The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
1answer
51 views

Accidentally deleted /var/log/syslog

I accidentally deleted /var/log/syslog and now I can't get rsyslog working. I was googling, I tried everything I found. To be precise: I created syslog with touch. Then I set chmod and chown ...
3
votes
1answer
28 views

Redirect iptables logging to another logfile

I have followed the recipe by @Gilles in this answer. I succeeded, but the problem is that the iptables logging now goes into 3 log files, syslog, kern.log and iptables.log. Ideally, I want the ...
1
vote
0answers
21 views

rsyslog isolation to avoid system and app mix

I am passing my IIS app logs (log4net) files to rsyslog (/var/log/syslog) in my Ubuntu server. I want to preserve a special place for these logs and I don't want them to be mixed with other services ...
2
votes
1answer
77 views

How to include millisecond in syslogs?

I have configured rsyslog.conf file in /etc to include my own logs as syslogs in a file at /var/logs. But after opening the file I got this: Jun 5 10:09:09 lab-Altos-G330-Mk2 slog[19689]: Hello1 Jun ...
1
vote
1answer
23 views

Ubuntu 14.04 server went offline all of a sudden

I see the below in syslog, not sure what went wrong, any help will be appreciated. Is this beacause of an automatic kernel update as I see a new kernel version? May 17 10:20:36 vps rsyslogd: [origin ...
0
votes
2answers
95 views

rsyslog server saves logs from remote also in /var/syslog

I have setup my ubuntu server as syslog server to accept all my logs from my router and save them in a seperate mikrotik.log file in the /var/log/ folder. Everything works but i notice that all ...
1
vote
0answers
25 views

how do I get the atd daemon log at commands?

On HPUX all at jobs are logged in a cron.log file. Alas I cannot find similar on Ubuntu. I see cron is logged to syslog and I can change rsyslog to log to a cron.log. But my attempts to log at.* ...
1
vote
0answers
28 views

Postfix logs to remote server

On my Ubuntu 14.04 server, I'm using Postfix as a front-end mailserver, and I would like to send all mail related info, including email addresses, to a remote host. In the file /etc/rsyslog.d/50-...
0
votes
1answer
37 views

Difference between 49-haproxy.conf and haproxy.conf files

What is the difference between 49-haproxy.conf and the haproxy.conf files? Now I have no idea if this is specific to Ubuntu or if this is in general. The documentation on HAProxy is astoundingly bad. ...
0
votes
0answers
16 views

How can I query a rsyslog setting?

I am using rsyslog for program logging and system logging so I have unified log files. I'm having some messages dropping out and I'm not sure why, but I think it may be a configuration option set ...
2
votes
0answers
51 views

Client to Server Communication for rsyslog

I have two Ubuntu OS in VMware Virtual Machine: one of them is the client ( Ubuntu 14 ) and the other one is the server ( Ubuntu 15 Mate). I want to forward apache logs (access and error logs) from ...
0
votes
1answer
347 views

Replacing rsyslog with syslog-ng depends sylog-ng-core

I am trying to replace the default syslog by syslog-ng. syslog-ng is our standard and we want to use that syslog agent. root@VirtualBox:~# apt-get install syslog-ng Reading package lists... Done ...
0
votes
0answers
43 views

RFC5424 pattern not match in rsyslog procid

this is the pattern i configured in rsyslog.conf "<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [accounts@596839 category=\"auth\" logtype=\"authlog\"]...
0
votes
0answers
18 views

how to configure rsyslog client on windowsxp

configured Rsyslog on Ubuntu 12.04 working fine for all my ubuntu client getting log daily. here i would like to know how to configure client side on Windowsxp for ubuntu clients used *.* @ip:514 ...
2
votes
1answer
35 views

Sporadic messages output to console after logging in

Coming right from a fresh install of Ubuntu 14.04 Minimal/Netboot (plus some small utilities like acpid, wicd-curses, etc.), after logging in, I occasionally get floating messages (the kind typically ...
1
vote
2answers
80 views

syslog still receiving entries after filter to seperate file

First time posting. Trying to get remote devices to into separate log files and not in the main syslog file. Have created a filter for remote devices to go to a separate file per host, but still ...
0
votes
0answers
74 views

Syslog seems disabled

In my Ubuntu 14.04.02 LTS Server machine I've found that the syslog is not working. When I do a service syslog start (for example) It tells me that the service is unrecognized. When I do a service ...
0
votes
1answer
296 views

Both journalctl and rsyslog are running

Since the migration to Ubuntu 15.04 both journalctl and rsyslog are installed and running. I'm wondering if this is by design or if rsyslog might not have been uninstalled by accident? Can I ...
1
vote
0answers
333 views

How do I send nginx access and error logs to syslog?

I have rsyslog configured to ship logs to another server. I have been trying to setup nginx and rsyslog to use a socket, like /dev/log, to transfer logs into the local rsyslog and then let it handle ...
1
vote
1answer
119 views

Using rsyslogd with imrelp in Ubuntu?

I'm trying to make use of imrelp in Ubuntu 14.04. However, when I check using lsof -i or netstat -autp nothing listens on the configured port. Package librelp0 is installed. What am I doing wrong? ...
1
vote
0answers
269 views

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): ...
0
votes
1answer
259 views

Identifying syslog files, also does auth.log mirror what is in /vars/syslog?

I am writing a auth log parser as a means to contribute to a tool and to learn linux logging better. I have been reading up on syslog and log facilities and was wondering if what is in auth.log will ...
4
votes
2answers
254 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
1answer
43 views

Prevent Rsyslog from removing automatically syslog.gz files. [duplicate]

Why ubuntu remove older syslog older than syslog.7.gz by default? How can I prevent that to happen? Thanks
3
votes
2answers
2k views

No /var/log/syslog file after moving /var/log to tmpfs

To avoid useless write to my SSD I've moved /var/log (and /tmp) to RAM via /etc/fstab: cat >> /etc/fstab <<'EOT' tmpfs /tmp tmpfs defaults,size=1g ...
1
vote
1answer
543 views

vsftpd cant log in with syslog_enable=YES

Hi guys I want to send my ftp logs to a syslog server, so I tried to enable syslog. But when I set syslog_enable to YES I cant use my FTP Server at all. I am getting this error message: 500 OOPS: ...
2
votes
0answers
2k views

rsyslogd hangs upon apt-get 14.04

If I do any apt-get install, it hangs permanently (have to CTRL-Z, CTRL-C does nothing) and then corrupts dpkg (have to run dpkg --configure etc) and I have to kill all rsyslog related processes. I've ...
0
votes
1answer
254 views

rsyslog not separating for facilities

I will preface this with, I am a Linux newbie. I had set up a Debian Linux rsyslog server that was working, but I had to switch to Ubuntu(14.04.1 LTS) to set up rsyslog(7.4.4). I was hoping that I ...
0
votes
1answer
2k views

rsyslogd using 100% cpu on ubuntu 14.04

On my ubuntu 14.04 rsyslogd is using 100% of my CPU (both cores). Even after some google searching I were not able to figure out why rsyslogd is using all of the cpu capacity all the time. The ...
2
votes
1answer
781 views

How to use rsyslog?

I've been scouring forums for a few hours and cannot find a concrete explanation on how to use rsyslog. I really just need the basics. I have a log file logFile.log and I want to forward the logs to ...
0
votes
1answer
59 views

Why am I getting this annoying log messages.CRON[17405]: (root) CMD every minute

I have configured rsyslog.conf file to store log messages to mysql but I am getting some annoying log message in my MySql table. which looks like this. Nov 3 14:48:01 username CRON[17405]: (root) ...
2
votes
1answer
4k views

Package rsyslog is not configured yet

Since upgrading to 12.04 from 8.04->10.04 I can no longer upgrade or install new packages. I do get a large number of errors, but the first is the resyslog: root@sub:~# apt-get -f install Reading ...
0
votes
1answer
343 views

Making sense of rsyslogd rules

First: I'm using Ubuntu Server Linux - 3.13.0-29-generic #53-Ubuntu SMP Wed Jun 4 21:00:20 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux with rsyslogd 7.4.4 I would very much like to make sense of the ...
0
votes
1answer
190 views

rsyslog for beginners

I've just started to use rsyslog on an ubuntu 14 server. I am using it as a server to send logs from my firewalls / nas / routers etc. New to all this so could do with some advice. Firstly, how to ...
1
vote
1answer
861 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: $...
0
votes
1answer
559 views

how to make a separate log file for bind service in rsyslog?

I installed bind9 for name service on ubuntu12.04. Now for debugging its errors in name resolving. I need to make separate log file for it like /var/log/name.log. I searched too many for rsyslog, ...
2
votes
2answers
5k views

How do I setup OpenVPN to rotate logs?

I would like to rotate my openvpn logs. How can I accomplish this?
1
vote
0answers
694 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
0
votes
2answers
149 views

How can I get my system to email me when a critical issue is encountered, based on command output?

I would like my Linux system to have a script/syslog server such that it first telnets or logs in remotely to my other system, and then executes one command (e.g. netstat -an) and if the system found ...
0
votes
1answer
1k views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
1
vote
2answers
3k views

Purpose of “postrotate invoke-rc.d rsyslog rotate” when logrotating, and is this command outdated?

When using logrotate to keep log files rotating, I have seen postrotate invoke-rc.d rsyslog rotate > /dev/null endscript I know postrotate makes bash execute the following ...
2
votes
1answer
423 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
1
vote
1answer
55 views

How do I find a package that contains a given module?

How do I find which package contains a given module ? I had a missing module in /usr/lib/ , and was trying to figure out which package would fix the problem using apt-get The error was in /var/log/...
2
votes
2answers
3k views

could not load module rsyslog lmnsd_gtls.so

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated. tail /var/log/syslog Dec 1 22:18:...
0
votes
1answer
2k views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
5
votes
1answer
279 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
0
votes
1answer
564 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
4
votes
1answer
9k views

rsyslog filter by tag

I would like to create a rsyslogd config file that filter the syslog for specific tag and outputs this tag to a specific file. I create a rule file under /etc/rsyslog.d # Log kernel generated UFW ...
3
votes
1answer
12k views

Rsyslog not forwarding specific log file to remote server

I am going insane trying to get rsyslog to send a specific logfile to a remote server over UDP. This is the rsyslog.conf file for the sending server: # /etc/rsyslog.conf Configuration file for ...
6
votes
1answer
12k views

how to configure rsyslog to send file from specific program to specific location on remote server

I want to configure rsyslog on a centralised server so that all the logs of clients are stored at one place now the problem I'm having is I dont know how to implement rsyslog so that it creates logs ...