The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
331 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
2
votes
1answer
557 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
1
vote
1answer
254 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
1answer
353 views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
0
votes
1answer
563 views

could not load module rsyslog lmnsd_gtls.so

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated. tail /var/log/syslog Dec 1 ...
0
votes
1answer
905 views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
0
votes
1answer
231 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
3
votes
0answers
100 views
+50

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
2
votes
0answers
145 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
1
vote
0answers
127 views

rsyslogd using 100% CPU creating huge syslog and kern.log files

And here is output from command tail -5 syslog Nov 22 14:02:16 adam-iXtreme-8550 kernel: [10995.487954] saa7133[0]/irq: looping -- clearing PE (parity error!) enable bit Nov 22 14:02:16 ...
1
vote
0answers
188 views

Syslog cannot start

I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /vae/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
1
vote
0answers
42 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
1
vote
0answers
243 views

Syslog won't write to local file

On Ubuntu 10.04 LTS, I'm using the stock rsyslog configuration and added a custom file in /etc/rsyslog.d with the following contents: # cat /etc/rsyslog.d/62-pc local3.debug /var/log/pc/debug.log ...
1
vote
0answers
102 views

rsyslog inconsistent logging of hostnames vs IP's

After upgrading our syslog (rsyslog) server from 10.04 to 12.04, rsyslog doesn't register hostname for 10-20% of the clients, just IP's. These clients were logged properly with hostnames prior to ...
0
votes
0answers
10 views

Multiples instances of rsyslogd running

I am administrating a Ubuntu 12.04.4 32bits server. I found out that at any given time there is 4 instances of rsyslogd running. I will like to know whether is not normal or if not why it is needed to ...
0
votes
0answers
50 views

No package 'liblogging-stdlog' found

I am doing experiments with different logging systems. At the moment I am trying to install rsyslog from source so I can make some modifications to it. I am using Ubuntu 14.04. I downloaded version ...
0
votes
0answers
81 views

rsyslog for beginners

I've just started to use rsyslog on an ubuntu 14 server. I am using it as a server to send logs from my firewalls / nas / routers etc. New to all this so could do with some advice. Firstly, how to ...
0
votes
0answers
93 views

how to make a separate log file for bind service in rsyslog?

I installed bind9 for name service on ubuntu12.04. Now for debugging its errors in name resolving. I need to make separate log file for it like /var/log/name.log. I searched too many for rsyslog, ...
0
votes
0answers
240 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
0
votes
0answers
124 views

How to do Rsyslog Server Configuration?

I have one rsyslog server and 3 client server. i can send client log to remote server. But all the client logs are located in a single folder. So how can i create 3 client directory in remote server ...
0
votes
0answers
42 views

how to sign log files?

Rsyslogd is default daemon for providing log files in ubuntu. The possibility to sign log messages through Guardtime, a signature provider, introduced With rsyslog. But there is no manual for do it! ...
0
votes
0answers
61 views

rsyslog ommail conf file causing zombie process

I have been trying to set up email alerts on a 12.04 server, but keep running into the same issue whenever I place my email-alert conf file in /etc/rsyslog.d. I've named it 30-email-alerts.conf. Upon ...
0
votes
0answers
56 views

rsyslog custom severity names

I am using rsyslog to log messages from multiple remote machines onto a central hub. The setup is working as intended and all is well, however, I would like to normalize the output. The different ...
0
votes
0answers
147 views

rsyslog ruleset issue

Explanation: I am trying to set up an rsyslog server to receive messages from multiple clients, but I am not seeing any message arrive from the client machines, I have tried many things and when ...
0
votes
0answers
123 views

/var/log/boot.log incomplete

My core issue is that something is causing udev to spew thousands of messages during boot, slowing down boot by 10 minutes. My interrim issue however is that there are so many messages during boot ...