The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
24 views

How to use rsyslog?

I've been scouring forums for a few hours and cannot find a concrete explanation on how to use rsyslog. I really just need the basics. I have a log file logFile.log and I want to forward the logs to ...
0
votes
0answers
13 views

Multiples instances of rsyslogd running

I am administrating a Ubuntu 12.04.4 32bits server. I found out that at any given time there is 4 instances of rsyslogd running. I will like to know whether is not normal or if not why it is needed to ...
0
votes
1answer
18 views

Why am I getting this annoying log messages.CRON[17405]: (root) CMD every minute

I have configured rsyslog.conf file to store log messages to mysql but I am getting some annoying log message in my MySql table. which looks like this. Nov 3 14:48:01 username CRON[17405]: (root) ...
0
votes
0answers
56 views

No package 'liblogging-stdlog' found

I am doing experiments with different logging systems. At the moment I am trying to install rsyslog from source so I can make some modifications to it. I am using Ubuntu 14.04. I downloaded version ...
1
vote
1answer
462 views

Package rsyslog is not configured yet

Since upgrading to 12.04 from 8.04->10.04 I can no longer upgrade or install new packages. I do get a large number of errors, but the first is the resyslog: root@sub:~# apt-get -f install Reading ...
0
votes
1answer
81 views

Making sense of rsyslogd rules

First: I'm using Ubuntu Server Linux - 3.13.0-29-generic #53-Ubuntu SMP Wed Jun 4 21:00:20 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux with rsyslogd 7.4.4 I would very much like to make sense of the ...
0
votes
0answers
83 views

rsyslog for beginners

I've just started to use rsyslog on an ubuntu 14 server. I am using it as a server to send logs from my firewalls / nas / routers etc. New to all this so could do with some advice. Firstly, how to ...
1
vote
1answer
283 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
0answers
97 views

how to make a separate log file for bind service in rsyslog?

I installed bind9 for name service on ubuntu12.04. Now for debugging its errors in name resolving. I need to make separate log file for it like /var/log/name.log. I searched too many for rsyslog, ...
0
votes
1answer
2k views

How do I setup OpenVPN to rotate logs?

I would like to rotate my openvpn logs. How can I accomplish this?
0
votes
0answers
273 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
0
votes
2answers
99 views

How can I get my system to email me when a critical issue is encountered, based on command output?

I would like my Linux system to have a script/syslog server such that it first telnets or logs in remotely to my other system, and then executes one command (e.g. netstat -an) and if the system found ...
0
votes
1answer
422 views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
1
vote
2answers
859 views

Purpose of “postrotate invoke-rc.d rsyslog rotate” when logrotating, and is this command outdated?

When using logrotate to keep log files rotating, I have seen postrotate invoke-rc.d rsyslog rotate > /dev/null endscript I know postrotate makes bash execute the following ...
0
votes
0answers
130 views

How to do Rsyslog Server Configuration?

I have one rsyslog server and 3 client server. i can send client log to remote server. But all the client logs are located in a single folder. So how can i create 3 client directory in remote server ...
0
votes
0answers
43 views

how to sign log files?

Rsyslogd is default daemon for providing log files in ubuntu. The possibility to sign log messages through Guardtime, a signature provider, introduced With rsyslog. But there is no manual for do it! ...
0
votes
0answers
64 views

rsyslog ommail conf file causing zombie process

I have been trying to set up email alerts on a 12.04 server, but keep running into the same issue whenever I place my email-alert conf file in /etc/rsyslog.d. I've named it 30-email-alerts.conf. Upon ...
2
votes
0answers
150 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
1
vote
1answer
37 views

How do I find a package that contains a given module?

How do I find which package contains a given module ? I had a missing module in /usr/lib/ , and was trying to figure out which package would fix the problem using apt-get The error was in ...
0
votes
1answer
621 views

could not load module rsyslog lmnsd_gtls.so

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated. tail /var/log/syslog Dec 1 ...
-1
votes
0answers
128 views

/var/log/boot.log incomplete

My core issue is that something is causing udev to spew thousands of messages during boot, slowing down boot by 10 minutes. My interrim issue however is that there are so many messages during boot ...
1
vote
0answers
129 views

rsyslogd using 100% CPU creating huge syslog and kern.log files

And here is output from command tail -5 syslog Nov 22 14:02:16 adam-iXtreme-8550 kernel: [10995.487954] saa7133[0]/irq: looping -- clearing PE (parity error!) enable bit Nov 22 14:02:16 ...
0
votes
1answer
947 views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
3
votes
1answer
117 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
0
votes
1answer
244 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
1
vote
0answers
191 views

Syslog cannot start

I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /vae/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
4
votes
1answer
4k views

rsyslog filter by tag

I would like to create a rsyslogd config file that filter the syslog for specific tag and outputs this tag to a specific file. I create a rule file under /etc/rsyslog.d # Log kernel generated UFW ...
2
votes
1answer
6k views

Rsyslog not forwarding specific log file to remote server

I am going insane trying to get rsyslog to send a specific logfile to a remote server over UDP. This is the rsyslog.conf file for the sending server: # /etc/rsyslog.conf Configuration file for ...
5
votes
1answer
9k views

how to configure rsyslog to send file from specific program to specific location on remote server

I want to configure rsyslog on a centralised server so that all the logs of clients are stored at one place now the problem I'm having is I dont know how to implement rsyslog so that it creates logs ...
1
vote
1answer
2k views

custom logs in rsyslog

I have configured rsyslog to log message to a centralised server it's working fine and I'm getting logs in my server's /var/log directory with seperate directory for all the clients based upon their ...
1
vote
2answers
111 views

What does this output in syslog mean?

There is this output every passing minute - one time - in syslog: CRON[15164]: (root) CMD (/usr/bin/test -x /usr/sbin/autodns-dhcp_cron && /usr/sbin/autodns-dhcp_cron) What does this mean ?
1
vote
0answers
42 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
2
votes
1answer
591 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
0
votes
1answer
253 views

How to tell what is logging bandwidth [duplicate]

I've been having everything that goes through my NIC logged and I'm not sure how it happened. The last thing I installed was webmin and I'm not sure if that changed a setting or not but as of today ...
9
votes
2answers
459 views

asynchronous logging via rsyslogd(8) and write buffer increase

On a pretty high traffic web site running in virtual containers (VMware) and lacking local storage, we've managed to increase throughput (requests per second) significantly by switching from logging ...
0
votes
1answer
3k views

How can I monitor syslog and send notification based on events?

I'm going to be sending syslog from my one device/server to an Ubuntu server. On the Ubuntu server (receiving the syslog), I want it to trigger a script when specific syslog messages arrive. Is this ...
2
votes
1answer
4k views

rsyslog not rotating at fixed file size

I am trying to create a separate log file for a application in Linux. So far I have created a .conf script to separate log in custom log file based on program name and it's working correctly. But, I ...
1
vote
1answer
745 views

Give rsyslog read access to all log files that I want to monitor

I'm using the $InputFile facility in rsyslog to monitor various log files scattered around my ubuntu 12.04 server. E.g. nginx, unicorn, rails, postgres, cron etc. Now my problem is, that some of these ...
4
votes
1answer
1k views

Rsyslog doesn't log TCP after upgrade from 10.4 to 12.4

I was using Ubuntu 10.4 until last week for storing the log informations of a external device with rsyslog. After upgrading to ubuntu 12.4 the logging of TCP doesn't works anymore. (There are just no ...
1
vote
2answers
2k views

How to get all shell command logged

I'm running Ubuntu Server 12.04, and trying to get all Shell command logged. I'm trying with rsyslog that there by default. I added "*.* /var/log/everything.log" in rsyslog.conf and 50-default.conf, ...
7
votes
1answer
31k views

How do I configure rsyslog to send logs from a specific program to a remote syslog server?

I have a program which outputs to syslog with a given tag/program name. I'd like to be able to filter syslog traffic from that program and send it to a remote syslog server, leaving all other syslog ...
3
votes
1answer
1k views

How to start up rsyslog automatically?

Check current status of rsyslog $ chkconfig --list rsyslog rsyslog 0:off 1:off 2:off 3:off 4:off 5:off 6:off Start up rsyslog at some levels $ sudo chkconfig --level 35 ...
2
votes
1answer
13k views

Rsyslog filter for logging router events (syslog server)

I am trying to configure rsyslog (Ubuntu 12.04 Server) to log events from a router. I found this old ubuntu forum post which got me most of the way there. So far I am able to get the events logged ...
2
votes
1answer
165 views

Could rsyslog be purging log files?

Today I found a lot of log files empty, these were: /var/log/auth.log /var/log/syslog /var/log/daemon.log /var/log/kern.log /var/log/mail.log /var/log/user.log /var/log/mail.info /var/log/mail.warn ...
1
vote
2answers
347 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
6
votes
2answers
5k views

UFW is not logging how do I troubleshoot?

I have set logging to high. I am not seeing any log messages. I do see the empty ufw.log file. No messages in dmesg
6
votes
1answer
4k views

Missing /dev/xconsole causes rsyslog to stop as well as all other services

We are running Ubuntu-10.04.04LTS in Hyper-V environments. We found that the services ssh http or anything else stopped because the rsyslog daemon had died with the message unable to find the ...
4
votes
2answers
5k views

syslog not showing log levels in messages

Here is sample output of my syslog messages in /var/log/syslog: Nov 15 20:20:48 ubuntu winbindd[915]: [2011/11/15 20:20:48.940063, 0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db) Nov 15 20:20:48 ...
10
votes
2answers
30k views

difference between rsyslogd and syslogd

I was trying to implement some changes to syslogd on Ubuntu 10.04.02 LTS (Server edition). I found /etc/syslog.conf is not present on system, instead I have /etc/rsyslogd.d/*.conf. syslogd can be ...
2
votes
4answers
4k views

rsyslogd using 197% CPU for the past few days

I'm running Natty server on the rackspace cloud and rsyslogd as been churning away usin 197% CPU (quad core machine I believe) for the past few days. Is there anything I can do to figure out what is ...