The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
2answers
670 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
0
votes
2answers
44 views

rsyslog server saves logs from remote also in /var/syslog

I have setup my ubuntu server as syslog server to accept all my logs from my router and save them in a seperate mikrotik.log file in the /var/log/ folder. Everything works but i notice that all ...
0
votes
2answers
437 views

How to tell what is logging bandwidth

I've been having everything that goes through my NIC logged and I'm not sure how it happened. The last thing I installed was webmin and I'm not sure if that changed a setting or not but as of today ...
4
votes
1answer
262 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
2
votes
1answer
410 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
2
votes
1answer
934 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
1
vote
1answer
19 views

Ubuntu 14.04 server went offline all of a sudden

I see the below in syslog, not sure what went wrong, any help will be appreciated. Is this beacause of an automatic kernel update as I see a new kernel version? May 17 10:20:36 vps rsyslogd: [origin ...
1
vote
1answer
115 views

Using rsyslogd with imrelp in Ubuntu?

I'm trying to make use of imrelp in Ubuntu 14.04. However, when I check using lsof -i or netstat -autp nothing listens on the configured port. Package librelp0 is installed. What am I doing wrong? ...
1
vote
1answer
819 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
1answer
25 views

Difference between 49-haproxy.conf and haproxy.conf files

What is the difference between 49-haproxy.conf and the haproxy.conf files? Now I have no idea if this is specific to Ubuntu or if this is in general. The documentation on HAProxy is astoundingly bad. ...
0
votes
1answer
224 views

Identifying syslog files, also does auth.log mirror what is in /vars/syslog?

I am writing a auth log parser as a means to contribute to a tool and to learn linux logging better. I have been reading up on syslog and log facilities and was wondering if what is in auth.log will ...
0
votes
1answer
2k views

rsyslogd using 100% cpu on ubuntu 14.04

On my ubuntu 14.04 rsyslogd is using 100% of my CPU (both cores). Even after some google searching I were not able to figure out why rsyslogd is using all of the cpu capacity all the time. The ...
0
votes
1answer
1k views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
0
votes
1answer
2k views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
0
votes
1answer
559 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
2
votes
0answers
49 views

Client to Server Communication for rsyslog

I have two Ubuntu OS in VMware Virtual Machine: one of them is the client ( Ubuntu 14 ) and the other one is the server ( Ubuntu 15 Mate). I want to forward apache logs (access and error logs) from ...
1
vote
0answers
20 views

how do I get the atd daemon log at commands?

On HPUX all at jobs are logged in a cron.log file. Alas I cannot find similar on Ubuntu. I see cron is logged to syslog and I can change rsyslog to log to a cron.log. But my attempts to log at.* ...
1
vote
0answers
18 views

Postfix logs to remote server

On my Ubuntu 14.04 server, I'm using Postfix as a front-end mailserver, and I would like to send all mail related info, including email addresses, to a remote host. In the file ...
1
vote
0answers
302 views

How do I send nginx access and error logs to syslog?

I have rsyslog configured to ship logs to another server. I have been trying to setup nginx and rsyslog to use a socket, like /dev/log, to transfer logs into the local rsyslog and then let it handle ...
1
vote
0answers
247 views

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): ...
1
vote
0answers
1k views

rsyslogd hangs upon apt-get 14.04

If I do any apt-get install, it hangs permanently (have to CTRL-Z, CTRL-C does nothing) and then corrupts dpkg (have to run dpkg --configure etc) and I have to kill all rsyslog related processes. I've ...
1
vote
0answers
676 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
1
vote
0answers
46 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
0
votes
0answers
15 views

How can I query a rsyslog setting?

I am using rsyslog for program logging and system logging so I have unified log files. I'm having some messages dropping out and I'm not sure why, but I think it may be a configuration option set ...
0
votes
0answers
36 views

RFC5424 pattern not match in rsyslog procid

this is the pattern i configured in rsyslog.conf "<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [accounts@596839 category=\"auth\" ...
0
votes
0answers
17 views

how to configure rsyslog client on windowsxp

configured Rsyslog on Ubuntu 12.04 working fine for all my ubuntu client getting log daily. here i would like to know how to configure client side on Windowsxp for ubuntu clients used *.* @ip:514 ...
0
votes
0answers
61 views

Syslog seems disabled

In my Ubuntu 14.04.02 LTS Server machine I've found that the syslog is not working. When I do a service syslog start (for example) It tells me that the service is unrecognized. When I do a service ...
0
votes
0answers
187 views

rsyslog relp setup

I am setting up remote logging using relp. I have installed the rsyslog-relp packange on both sides. My problem is that the log packets don't appear to be arriving. I see the log receiver has port ...
0
votes
0answers
24 views

How do I remove syslog after centralizing to a remote server?

How do I remove syslog from a client after I have centralized it to a sever? Here are my syslog configurations of the client server $ModLoad imtcp $InputTCPServerRun 514 @@:192.168.0.101 I want to ...