The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
463 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
3
votes
1answer
154 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
2
votes
1answer
270 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
2
votes
1answer
736 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
1
vote
1answer
45 views

Using rsyslogd with imrelp in Ubuntu?

I'm trying to make use of imrelp in Ubuntu 14.04. However, when I check using lsof -i or netstat -autp nothing listens on the configured port. Package librelp0 is installed. What am I doing wrong? ...
1
vote
1answer
536 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
1answer
40 views

Identifying syslog files, also does auth.log mirror what is in /vars/syslog?

I am writing a auth log parser as a means to contribute to a tool and to learn linux logging better. I have been reading up on syslog and log facilities and was wondering if what is in auth.log will ...
0
votes
1answer
186 views

How to use rsyslog?

I've been scouring forums for a few hours and cannot find a concrete explanation on how to use rsyslog. I really just need the basics. I have a log file logFile.log and I want to forward the logs to ...
0
votes
1answer
128 views

rsyslog for beginners

I've just started to use rsyslog on an ubuntu 14 server. I am using it as a server to send logs from my firewalls / nas / routers etc. New to all this so could do with some advice. Firstly, how to ...
0
votes
1answer
848 views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
0
votes
1answer
1k views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
0
votes
1answer
401 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
1
vote
0answers
95 views

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): ...
1
vote
0answers
446 views

rsyslogd hangs upon apt-get 14.04

If I do any apt-get install, it hangs permanently (have to CTRL-Z, CTRL-C does nothing) and then corrupts dpkg (have to run dpkg --configure etc) and I have to kill all rsyslog related processes. I've ...
1
vote
0answers
500 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
1
vote
0answers
44 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
0
votes
0answers
36 views

rsyslog relp setup

I am setting up remote logging using relp. I have installed the rsyslog-relp packange on both sides. My problem is that the log packets don't appear to be arriving. I see the log receiver has port ...
0
votes
0answers
16 views

How do I remove syslog after centralizing to a remote server?

How do I remove syslog from a client after I have centralized it to a sever? Here are my syslog configurations of the client server $ModLoad imtcp $InputTCPServerRun 514 @@:192.168.0.101 I want to ...
0
votes
0answers
98 views

How do I send nginx access and error logs to syslog?

I have rsyslog configured to ship logs to another server. I have been trying to setup nginx and rsyslog to use a socket, like /dev/log, to transfer logs into the local rsyslog and then let it handle ...
0
votes
0answers
68 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
93 views

configure rsyslogd to capture events from router device

I have DLink DIR 615 router, which is able to send syslog messages. I have enabled this type of sending on the router and set my Ubuntu server's IP as destination. On the server I made appropriate ...
0
votes
0answers
208 views

vsftpd no logs to syslog

I have an vsftpd syslog server. And Its currently logging to /var/log/vsftpd.log, but I want it to send the logs to our syslog server. But I somehow I cant find any answer to my problem. I tried it ...
0
votes
0answers
18 views

Prevent Rsyslog from removing automatically syslog.gz files.

Why ubuntu remove older syslog older than syslog.7.gz by default? How can I prevent that to happen? Thanks
0
votes
0answers
746 views

rsyslogd using 100% cpu on ubuntu 14.04

On my ubuntu 14.04 rsyslogd is using 100% of my CPU (both cores). Even after some google searching I were not able to figure out why rsyslogd is using all of the cpu capacity all the time. The ...
0
votes
0answers
53 views

Multiples instances of rsyslogd running

I am administrating a Ubuntu 12.04.4 32bits server. I found out that at any given time there is 4 instances of rsyslogd running. I will like to know whether is not normal or if not why it is needed to ...
0
votes
0answers
129 views

No package 'liblogging-stdlog' found

I am doing experiments with different logging systems. At the moment I am trying to install rsyslog from source so I can make some modifications to it. I am using Ubuntu 14.04. I downloaded version ...