Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
0
votes
1answer
908 views

How to interpret SCSI device (sd) timeout logs

In /var/log/messages, I find the following log: Oct 23 21:48:53 localhost kernel: sd 3:0:0:0: timing out command, waited 180s Please explain the values that are separated by colons. Also where ...
1
vote
1answer
147 views

Use filter rule to redirect _and_ remove from syslogd

Adding this to /etc/rsyslog.d/myapp.conf helpfully sends messages to a dedicated log file. :programname, isequal, "myapp" /var/log/myapp.log The log messages go in my new log file, but they are also ...
0
votes
0answers
393 views

Problem to send radius authentication logs to remote host

I have installed freeradius server on FreeBSD,it sends authentication logs to syslog's local1 # # Which syslog facility to use, if ${destination} == "syslog" # # The exact values permitted here are ...
1
vote
0answers
537 views

Files in /var/log are only writing to file.1 (syslog is empty, but not syslog.1 )

The host is a docker container running Ubuntu 14.04 I am trying to figure out why the primary log files are not being written too, I have attached output of the files and permissions. I am hoping to ...
7
votes
2answers
5k views

How should I send systemd logs to a dedicated logging server

In the past, I have used syslog-ng or rsyslog to send system logs to a dedicated logging server somewhere else on the network. With systemd however, things like the sudo commands that previously were ...
2
votes
1answer
4k views

logread in OPENWRT

Hi I want to read all the requests for network that are connected to my OPENWRT installed router now I am getting all the logs of the system with the help of logread -e ': query' The following in ...
4
votes
1answer
1k views

How to see what's in a session

I'm seeing a lot of messages like this in syslog Aug 31 16:28:38 server systemd[1]: Started Session c924093 of user buntu. Aug 31 16:28:40 server systemd[1]: Started ...
0
votes
0answers
56 views

how to enable info layer in syslog?

syslog usually filter out output trace messages with predefined tag types like: dbg, info, note, warn, err, crit, alert, emerg, etc. What is the proper way to enable/disable syslog filtering during ...
0
votes
1answer
361 views

Is it possible to embed a bash variable in rsyslog message?

We've setup a central log server using rsyslog. I was just wondering if it's possible to send the ip address along with the syslog message from the client. I'm sending the message using a template ...
0
votes
1answer
531 views

/var/log/syslog got emptied

So today I checked /var/log/syslog and apparently it got emptied earlier so that it was only very short. I'd like to find out why it was emptied and prevent it from getting cleared. Maybe there is ...
1
vote
1answer
815 views

How to append the date to log file before it's name?

I want to append the date to my log file before its name. /opt/logs/myapp.log { rotate 6 hourly dateext dateformat %Y-%m-%d ifempty postrotate ...
0
votes
1answer
2k views

system log stop logging

Was trying to enable log for chroot users May have done sth. wrong ,find ls -l in /var/log most log files size stay 0. Try to fix it followed this answer # systemctl restart systemd-journald.socket #...
0
votes
0answers
1k views

Debian - Postfix /var/log/mail.log is blank

Postfix /var/log/mail.log on Debian is blank. I tried touch /var/log/mail.log and then service rsyslog restart but /var/log/mail.log is still blank. What should I do?
0
votes
1answer
1k views

Constant UFW Block in Syslog

In reviewing my syslog, I've found that 99% of it consists of UFW BLOCK statements from 3 or 4 IP's (see below; edited for space). Is this normal? What do these entries mean? If they are safe, how can ...
3
votes
1answer
1k views

syslog duplicate all content

I have a problem that anything that printed to syslog file is appear as duplicate. My search on network show me that /etc/rsyslog.conf contain attribute that should avoid such ...
-4
votes
2answers
64 views

Logs appending each time on its own when refreshing the logged in page

-rw-r--r-- 1 root root 21837 Jun 14 15:56 access_log -rw-r--r-- 1 root root 163101 Jun 14 14:17 access_log.1 -rw-r--r-- 1 root root 472757 Jun 10 07:05 access_log.2 -rw-r--r-- 1 root root ...
2
votes
1answer
2k views

do_IRQ: 0.163 No irq handler for vector (irq -1)

Why do I get this message in the terminal (putty) ? Message from syslogd@Debian-87-jessie-64-minimal at May 27 01:14:25 ... kernel:[ 8242.806151] do_IRQ: 0.163 No irq handler for vector (irq -1)
11
votes
2answers
8k views

Mint 18.1 - A whole lot of “Soliciting pool server xxx.xxx.xxx.xxx”

I was looking in syslog to look into an audio issue and I see a hell of a lot of the Soliciting pool server ntp daemon messages. I've run other linux in past and never recall seeing so many ntp log ...
0
votes
1answer
438 views

Is it good to have many log filters in rsyslog conf

I am planning to add filters in rsyslog.conf to redirect the syslog messages based on a tag so that I can log using logger and redirect to a custom log file. configuration in rsyslog.conf looks ...
1
vote
1answer
350 views

Send AIX local7 logs to separate file

We have an AIX 7.1 system that is being flooded with log entries from the local7 facility. Specifically, local7.err. I don't know what I did this time around but the local7.err entries are now being ...
-4
votes
1answer
182 views

Unix solaris syslog conf [duplicate]

How do I transfer the solaris syslogs to another windows server. Please share the source and destination configuration steps in detail.
1
vote
1answer
4k views

enabling/disabling journald ForwardToSyslog option at runtime

I'm currently working on enabling and disabling ForwardToSyslog option in systemd-journald at runtime. When I set it to "no" -> ForwardToSyslog=no in /etc/systemd/journald.conf followed by systemctl ...
2
votes
1answer
2k views

logrotate writing to old app.log.1 instead of app.log

We have a custom application which is using syslog for logging , Right now we are facing an issue with logrotate that logs are being writing to urls.log.1 instead of urls.log , logrotate not creating ...
1
vote
1answer
6k views

How do I view all syslog entries

How do I view all messages in the syslog? I am looking for messages that my program is generating that I have tagged with [pistreaming] so I can find these messages usign grep sudo more /var/log/...
0
votes
0answers
529 views

Kernel swap-related errors syslog flood

Operating system: Linux Mint 18.1 64-bit Cinnamon Kernel version: 4.4.0-62-generic #83 Swap: partition; 8GB Relevant hardware: SSHD; ST1000LM014 with 8GB NAND Flash 2x 4GB DDR3 1600 MHz; ...
2
votes
1answer
174 views

How to get the program's name that synchronised the hardware clock to system clock during reboot

cat /var/log/syslog |grep Synchronise Feb 8 20:49:22 hwy systemd[1]: Starting Synchronise Hardware Clock to System Clock... How to get the program's name that synchronised the hardware clock to ...
1
vote
1answer
94 views

How do you call this? bash[146155] in /var/log/messages

Content in /var/log/messages Jan 17 15:32:34 SERVER1 bash[146155]: user1 as root: ls -l Jan 17 15:32:34 SERVER1 bash[146155]: user1 as root: cd user1=who am i root=whoami ls -l and cd = $...
1
vote
2answers
2k views

How to get syslogd/klogd to append to syslog after reboot instead of overwriting?

After a reboot or crash, the syslog does not save any messages from the previous session. What should I do to tell syslogd/klogd to append to syslog instead of overwriting every session? I feel I am ...
1
vote
2answers
4k views

What system logs might tell me if a server lost its internet connection?

I have a server: CentOS Linux release 7.3.1611 (Core) 3.10.0-514.2.2.el7.x86_64 #1 SMP Tue Dec 6 23:06:41 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux I think its network connection cutout at one point (...
1
vote
0answers
74 views

MacOS: USB history (name and timestamp of connected devices)

My external HDD was stolen from me a few weeks ago but I just realised this recently. I really need to know when was the last time I connected this device to my computer. I know it's name, is there ...
3
votes
1answer
4k views

Is it possible to reduce systemd-journald size stored format (and thus size)?

I'm using systemd on raspberrypi machine with yocto based system. Recently I had some problems with redirecting messages to rsyslog.socket so I decided to get rid of rsyslog completely in favour of of ...
0
votes
1answer
731 views

HPUX 11i v3 Auditing to a syslog server - Configuration

I had trouble setting up auditing on our HPUX system and sending the same to a SIEM solution as a multiline log. The issue was that audsys writes the log to binary files and I need it to be setup in ...
21
votes
1answer
9k views

Is systemd-journald a syslog implementation?

I wonder if systemd-journald is a new implementation of syslog protocol, or rather, it uses syslog implementations, such as rsyslog, syslog-ng I've googled a bit, but I didn't find nothing convincing ...
1
vote
0answers
584 views

How do I use a serial port as a source for Syslog?

I'm trying to log another server's serial console port to a central syslog server, so I have connected a laptop running CentOS. I can read the port with minicom or even do something like cat /dev/...
2
votes
1answer
815 views

ESET NOD32 esets_daemon syslog flood

On our computers with Linux Mint 18.1 64-bit Cinnamon, we have an antivirus solution from ESET, called NOD32 Antivirus for Linux. Current version is 4.0.82.0. Problem is that the system log: /var/...
2
votes
1answer
11k views

syslog: Service is marked executable. Please remove executable permission bits. Proceeding anyway

Out of the box the ESET NOD32 antivirus for Linux 64bit running on Linux Mint 18 wrongly installs the service configuration file as an executable, flooding the system log: /var/log/syslog with such ...
2
votes
1answer
354 views

Sending sssd.log to syslog

How do I configure SSSD to send logs to syslog? I would like to include the SSSD debug logs as well. We would like to feed the sssd logs to Splunk. Our systems are already configured to send syslog to ...
2
votes
2answers
2k views

How to disable logging of wpa_supplicant into syslog [duplicate]

My syslog is being flooded be the following, which is obviously WLAN connection related. This question is How to disable logging of wpa_supplicant into syslog? Nov 16 03:58:14 vb-nb-mint ...
-2
votes
1answer
139 views

Meaning of # in rsyslog.conf

I want to ask what means the # sign before auth, authpriv.* in rsyslog.conf in Debian, because auth.log file does not exist on my computer. Also, I have this line: #disable auth.log. Here's how it ...
1
vote
1answer
680 views

Unknown Binary Blob in /var/log/syslog

Our one of the production ubuntu14.04 system become unreachable in AWS, we restarted it via AWS console. After restarting the system, we were able to connect to it. We checked the /var/log/syslog and ...
0
votes
1answer
384 views

Centos 7 --> Logging Failed Permission Changes By Another User?

I've been trying to figure this one out and it seems like a rather easier said than done situation. I am currently setting up a server that sends errors, failed logons, who accessed what and when, etc....
1
vote
0answers
147 views

Syslog local0 local7 and severity levels [duplicate]

Why is there 7 different localX facilities in syslog ? My understanding is that we can choose anyone but I am curious and I would like to know why there are 8 facilities. Any link with "severity" ?
0
votes
1answer
242 views

Syslog forwarding to Rsyslog

I was wondering if anyone was familiar with the process of forwarding all log files from a PPC Gnu/Linux using syslog (installing rsyslog is not an option) to a x86_64 GNU/Linux running Rsyslog. I ...
5
votes
2answers
5k views

centos 6.8: Deleted /var/log/messages … it didn't come back?

To make debugging an issue easier, I deleted /var/log/messages .... and it hasn't come back! I thought debug messages from kernel and modules like autofs were routed to this file. But even after I ...
1
vote
2answers
2k views

linux + messages + what is the meaning of “Too many open files (24)” messages

from /var/log/messages I see many lines as the following: Oct 9 10:01:14 Linux_machine15 syslog-ng[14736]: Error opening file for writing; filename='/var/log/remote/102.18.20.44/kern.log', error='...
0
votes
3answers
4k views

Check the status of many remote servers

I need to connect remotely to 800 servers using a user which is having sudo access n do points(in order 1,2,3) check status of syslog If running go to step 2 If not restart d service Make entry in ...
1
vote
1answer
396 views

Having trouble redirecting application output to log file

I have an embedded ARM device running Linux which launches an application on boot. This application has a bunch of "printf(...)" statements in it that I need to view. The normal way I have been ...
3
votes
0answers
2k views

exception Emask 0x10 SAct 0x0 SErr 0x4060000 action 0xe frozen t2

I get all those errors in kern.log and I don't know how to investigate them. I'm not even sure which one is the most relevant for a title to this question. AFAIU, this is likely to be hardware ...
0
votes
1answer
1k views

syslog-ng fail to start

centos 7(x64),syslog-ng v 3.5 Below is my syslog-ng.cfg @version:3.5 @include "scl.conf" options { flush_lines (0); time_reopen (10); log_fifo_size (1000); chain_hostnames (off); ...
2
votes
1answer
253 views

Reporting Seccomp violations

When running seccomp-constrained processes, I would like to see any seccomp violations in some logs. Some googling online shows that these violations are reported to either syslog or audit.log. ...