The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
2answers
596 views

Is there any way to log windows log messages using rsyslog?

Is there any way to log windows log messages in linux using rsyslog? even if any other open source methods are available, then your suggestions would be appreciated. thanks in advance.
0
votes
2answers
411 views

How to tell what is logging bandwidth

I've been having everything that goes through my NIC logged and I'm not sure how it happened. The last thing I installed was webmin and I'm not sure if that changed a setting or not but as of today ...
4
votes
1answer
223 views

Default to adm group for upstart logs

This bug suggests that on 12.04, the default permissions for upstart logs do not allow rsyslogd to read them: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1074564 That is the logs need to ...
2
votes
1answer
348 views

rsyslog Disable $RepeatedMsgReduction for specific filter

I have the following in my rsyslog configuration. It works well. :msg, contains, "<switch2>" /var/log/switch.log & ~ I need to disable RepeatedMsgReduction for log messages that are ...
2
votes
1answer
889 views

13.04 - rsyslogd eating all the CPU it can

I'm on a VPS on ramnode.com, virtualized using OpenVZ, the installed OS was Ubuntu 12.10 but I ran do-release-upgrade to upgrade it to 13.04. rsyslogd was consuming ~150% CPU, I really don't know ...
1
vote
1answer
96 views

Using rsyslogd with imrelp in Ubuntu?

I'm trying to make use of imrelp in Ubuntu 14.04. However, when I check using lsof -i or netstat -autp nothing listens on the configured port. Package librelp0 is installed. What am I doing wrong? ...
1
vote
1answer
706 views

How to display the IP address of the sender when rsyslog rejects a UDP message?

Environment is Ubuntu 12.04.4 LTS with rsyslog 5.8.6. I've got rsyslog configured to receive messages via UDP over the standard port 514. It allows one specific host to send messages to it: ...
0
votes
1answer
45 views

syslog still receiving entries after filter to seperate file

First time posting. Trying to get remote devices to into separate log files and not in the main syslog file. Have created a filter for remote devices to go to a separate file per host, but still ...
0
votes
1answer
141 views

Identifying syslog files, also does auth.log mirror what is in /vars/syslog?

I am writing a auth log parser as a means to contribute to a tool and to learn linux logging better. I have been reading up on syslog and log facilities and was wondering if what is in auth.log will ...
0
votes
1answer
2k views

rsyslogd using 100% cpu on ubuntu 14.04

On my ubuntu 14.04 rsyslogd is using 100% of my CPU (both cores). Even after some google searching I were not able to figure out why rsyslogd is using all of the cpu capacity all the time. The ...
0
votes
1answer
1k views

What would cause /var/log/syslog to only be written to when executing rsyslog -d?

I have one system where /var/log/syslog is written to as expected, and another system where it can't be written to unless I stop rsyslog service and run it manually with "rsyslog -d". How do I debug ...
0
votes
1answer
2k views

How to send syslog messages to multiple destinations with rsyslog

I am using rsyslogd 5.8.6 on Ubuntu 12.04 LTS. In "/etc/rsyslog.d/50-default.conf", i added this line to send all messages to my syslogserver, which works without problems. *.* ...
0
votes
1answer
512 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
1
vote
0answers
34 views

Client to Server Communication for rsyslog

I have two Ubuntu OS in VMware Virtual Machine: one of them is the client ( Ubuntu 14 ) and the other one is the server ( Ubuntu 15 Mate). I want to forward apache logs (access and error logs) from ...
1
vote
0answers
191 views

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): ...
1
vote
0answers
991 views

rsyslogd hangs upon apt-get 14.04

If I do any apt-get install, it hangs permanently (have to CTRL-Z, CTRL-C does nothing) and then corrupts dpkg (have to run dpkg --configure etc) and I have to kill all rsyslog related processes. I've ...
1
vote
0answers
615 views

Not getting any logs written to auth.log, kern.log, syslog or any other log files

I am not getting any logs in auth.log, kern.log, syslog or any other log files on my 12.04 ubuntu server. There is also no rsyslog.conf if it should be there by default. How can I debug this & ...
1
vote
0answers
45 views

system log not perpetually scrolling?

rsystemlogd is installed - when running - then system log is scrolling too with kernel.log and logging of eth0. Now it happens that system log is not scrolling despite of that rsystemlogd is still ...
0
votes
0answers
7 views

How can I query a rsyslog setting?

I am using rsyslog for program logging and system logging so I have unified log files. I'm having some messages dropping out and I'm not sure why, but I think it may be a configuration option set ...
0
votes
0answers
24 views

RFC5424 pattern not match in rsyslog procid

this is the pattern i configured in rsyslog.conf "<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [accounts@596839 category=\"auth\" ...
0
votes
0answers
16 views

how to configure rsyslog client on windowsxp

configured Rsyslog on Ubuntu 12.04 working fine for all my ubuntu client getting log daily. here i would like to know how to configure client side on Windowsxp for ubuntu clients used *.* @ip:514 ...
0
votes
0answers
42 views

Syslog seems disabled

In my Ubuntu 14.04.02 LTS Server machine I've found that the syslog is not working. When I do a service syslog start (for example) It tells me that the service is unrecognized. When I do a service ...
0
votes
0answers
147 views

rsyslog relp setup

I am setting up remote logging using relp. I have installed the rsyslog-relp packange on both sides. My problem is that the log packets don't appear to be arriving. I see the log receiver has port ...
0
votes
0answers
21 views

How do I remove syslog after centralizing to a remote server?

How do I remove syslog from a client after I have centralized it to a sever? Here are my syslog configurations of the client server $ModLoad imtcp $InputTCPServerRun 514 @@:192.168.0.101 I want to ...
0
votes
0answers
233 views

How do I send nginx access and error logs to syslog?

I have rsyslog configured to ship logs to another server. I have been trying to setup nginx and rsyslog to use a socket, like /dev/log, to transfer logs into the local rsyslog and then let it handle ...
0
votes
0answers
222 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
242 views

configure rsyslogd to capture events from router device

I have DLink DIR 615 router, which is able to send syslog messages. I have enabled this type of sending on the router and set my Ubuntu server's IP as destination. On the server I made appropriate ...
0
votes
0answers
578 views

vsftpd no logs to syslog

I have an vsftpd syslog server. And Its currently logging to /var/log/vsftpd.log, but I want it to send the logs to our syslog server. But I somehow I cant find any answer to my problem. I tried it ...