We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [syslog]

syslog is a standard (RFC 5424) for message logging. Use this tag for syslog logging related messages. For generic logging messages use [logging] instead

Filter by
Sorted by
Tagged with
1
vote
2answers
519 views

How to log PostgreSQL table data changes into syslog?

I have a program which uses these tables, and I want to add some additional functionality to its logging without modifying the program. groups ------ id bigint not null name character varying(100) ...
1
vote
0answers
245 views

Adding the related username to syslog logging

I'm managing a server running Debian 7 Wheezy. I'd like to add a new feature to the /var/log/syslog file. That is a sample current output: Jul 31 13:06:35 myserver mod_evasive[7629]: Couldn't open ...
7
votes
1answer
4k views

rsyslog filling up /var/log puts the system down

Sometimes a process goes wrong and the logs in /var/log grow up so much they ultimately fill up the whole partition. It happened me once on a server due to a wrong postfix config, and once on a ...
0
votes
1answer
353 views

Rsyslog conditionally raise severity with filemonitoring not working

The following rsyslog configuration is used to monitor the apache access file. # Apache access file: $InputFileName /var/log/apache2/access.log $InputFileTag apache-access: $InputFileStateFile stat-...
0
votes
1answer
853 views

iptables does not generates log

I have this script make_firewall.sh with rules for iptables: iptables -F iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT iptables -A INPUT -s 127.0.0....
12
votes
5answers
27k views

Ubuntu Server 16.04 - OpenVPN seems not to start, no logs get written

I installed and oepnvpn on an Ubuntu server 16.04 by following the following guideline how-to-set-up-an-openvpn-server-on-ubuntu When I start the openVPN server with: service openvpn start it looks ...
3
votes
1answer
117 views

How can I determine what is printing on my console?

how determine the owner of this output?? what is flooding my console? udev syslog syslogng? edit to accepted answer: I'll accept answer but... I don't use init instead I use systemd. kernel ...
2
votes
1answer
539 views

fail to log through rsyslog on an archlinux system

Using release 2016.03.01 from Archlinux, with package rsyslogd 8.18.0, I started from the minimal configuration built from Very simple config : # cat rsyslog.conf $ModLoad immark $ModLoad imudp $...
4
votes
1answer
4k views

Why does journalctl say “— no entries --”?

For example: ┌─[10:50:38/hypership/root/~] └─╼ journalctl -b No journal files were found. -- No entries -- ┌─[10:50:46/hypership/root/~] └─╼ journalctl --verify No journal files were found. /var/...
1
vote
0answers
603 views

fail to log from my app through rsyslogd in a linux container

Running an archlinux container on an archlinux host, both using rsyslog with the same configuration file: $ cat /etc/rsyslog.conf # Minimal config $ModLoad imuxsock # provides support for local ...
5
votes
1answer
3k views

Systemd Python service not sending all output to syslog

I have a custom service and have explicitly called for all stdout & stderr to be sent to syslog in the config file, however only some of the output appears in both syslog and the journal (they are ...
2
votes
1answer
440 views

Strange lines in /var/log/message folder of Centos machine

Below are lines from my /var/log/messages. Can someone help me to understand what these lines mean? I am running a syslog server on this machine. I want to know if these messages would stop the ...
2
votes
1answer
9k views

File location for Syslogs in Centos machine

I am running syslog server (rsyslog 8) on my centos machine. I want to map other device in my network to send the logs to this syslog server. If mapping is done correctly where exactly the syslogs ...
1
vote
1answer
154 views

Separate server's hostname appearing in this server's cron logs

I get entries like these in /var/log/cron, in a host named SERV2 (RHEL 6.2): Apr 21 14:50:01 SERV1 CROND[14799]: (root) CMD (/usr/lib64/sa/sa1 -S DISK 1 1) Apr 21 15:20:01 serv2 CROND[24438]: (root) ...
2
votes
1answer
454 views

use a different socket than /dev/log, system-wide

Is there a way to make a whole Debian (Jessie) installation use a different syslog socket than /dev/log (like, for example, /tmp/my-other-log) ? Reason: I'm running Debian Jessie in a chroot ...
5
votes
3answers
6k views

Can I stop IPv6 “Router Advertisement” filling syslog without disabling IPv6?

My syslog looks like this: Apr 1 19:05:25 raspberrypi dhcpcd[699]: eth0: Router Advertisement from fe80::c23e:fff:fe63:5170 Apr 1 19:07:35 raspberrypi dhcpcd[699]: eth0: Router Advertisement from ...
2
votes
1answer
1k views

Changing the Facility of outgoing syslog message using rsyslog configuration

I need to change the facility of the syslog message going out to a remote syslog server. I am using rsyslog in my system. I am using the following configuration to forward logs to another syslog ...
14
votes
2answers
31k views

System log full of session and slice messages

I have a new CentOS 7 installation, and noticed that my /var/log/messages file is full of messages like this Mar 6 08:40:01 myhostname systemd: Started Session 2043 of user root. Mar 6 08:40:01 ...
1
vote
0answers
694 views

Arch Linux - Cronie is not working and nestat does not output logs?

I added a cronjob via crontab -e which is to be executed every minute. I enabled and started cronie on systemctl. Set editor $ export EDITOR=vim Add cront tasks $ crontab -e * * * * * Rscript /...
6
votes
2answers
8k views

How to configure logging inside a Docker container?

I was trying to dockerize (into Debian 8.2) an OpenVPN server (yes, I do know, there already are such containers) but something went wrong inside the container and the server failed to start. I ...
1
vote
1answer
507 views

syslog configuration - repeated alert?

i am using solaris 10 and saw this line in /etc/syslog.conf *.err;kern.debug;daemon.notice;mail.crit;auth.debug;local2.notice /var/adm/messages Does it mean that, if I have a auth.err, the ...
1
vote
1answer
2k views

how to have syslog not log particular warnings?

Short Version: I want to stop the following message from appearing in my syslog. They pertain to a USB port on my keyboard that can be ignored: Feb 9 23:33:45 sunfire kernel: [ 8163.156041] usb 3-6....
2
votes
1answer
1k views

Capture Linux shell Commands to file

I'm trying to capture all Linux Shell command to some file. I tried to use the auditd service but it's not giving me the output I want. I searched a little and found some nice solution . Step 1: vi ...
1
vote
2answers
992 views

Merging log files with different timestamp formats

I have two types of log files Standard Syslog format The timestamp looks as below 5:2015 Dec 21 07:35:06:ABC:foo1:1559: common.c:946:Enabling filter 6:2015 Dec 21 07:35:08:ABC:bar1:1461: api.c:...
1
vote
0answers
600 views

Error cannot open tty-output Linux

I have installed one paravirtualized image, Debian 8, in XenServer, and I'm adding a script to create a template that come. Added in the startup script with the command systemctl enable script. Scritp ...
0
votes
1answer
97 views

soft-macros are empty in csv parser

I'm trying to parse log messages that are received from a udp port and insert them into a MYSQL database. My destination in my syslog-ng.conf file is as follows: source syslog_udp { udp(port(<...
3
votes
1answer
11k views

Send Logs to multiple syslog servers

Previously we were using one Logging server. But now we have added one extra Logging server which will also be storing logs received from client . I need to know how to add these two Syslog servers on ...
3
votes
1answer
2k views

Disable syslog logging for auditd

auditd sending logs to /var/logs/messages we want to disable it. How to do that? /etc/audisp/plugins.d/syslog.conf i changee active = no but still sending lots to syslog
1
vote
0answers
46 views

Syslog config syntax

I have setup a syslog server to test it out and its working perfectly fine. I want to understand what this syntax is actually doing in the rsyslog.conf file of the server that I added as guided by ...
2
votes
0answers
447 views

accessing old data from syslog

I look after various MySQL DB's which we have recently moved to Linux servers (from Windows). They run fine and everything is good. However, this morning i needed to check the error logs, but these ...
4
votes
1answer
5k views

Disable logging to syslog

I am experimenting with aircrack-ng and I managed to fill up / with the syslog file complaining about what I'm doing to the poor wifi card. How can I disable logging to syslog for the duration of my ...
1
vote
0answers
88 views

Suppress Rsyslog to terminal

When I use Rsyslog (in bash using logger and in Node using winston-syslog), all log levels are also shown on the terminal window. I only want to log these events, and silent the output unless they ...
1
vote
1answer
846 views

File descriptor to read kernel log messages?

I am using syslog to read kernel log messages with SYSLOG_ACTION_READ. I would like to know if it's possible to "obtain" a file descriptor to "something" that would send the kernel logs (like what ...
3
votes
1answer
2k views

logging to /dev/xconsole does not work properly

I am using rsyslog, and I want to send logs to /dev/xconsole. I have following relevant line in /etc/rsyslog.conf *.*;cron.!=info;mail.!=info |/dev/xconsole This works only partially. It looks as ...
6
votes
0answers
946 views

NUL entry in syslog? [closed]

My servers went down on the 30th. It just came back online today. At first I thought it was the router because the router the server is connected to is a bit squirrely but when I checked syslog I have ...
0
votes
1answer
2k views

rsyslogd running but cannot connect on port?

These are my configuration lines on rsyslog.conf $ModLoad imudp $UDPServerAddress 127.0.0.1 $UDPServerRun 1029 After restarting I run sudo netstat -taupn | grep syslog and it's running on port ...
1
vote
0answers
776 views

Where do these boot log entries come from and who creates them?

I'm wondering what kind of code writes these first two lines into /var/log/syslog while booting my machine: Aug 4 10:13:48 HOSTNAME kernel: imklog 5.8.11, log source = /proc/kmsg started. Aug 4 10:...
1
vote
0answers
1k views

VSFTP user login & activity monitoring

We have a linux box that is configured with vsftp for our ftp sessions. Unfortunately, for the last few days, we've found that files served by vsftpd have been lost (deleted). I would like to know: ...
1
vote
2answers
4k views

What causes the ata exceptions in my syslog and how to solve them

I have a new system with debian (omv) a SSD hard drive for the OS and a software RAID 6 for the data. I only saw now that I have very regular exceptions in my syslog. I'm worried now, what could ...
9
votes
1answer
21k views

What does “kernel:NMI watchdog: BUG: soft lockup” followed by other errors mean?

I have my terminal always opened (Fedora 22), because all my work I do from there. Sometimes I search some info in browser or just have fun. After 20-30 minutes of browsing (browser starts not from ...
2
votes
1answer
3k views

Is there a way to force syslog flushes to disk immediately?

I have this vague recollection of there being a switch you can configure syslog with which would force it to flush logs to disk right away so when your system hung you might be able to get some useful ...
1
vote
2answers
6k views

syslog error, unknown priority name “”

I am editing syslog and want to log ppp to a log. I added the last two lines to do so, as recommended in the ppp configuration. It appears to log ppp but also other things, due to the * I guess. I ...
3
votes
1answer
8k views

How do I disable local syslog, and is it a good idea?

I use centralized logging with rsyslog, which means that there are dedicated logging servers which collect syslog messages from all servers. All inspections of logs are done from those logging ...
2
votes
1answer
679 views

How to explain strange kernel messages?

I have a server running on Debian Wheezy 3.2.68-1+deb7u1 x86_64. Lately strange records in /var/log/messages appeared. First messages of this log starts just after server reboot. 6.222.18 LEN=44 TOS=...
63
votes
2answers
55k views

Understand logging in Linux

As I understand, Linux kernel logs to /proc/kmsg file(mostly hardware-related messages) and /dev/log socket? Anywhere else? Are other applications also able to send messages to /proc/kmsg or /dev/log? ...
1
vote
0answers
322 views

Failed umount /home (ZFS) on shutdown

During shutdown I notice an error reported in the logging messages on the screen that the umounting of /home (a ZFS filesystem) failed. (After restart I don't find any respective log entry in the ...
1
vote
0answers
845 views

Syslog flooded with “pci 0000:00:14.4: PCI bridge to [bus 04” messages, what's going on here?

I operate an HP Microserver N54L for offsite backups operated by Ubuntu 14.04 LTS (running Linux 3.16), which I recently equipped with an HP MicroServer Remote Access Card 615095-B21. Since plugging ...
1
vote
1answer
1k views

/var/lib/puppet/state/agent_catalog_run.lock exists

I'm seeing the following error on CentOS 6.4: # puppet agent --test Run of Puppet configuration client already in progress; skipping (/var/lib/puppet/state/agent_catalog_run.lock exists) What should ...
1
vote
1answer
1k views

Skip syslog/rsyslog logging of certain cron jobs

In most GNU/Linux distributions the default is to log start (and many different events) of every cron job to syslog. It's rather convenient, but not for a very frequent jobs, which started, say, every ...
0
votes
1answer
123 views

Understanding syslog rotation, to implement own syslog rotation

I am trying to implement a simple syslog server (UDP based). On this , we are trying to implment SYSLOG rotation feature. Currently the roatation of logs is done by rename C API. By doing this we ...