The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
36 views

Both journalctl and rsyslog are running

Since the migration to Ubuntu 15.04 both journalctl and rsyslog are installed and running. I'm wondering if this is by design or if rsyslog might not have been uninstalled by accident? Can I ...
0
votes
0answers
38 views

rsyslog relp setup

I am setting up remote logging using relp. I have installed the rsyslog-relp packange on both sides. My problem is that the log packets don't appear to be arriving. I see the log receiver has port ...
0
votes
0answers
16 views

How do I remove syslog after centralizing to a remote server?

How do I remove syslog from a client after I have centralized it to a sever? Here are my syslog configurations of the client server $ModLoad imtcp $InputTCPServerRun 514 @@:192.168.0.101 I want to ...
0
votes
0answers
101 views

How do I send nginx access and error logs to syslog?

I have rsyslog configured to ship logs to another server. I have been trying to setup nginx and rsyslog to use a socket, like /dev/log, to transfer logs into the local rsyslog and then let it handle ...
1
vote
1answer
45 views

Using rsyslogd with imrelp in Ubuntu?

I'm trying to make use of imrelp in Ubuntu 14.04. However, when I check using lsof -i or netstat -autp nothing listens on the configured port. Package librelp0 is installed. What am I doing wrong? ...
1
vote
0answers
95 views

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): ...
0
votes
0answers
68 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
95 views

configure rsyslogd to capture events from router device

I have DLink DIR 615 router, which is able to send syslog messages. I have enabled this type of sending on the router and set my Ubuntu server's IP as destination. On the server I made appropriate ...
0
votes
1answer
43 views

Identifying syslog files, also does auth.log mirror what is in /vars/syslog?

I am writing a auth log parser as a means to contribute to a tool and to learn linux logging better. I have been reading up on syslog and log facilities and was wondering if what is in auth.log will ...
6
votes
2answers
178 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
0
votes
0answers
210 views

vsftpd no logs to syslog

I have an vsftpd syslog server. And Its currently logging to /var/log/vsftpd.log, but I want it to send the logs to our syslog server. But I somehow I cant find any answer to my problem. I tried it ...
0
votes
0answers
19 views

Prevent Rsyslog from removing automatically syslog.gz files.

Why ubuntu remove older syslog older than syslog.7.gz by default? How can I prevent that to happen? Thanks
1
vote
1answer
358 views

No /var/log/syslog file after moving /var/log to tmpfs

To avoid useless write to my SSD I've moved /var/log (and /tmp) to RAM via /etc/fstab: cat >> /etc/fstab <<'EOT' tmpfs /tmp tmpfs defaults,size=1g ...
1
vote
1answer
161 views

vsftpd cant log in with syslog_enable=YES

Hi guys I want to send my ftp logs to a syslog server, so I tried to enable syslog. But when I set syslog_enable to YES I cant use my FTP Server at all. I am getting this error message: 500 OOPS: ...
1
vote
0answers
458 views

rsyslogd hangs upon apt-get 14.04

If I do any apt-get install, it hangs permanently (have to CTRL-Z, CTRL-C does nothing) and then corrupts dpkg (have to run dpkg --configure etc) and I have to kill all rsyslog related processes. I've ...
0
votes
1answer
118 views

rsyslog not separating for facilities

I will preface this with, I am a Linux newbie. I had set up a Debian Linux rsyslog server that was working, but I had to switch to Ubuntu(14.04.1 LTS) to set up rsyslog(7.4.4). I was hoping that I ...
0
votes
0answers
758 views

rsyslogd using 100% cpu on ubuntu 14.04

On my ubuntu 14.04 rsyslogd is using 100% of my CPU (both cores). Even after some google searching I were not able to figure out why rsyslogd is using all of the cpu capacity all the time. The ...
0
votes
1answer
193 views

How to use rsyslog?

I've been scouring forums for a few hours and cannot find a concrete explanation on how to use rsyslog. I really just need the basics. I have a log file logFile.log and I want to forward the logs to ...
0
votes
0answers
53 views

Multiples instances of rsyslogd running

I am administrating a Ubuntu 12.04.4 32bits server. I found out that at any given time there is 4 instances of rsyslogd running. I will like to know whether is not normal or if not why it is needed to ...
0
votes
1answer
48 views

Why am I getting this annoying log messages.CRON[17405]: (root) CMD every minute

I have configured rsyslog.conf file to store log messages to mysql but I am getting some annoying log message in my MySql table. which looks like this. Nov 3 14:48:01 username CRON[17405]: (root) ...
0
votes
0answers
130 views

No package 'liblogging-stdlog' found

I am doing experiments with different logging systems. At the moment I am trying to install rsyslog from source so I can make some modifications to it. I am using Ubuntu 14.04. I downloaded version ...
2
votes
1answer
2k views

Package rsyslog is not configured yet

Since upgrading to 12.04 from 8.04->10.04 I can no longer upgrade or install new packages. I do get a large number of errors, but the first is the resyslog: root@sub:~# apt-get -f install Reading ...
1
vote
1answer
207 views

Making sense of rsyslogd rules

First: I'm using Ubuntu Server Linux - 3.13.0-29-generic #53-Ubuntu SMP Wed Jun 4 21:00:20 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux with rsyslogd 7.4.4 I would very much like to make sense of the ...
0
votes
1answer
129 views

rsyslog for beginners

I've just started to use rsyslog on an ubuntu 14 server. I am using it as a server to send logs from my firewalls / nas / routers etc. New to all this so could do with some advice. Firstly, how to ...
1
vote
1answer
540 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
1answer
190 views

how to make a separate log file for bind service in rsyslog?

I installed bind9 for name service on ubuntu12.04. Now for debugging its errors in name resolving. I need to make separate log file for it like /var/log/name.log. I searched too many for rsyslog, ...
0
votes
1answer
3k views

How do I setup OpenVPN to rotate logs?

I would like to rotate my openvpn logs. How can I accomplish this?
1
vote
0answers
502 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
0
votes
2answers
116 views

How can I get my system to email me when a critical issue is encountered, based on command output?

I would like my Linux system to have a script/syslog server such that it first telnets or logs in remotely to my other system, and then executes one command (e.g. netstat -an) and if the system found ...
0
votes
1answer
852 views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
1
vote
2answers
2k views

Purpose of “postrotate invoke-rc.d rsyslog rotate” when logrotating, and is this command outdated?

When using logrotate to keep log files rotating, I have seen postrotate invoke-rc.d rsyslog rotate > /dev/null endscript I know postrotate makes bash execute the following ...
2
votes
1answer
270 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
1
vote
1answer
45 views

How do I find a package that contains a given module?

How do I find which package contains a given module ? I had a missing module in /usr/lib/ , and was trying to figure out which package would fix the problem using apt-get The error was in ...
1
vote
1answer
1k views

could not load module rsyslog lmnsd_gtls.so

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated. tail /var/log/syslog Dec 1 ...
0
votes
1answer
1k views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
3
votes
1answer
155 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
0
votes
1answer
401 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
4
votes
1answer
6k views

rsyslog filter by tag

I would like to create a rsyslogd config file that filter the syslog for specific tag and outputs this tag to a specific file. I create a rule file under /etc/rsyslog.d # Log kernel generated UFW ...
2
votes
1answer
9k views

Rsyslog not forwarding specific log file to remote server

I am going insane trying to get rsyslog to send a specific logfile to a remote server over UDP. This is the rsyslog.conf file for the sending server: # /etc/rsyslog.conf Configuration file for ...
5
votes
1answer
11k views

how to configure rsyslog to send file from specific program to specific location on remote server

I want to configure rsyslog on a centralised server so that all the logs of clients are stored at one place now the problem I'm having is I dont know how to implement rsyslog so that it creates logs ...
1
vote
1answer
2k views

custom logs in rsyslog

I have configured rsyslog to log message to a centralised server it's working fine and I'm getting logs in my server's /var/log directory with seperate directory for all the clients based upon their ...
1
vote
2answers
129 views

What does this output in syslog mean?

There is this output every passing minute - one time - in syslog: CRON[15164]: (root) CMD (/usr/bin/test -x /usr/sbin/autodns-dhcp_cron && /usr/sbin/autodns-dhcp_cron) What does this mean ?
1
vote
0answers
44 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
2
votes
1answer
737 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
0
votes
1answer
337 views

How to tell what is logging bandwidth [duplicate]

I've been having everything that goes through my NIC logged and I'm not sure how it happened. The last thing I installed was webmin and I'm not sure if that changed a setting or not but as of today ...
9
votes
2answers
679 views

asynchronous logging via rsyslogd(8) and write buffer increase

On a pretty high traffic web site running in virtual containers (VMware) and lacking local storage, we've managed to increase throughput (requests per second) significantly by switching from logging ...
0
votes
1answer
5k views

How can I monitor syslog and send notification based on events?

I'm going to be sending syslog from my one device/server to an Ubuntu server. On the Ubuntu server (receiving the syslog), I want it to trigger a script when specific syslog messages arrive. Is this ...
2
votes
1answer
5k views

rsyslog not rotating at fixed file size

I am trying to create a separate log file for a application in Linux. So far I have created a .conf script to separate log in custom log file based on program name and it's working correctly. But, I ...
1
vote
1answer
901 views

Give rsyslog read access to all log files that I want to monitor

I'm using the $InputFile facility in rsyslog to monitor various log files scattered around my ubuntu 12.04 server. E.g. nginx, unicorn, rails, postgres, cron etc. Now my problem is, that some of these ...
4
votes
1answer
1k views

Rsyslog doesn't log TCP after upgrade from 10.4 to 12.4

I was using Ubuntu 10.4 until last week for storing the log informations of a external device with rsyslog. After upgrading to ubuntu 12.4 the logging of TCP doesn't works anymore. (There are just no ...