this take effect?
73
votes
2answers
61k views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
48
votes
2answers
79k views

What is the local6 (and all other local#) facilities in syslog?

What I understand On *nix servers, we configure sending logs using facility.severity, where facility is the name of the (let's call it) "component" of the system, such as kernel, authentication, and ...
27
votes
2answers
35k views

add new syslog facility

I would like to use syslog to log messages coming from my PHP based site. My question is - can I add custom facility name? I know there are predefined facilities like: auth, authpriv, cron, dæmon, ...
25
votes
1answer
11k views

Is systemd-journald a syslog implementation?

I wonder if systemd-journald is a new implementation of syslog protocol, or rather, it uses syslog implementations, such as rsyslog, syslog-ng I've googled a bit, but I didn't find nothing convincing ...
25
votes
6answers
15k views

Receiving Syslog messages with a systemd Arch Linux

I'm feeling like I've overlooked the obvious, but I can't figure out how to get my Arch Linux server, which uses systemd, to receive and log syslog messages from a remote system. I have a Cisco 678 ...
23
votes
3answers
71k views

How can dmesg content be logged into a file?

I'm running a Linux OS that was built from scratch. I'd like to save the kernel message buffer (dmesg) to a file that will remain persistent between reboots. I've tried running syslogd but it just ...
23
votes
2answers
41k views

Difference between authpriv and auth?

What's the difference between authpriv and auth in syslog configuration? It wasn't mentioned in syslog.conf, only tells me that such facility exists.
22
votes
4answers
52k views

make a log file

Is there any way to make a log file for maintaining some data in /var/log/ with the help of some library function or system call in c language in linux. And I also want to know the standards that we ...
20
votes
2answers
46k views

System log full of session and slice messages

I have a new CentOS 7 installation, and noticed that my /var/log/messages file is full of messages like this Mar 6 08:40:01 myhostname systemd: Started Session 2043 of user root. Mar 6 08:40:01 ...
17
votes
3answers
65k views

rsyslog not logging

This is an odd issue. I was testing the chrony/ntp services on a RHEL7 VM and was resetting its time as well as the host's. Once I was satisfied with it I checked /var/log/messages and realized it ...
16
votes
1answer
5k views

How can I disable UFW logging for a specific event?

My router sends out multicast packets in regular intervals that are blocked by UFW's standard policies. These events are harmless but spam my syslogs and ufwlogs. I can't change the router's behaviour ...
14
votes
5answers
33k views

Ubuntu Server 16.04 - OpenVPN seems not to start, no logs get written

I installed and oepnvpn on an Ubuntu server 16.04 by following the following guideline how-to-set-up-an-openvpn-server-on-ubuntu When I start the openVPN server with: service openvpn start it looks ...
14
votes
2answers
24k views

Configuring syslogd in Ubuntu

In CentOS and many other distros you can configure syslogd using /etc/syslog.conf but in Ubuntu there is no such file. Which file I should edit for configuring syslogd in Ubuntu.
13
votes
1answer
15k views

learning about general logging/logrotation on linux?

Assume, that beside the Apache web server logs I never had any contact with any kind of (professional) logs on any operation system. So Logging, although I understand some basics, is all together a ...
12
votes
2answers
5k views

Is it possible to make seek() operations on a named pipe return successful?

Is there any way to make it so that when programs try to perform seek() operations on a named pipe it will come back successful (but act as if the pipe was an empty file) instead of 'Illegal seek'? I ...
12
votes
2answers
9k views

Mint 18.1 - A whole lot of “Soliciting pool server xxx.xxx.xxx.xxx”

I was looking in syslog to look into an audio issue and I see a hell of a lot of the Soliciting pool server ntp daemon messages. I've run other linux in past and never recall seeing so many ntp log ...
10
votes
2answers
54k views

How can I configure syslog.conf file, to log iptables messages in a separate file?

How can I configure /etc/syslog.conf file in order to save log information about iptables in a specific file. I want to save these information separately, so I can extract what I want easily and ...
10
votes
5answers
2k views

I don't know what is producing the gigabytes of error in syslog

The error is showing itself like this: Jan 11 16:39:52 pop-os org.gnome.Nautilus[1514]: [00007fa4fc465ce0] vdpau_chroma filter error: video mixer rendering failure: An invalid handle value was ...
10
votes
1answer
26k views

Remote syslog command line Client

I use logger pretty regularly, but is there a FOSS command line tool for remote submission of syslog messages over the network? Right now, I have to configure a facility/priority pair to submit to a ...
10
votes
3answers
23k views

Cleaning log files under linux

I am using a kvm ubuntu 10.04 virtual machine to test some features of a kernel module. I grep through the /var/log files to observe the kernel messages about that module. To start from a clean state,...
10
votes
3answers
10k views

Examining /dev/log

/dev/log is the default entry for system logging. In the case of a systemd implementation (this case) it's a symlink to whatever /run/systemd/journal/dev-log. It used to be a receiving end of a unix ...
10
votes
1answer
14k views

Suppress duplicate messages in rsyslog?

Is there a way to configure rsyslog to suppress identical duplicate messages? In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every ...
10
votes
2answers
8k views

How should I send systemd logs to a dedicated logging server

In the past, I have used syslog-ng or rsyslog to send system logs to a dedicated logging server somewhere else on the network. With systemd however, things like the sudo commands that previously were ...
10
votes
2answers
5k views

Why does the syslog timestamp not include a year?

I am planning to store some of my log messages for more than a year, but the syslog timestamp description from RFC3164 does not include a year in the timestamp portion of a log entry. An example ...
9
votes
5answers
6k views

Switch off syslog on laptop?

Is there any point in keeping logs on my laptop? This is not a server to debug problems via syslog. I occassionally want to look at dmesg | tail but that does not mean I need anything on disk. Wastes ...
9
votes
1answer
3k views

Where does the kernel ring buffer sit relative to rsyslog?

Is rsyslog just an abstraction layer on top of the kernel ring buffer? Or is the kernel ring buffer its own entity and rsyslogs interaction is like that of any other "application"?
9
votes
2answers
22k views

What does “kernel:NMI watchdog: BUG: soft lockup” followed by other errors mean?

I have my terminal always opened (Fedora 22), because all my work I do from there. Sometimes I search some info in browser or just have fun. After 20-30 minutes of browsing (browser starts not from ...
8
votes
1answer
16k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
8
votes
2answers
2k views

Logging apt/dpkg activity to syslog

My goal is to log apt/dpkg activity using syslog (rsyslog), so that log entries are sent to central syslog server. dpkg writes to /var/log/dpkg.log, apt writes to /var/log/apt directory. I did some ...
7
votes
2answers
8k views

Can I redirect logfiles to syslog?

I have a Node.js server that is being monitored by forever. Forever generates three logfiles: the server STDOUT, STDERR and the log of forever itself. $ forever -l forever.log -o out.log -e err.log ...
7
votes
4answers
2k views

How to implement logwatch functionality on top of systemd journal?

Logwatch scans logfiles with regular intervals, collects errors and stuff, then mails it to the admin. This was back in syslog and logfiles days. What's the corresponding solution for systemd's ...
7
votes
1answer
5k views

rsyslog filling up /var/log puts the system down

Sometimes a process goes wrong and the logs in /var/log grow up so much they ultimately fill up the whole partition. It happened me once on a server due to a wrong postfix config, and once on a ...
7
votes
1answer
9k views

How to configure logging inside a Docker container?

I was trying to dockerize (into Debian 8.2) an OpenVPN server (yes, I do know, there already are such containers) but something went wrong inside the container and the server failed to start. I ...
6
votes
2answers
2k views

rsyslog - action AND action

I want to create rule to send data from facility to file AND to MySQL database. How it can realized? Only by adding second line like: syslog.* /var/log/syslog.log syslog.* ...
6
votes
4answers
7k views

Can I stop IPv6 “Router Advertisement” filling syslog without disabling IPv6?

My syslog looks like this: Apr 1 19:05:25 raspberrypi dhcpcd[699]: eth0: Router Advertisement from fe80::c23e:fff:fe63:5170 Apr 1 19:07:35 raspberrypi dhcpcd[699]: eth0: Router Advertisement from ...
6
votes
2answers
23k views

Messages from syslogd, what do they mean and what do I do?

Recently, these messages started popping up straight into my prompt when I'm connected to the OpenSUSE system in question via PuTTY: Message from syslogd@host at Aug 5 11:04:03 ... kernel:[ 6177....
6
votes
1answer
10k views

cronjob does not execute when not logged in

SOLVED, see 'useless' answer. I have a cronjob in my crontab. When I specify the job to be executed in 2minutes, I wait, and then I can see files created by the job, I can see the process with ps. ...
6
votes
1answer
223 views

What do you use the -t “tag” option for in logger?

When using the "logger" command to write messages to the system logs from scripts, I use the -t "tag" to store the scripts name along side the message it's written to the log. I do this to make ...
6
votes
1answer
4k views

Systemd Python service not sending all output to syslog

I have a custom service and have explicitly called for all stdout & stderr to be sent to syslog in the config file, however only some of the output appears in both syslog and the journal (they are ...
6
votes
2answers
4k views

Why does rsyslogd not honor the following lines in rsyslog.d

This is somewhat related to my previous question here. I have three files in /etc/rsyslog.d which is included from /etc/rsyslog.conf: 00-iptables.conf 50-default.conf postfix.conf The first one is ...
6
votes
3answers
5k views

How to send snmp trap when syslog is logged?

I need to send snmp trap n number of host whenever any syslog is logged in /var/log/messages. How can I do this, can anybody give me any idea?
6
votes
0answers
1k views

NUL entry in syslog? [closed]

My servers went down on the 30th. It just came back online today. At first I thought it was the router because the router the server is connected to is a bit squirrely but when I checked syslog I have ...
5
votes
1answer
4k views

Sending bash history to syslog

Bash version 4.N has apparently the ability to write command-history to syslog, but I can't find information about how to configure this. I have read several pages which offer hacks using the ...
5
votes
2answers
7k views

centos 6.8: Deleted /var/log/messages … it didn't come back?

To make debugging an issue easier, I deleted /var/log/messages .... and it hasn't come back! I thought debug messages from kernel and modules like autofs were routed to this file. But even after I ...
5
votes
5answers
3k views

extract fields from “tail -f” of a syslog stream

Example line from syslog file: Aug 1 10:25:50 10.10.10.1 id=firewall sn=XXXX time="2012-08-01 14:35:18 UTC" fw=x.x.x.x pri=6 c=1024 m=537 msg="Connection Closed" f=11 n=195273698 src=x.x.x.x:60246:X3:...
5
votes
1answer
2k views

Does a process invoking oom-killer kill itself?

Looking through syslog, I see lines like dd invoked oom-killer. Does this mean dd is being killed by the oom-killer or does it mean dd asked oom-killer to go kill another high memory process?
5
votes
1answer
4k views

How to disable systemd's “Time has been changed” message spam in /var/log/syslog on Debian jessie?

Due to combined use of Debian jessie, that uses systemd by default, and sdwdate (that uses Slow Clock Adjuster ( gh )), my system clock is frequently changed. As a result /var/log/syslog gets ...
5
votes
1answer
2k views

Why Linux syslog file does not follow the RFC3339 protocol?

Why Linux syslog file: /var/log/syslog does not follow the timestamp format defined in the protocol http://tools.ietf.org/html/rfc5424#page-11?

1
2 3 4 5
8