The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
210 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
7
votes
1answer
245 views

asynchronous logging via rsyslogd(8) and write buffer increase

On a pretty high traffic web site running in virtual containers (VMware) and lacking local storage, we've managed to increase throughput (requests per second) significantly by switching from logging ...
2
votes
1answer
354 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
0
votes
1answer
167 views

could not load module rsyslog lmnsd_gtls.so

The rsyslog module is showing up in system log /var/log/syslog as message repeated. rsyslog was also showing 99% cpu use in top at one point, possibly unrelated. tail /var/log/syslog Dec 1 ...
0
votes
1answer
496 views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
0
votes
1answer
130 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
2
votes
0answers
87 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
1
vote
0answers
69 views

rsyslogd using 100% CPU creating huge syslog and kern.log files

And here is output from command tail -5 syslog Nov 22 14:02:16 adam-iXtreme-8550 kernel: [10995.487954] saa7133[0]/irq: looping -- clearing PE (parity error!) enable bit Nov 22 14:02:16 ...
1
vote
0answers
65 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
1
vote
0answers
141 views

Syslog cannot start

I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /vae/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
1
vote
0answers
38 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
1
vote
0answers
185 views

Syslog won't write to local file

On Ubuntu 10.04 LTS, I'm using the stock rsyslog configuration and added a custom file in /etc/rsyslog.d with the following contents: # cat /etc/rsyslog.d/62-pc local3.debug /var/log/pc/debug.log ...
1
vote
0answers
94 views

rsyslog inconsistent logging of hostnames vs IP's

After upgrading our syslog (rsyslog) server from 10.04 to 12.04, rsyslog doesn't register hostname for 10-20% of the clients, just IP's. These clients were logged properly with hostnames prior to ...
0
votes
0answers
24 views

how to make a separate log file for bind service in rsyslog?

I installed bind9 for name service on ubuntu12.04. Now for debugging its errors in name resolving. I need to make separate log file for it like /var/log/name.log. I searched too many for rsyslog, ...
0
votes
0answers
39 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
0
votes
0answers
21 views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
0
votes
0answers
57 views

How to do Rsyslog Server Configuration?

I have one rsyslog server and 3 client server. i can send client log to remote server. But all the client logs are located in a single folder. So how can i create 3 client directory in remote server ...
0
votes
0answers
30 views

how to sign log files?

Rsyslogd is default daemon for providing log files in ubuntu. The possibility to sign log messages through Guardtime, a signature provider, introduced With rsyslog. But there is no manual for do it! ...
0
votes
0answers
36 views

rsyslog ommail conf file causing zombie process

I have been trying to set up email alerts on a 12.04 server, but keep running into the same issue whenever I place my email-alert conf file in /etc/rsyslog.d. I've named it 30-email-alerts.conf. Upon ...
0
votes
0answers
37 views

rsyslog custom severity names

I am using rsyslog to log messages from multiple remote machines onto a central hub. The setup is working as intended and all is well, however, I would like to normalize the output. The different ...
0
votes
0answers
72 views

rsyslog ruleset issue

Explanation: I am trying to set up an rsyslog server to receive messages from multiple clients, but I am not seeing any message arrive from the client machines, I have tried many things and when ...
0
votes
0answers
67 views

/var/log/boot.log incomplete

My core issue is that something is causing udev to spew thousands of messages during boot, slowing down boot by 10 minutes. My interrim issue however is that there are so many messages during boot ...
0
votes
0answers
84 views

Centralized RSYSLOG with visualization

1> What are my options(open source) for a Centralized RSYSLOG solution that it comes(or can be added) with visualization over my logs coming from remote RSYSLOG nodes? 2> What are the security ...
0
votes
0answers
341 views

Rsyslog with omprog and condition filter not success

We want to filter syslog facility local4 and message contains "HTTP: Invalid Response: No object data received for" to the custom script and use the script doing some process and output to the file ...
0
votes
0answers
121 views

`dnsmasq` and `nullmailer-send` use CPU time constantly

Since a couple weeks now, I have the following processes use a lot of CPU time: /usr/sbin/nullmailer-send -s (5%) /usr/sbin/dnsmasq --no-resolv --keep-in-foreground --no-hosts --bind-interface ...