Syslog is a protocol designed to relay system event messages. Questions related to syslog involve event notification and logging capabilities.

learn more… | top users | synonyms

28
votes
2answers
42k views

Difference between /var/log/messages, /var/log/syslog, and /var/log/kern.log?

For the purposes of kernel logging, why do I have three different, non-inclusive levels of logging amongst /var/log/messages, /var/log/syslog, and /var/log/kern.log?
18
votes
1answer
32k views

Where is syslog.conf?

I tried to move my stuff from CentOS to Ubuntu. Here is a problem I met: I would like find the corresponding CentOS /etc/syslog.conf file in Ubuntu? Basically, the file is used to control where those ...
13
votes
3answers
17k views

How can I receive syslog logs from a networked system?

I'd like to configure Ubuntu to receive logs from a DD-WRT router. The router's configuration screen contains the following section: and its logging documentation reads: If you wish to send ...
12
votes
3answers
23k views

How to enable boot messages to be printed on screen during boot up? [duplicate]

How to enable boot messages, kernel messages and other logs of various services to be printed on screen during boot up?
11
votes
2answers
34k views

difference between rsyslogd and syslogd

I was trying to implement some changes to syslogd on Ubuntu 10.04.02 LTS (Server edition). I found /etc/syslog.conf is not present on system, instead I have /etc/rsyslogd.d/*.conf. syslogd can be ...
9
votes
3answers
24k views

Cron Job Not Running?

I have a crontab file that looks like this: * * * * * /home/abliskovs/update/update.sh However when I check the syslog for evidence that the job has run, there is nothing that might indicate that it ...
9
votes
2answers
8k views

What Graphical Logfile Analyzers are available?

does anybody know a good graphical logfile analyzer for (mainly) syslog messages from ubuntu? maybe one that converts the text-based messages in objects to sort/group/filter messages like windows' ...
7
votes
1answer
38k views

How do I configure rsyslog to send logs from a specific program to a remote syslog server?

I have a program which outputs to syslog with a given tag/program name. I'd like to be able to filter syslog traffic from that program and send it to a remote syslog server, leaving all other syslog ...
7
votes
3answers
6k views

How do I limit the size of my syslog?

I've got my mom's computer running Ubuntu 12.04 LTS. It's been working just fine but all of the sudden syslog has been filling up. And by filling up I mean I just deleted a /var/log/syslog that was ...
7
votes
1answer
1k views

How to correctly create a virtual file system?

A task in my homework assignment asks me to create a virtual file system, mount it, and perform some operations on it. I am supposed to create a file of 10 MB whose bits are all set to 0, format it ...
7
votes
2answers
4k views

How do I configure Dropbox to log to syslog?

Dropbox is currently running well on Ubuntu server 10.04. How can I setup dropbox to log any sync in syslog or even separate log file?
6
votes
1answer
16k views

How do I disable messages or logging from printing on the console/virtual terminals?

My wireless driver is noisy. It prints out messages to the console every 10-30 seconds. So, if I'm working on VT1 or something, I get messages scrolling by all the time. Is there a way to shut this ...
6
votes
2answers
3k views

Is there a way to suppress one specific message from syslog?

I'm getting a lot of Dec 27 08:35:49 htpc kernel: [ 1552.153797] pciehp 0000:00:1c.5:pcie04: Card not present on Slot(0-2) Dec 27 08:35:49 htpc kernel: [ 1552.157744] pciehp 0000:00:1c.5:pcie04: ...
6
votes
2answers
142 views

Why doesn't chkrootkit test syslogd?

When I scan my machine with chkrootkit I notice that it always says for one of them: Checking `syslogd'... not tested Why is this not tested for? Should this ...
6
votes
1answer
2k views

How to make whoopsie more silent (log clutter with “online”messages)

I know what whoopsie is from the answers to What is the 'whoopsie' process and how can I remove it? I do not want to stop error reporting, as I think that error reporting is the minimum a ...
6
votes
1answer
2k views

Why is there “seccomp” events related to Google Chrome in syslog?

Was in my syslog today and noticed that the Google Chrome web browser is create TONS of events that look like this: Dec 7 13:11:02 mycomp-sys76 kernel: [ 8371.604406] type=1701 ...
5
votes
2answers
177 views

How to delete private data from log files?

I have heard that log files contains private data. How can I remove it and what files should I remove from them? Those are very long files so maybe if I know what to remove I can use a script or ...
5
votes
2answers
6k views

What could be the cause for these strange UFW block entries in my syslog?

I've recently noticed a large number of recurring UFW blocks in my syslog. This surprised me as I have no UFW rules set: $ sudo ufw status verbose Status: active Logging: on (low) Default: deny ...
5
votes
1answer
3k views

/var/log/syslog empty

Apparently my logs stopped working around Apr 10, as the current /var/log/syslog is empty, and /var/log/syslog.1 has the following for its last entries: Apr 10 20:25:01 li243-206 CRON[2883]: (root) ...
5
votes
1answer
532 views

Warnings in Syslog

Syslog displays these warnings and I would like to know how can I know what they mean in order to search what can I do about them. $ cat /var/log/syslog| grep -i 'warn' Nov 27 13:48:19 pc ...
5
votes
2answers
2k views

How to disable the log files?

To be specific I want to stop the kern.log and syslog files. I just installed Xunbuntu about 2 days ago and have no experience with this OS. I know they are supposedly important, but I have a ...
5
votes
2answers
3k views

Investigating a system “freeze”

Am on Ubuntu 10.04.2 LTS Linux skiran 2.6.32-32-generic-pae #62-Ubuntu SMP Wed Apr 20 22:10:33 UTC 2011 i686 GNU/Linux My machine froze for the 5th time in 2 days. Had to reboot, and login to a ...
4
votes
1answer
4k views

Where are Upstart log messages on Ubuntu 13.X?

On Ubuntu 12.04, I can find Upstart log messages in /var/log/syslog. Commands: # initctl log-priority info # initctl emit hello Log: Apr 1 01:56:56 precise64 kernel: [ 8365.820425] init: ...
4
votes
3answers
14k views

rsyslogd stopped writing to /var/log/syslog two days ago

It seems rsyslogd stopped writing to /var/log/syslog on my laptop two days ago, and I do't know why. This is visible in the following: clh@avignon:/var/log$ ls -lt | head -30 total 12600 drwxr-xr-x ...
4
votes
1answer
805 views

How can I speed up boot on one of my machines?

I have a Gateway all in one machine (2 gig Intel Core 2 Duo T7250 dual core processor, 2 gig RAM - full specs) on which I installed 10.10. Once it has booted it's fine, but it takes forever to boot. ...
4
votes
1answer
5k views

rsyslog filter by tag

I would like to create a rsyslogd config file that filter the syslog for specific tag and outputs this tag to a specific file. I create a rule file under /etc/rsyslog.d # Log kernel generated UFW ...
4
votes
2answers
3k views

Which script rotates /var/log/auth.log?

I cannot figure out where /var/log/auth.log is rotated. I found the file /var/log/auth.log.2013-09-16 on my system, which contains log entries previously found in /var/log/auth.log. Where does that ...
4
votes
1answer
7k views

Set up a syslog server

I have installed Ubuntu Server 12.04 and I intend to set up a syslog server. Any ideas would be appreciated.
3
votes
2answers
7k views

How do I configure CUPS and change SAMBA setting for no printers?

A couple of time an hour, these lines show up in syslog Feb 19 09:20:11 KISE-055 smbd[5685]: [2013/02/19 09:20:11.609603, 0] printing/print_cups.c:110(cups_connect) Feb 19 09:20:11 KISE-055 ...
3
votes
1answer
47 views

Dell 7537 syslog over 40 GB

I am a new user and not a techie, but i love ubuntu. I am at 14.10 currently and have almost 60GB allocated to /var but lately the /var folder has been eating up almost over 40GB of space, the last ...
3
votes
1answer
3k views

Configuring syslog for bash script logging

I want to use syslog to do some bash script logging. I see /etc/rsyslog.d/50-default.conf, but I'm new to syslog. I want to configure local0 for logging for my scripts. Should I be editing this ...
3
votes
1answer
217 views

How can I view a log of system use?

Is there a log or software application for interpreting, e.g. /var/log/syslog* so that I can get statistics on system use? I am interested in the frequency of use of a machine by different users; ...
2
votes
2answers
3k views

How to verify if a reboot was due to power outage?

We've had problems with tripping a breaker and I think we just did it again, but I need to confirm that 1 of our boxes rebooted due to a power outage and not for another mundane reason. I have ...
2
votes
2answers
91 views

syslog kernlog xorg.0.log - is it safe to post them

Is it safe to post syslog kernlog xorg.o.log from /var/log online to solve a problem with ubuntu system? There is private content in there that other people should not see? Thanks
2
votes
2answers
58 views

First steps in verifying random crashes?

Recently my system has been acting weird. I consider it stable and I leave my system pretty much running 24/7. However, just about an hour ago I decided to get out of the PC for a bit and do my ...
2
votes
2answers
964 views

How to cure regular syslog error?

I'm getting regular errors in my syslog (they're occurring exactly every 10 minutes, to the second): Feb 22 13:01:24 computer sm-mta[5747]: q1MBVO6B003778: SYSERR(root): hash map "Alias0": missing ...
2
votes
1answer
24 views

OSSEC HIDS reports “Interface entered in promiscuous(sniffing) mode”

I have installed the latest version of OSSEC HIDS (2.8.1), and I keep now getting these email notifications from it: OSSEC HIDS Notification. 2015 Apr 08 11:26:17 Received From: ...
2
votes
2answers
2k views

Various segfaults in syslog; firefox, apt-get and other apps broken

I am working on an Ubuntu 12.04 installation that has recently started misbehaving. It is used by multiple people at an office, so it's possible someone messed things up (although the only user who is ...
2
votes
1answer
972 views

Can I block log messages from specific devices or drivers?

I'm getting "NVRM: os_raise_smp_barrier()" messages in syslog and dmesg at a rate of 4-6 per minute; I think it's from the Nvidia graphics driver. The system behaves normally, but the messages ...
2
votes
1answer
268 views

^@^@ character in syslog

I observe the following strange characters ^@ in syslog at the time when my machine freezes. Then i have to hardboot my machine. What could be wrong any ideas? Oct 12 12:20:52 nanak-P570WM ...
2
votes
0answers
577 views

Ubuntu crash - how to read log files

A few days ago the laptop decided to close without no relevant reason. From this day on, it randomly crashes without explanation. This is what I (correctly?) filtered from the log files on the last ...
2
votes
0answers
810 views

14.04 upgrade: sysklogd disappeared without replacement!

I just upgraded from 13.10 to 14.04 with do-release-upgrade and I lost my syslog daemon in the proceedings. klogd and sysklogd were removed without any replacement functionality being installed. (I ...
2
votes
0answers
453 views

How to send dhcpd lease & MAC address info to central syslog server?

I am looking to send dhcpd leases including MAC address info etc. to my remote central syslog server, the server running dhcpd is running syslog-ng...would someone be so gracious as to assist me with ...
2
votes
1answer
315 views

How to send DHCPD leases to remote syslog-ng

I want to query a DHCP server for logs about leased IP’s every 5 minutes. I am not sure how to run the query from my server or which file to edit. The queried logs will be sent to the server ...
2
votes
0answers
4k views

kvm error in syslog says cpu0 unhandled rdmsr

I have a server that hosts about 20 KVM guest machines. It's syslog is, at times, flooded with messages like these: 00:17:36 vhost-server kernel: [ 157.835078] kvm: 3138: cpu0 unhandled rdmsr: ...
2
votes
0answers
607 views

How I can connect the syslog-ng with a mysql database?

Hi guys I want to use a syslog-ng server for logging data from the firewall and I get Data from the Firewall in the file /var/firewall.log but now I want that the logs go to a database. For this I ...
2
votes
0answers
311 views

My cpus are powered down periodically

I post here because I am using Ubuntu but this is probably an hardware problem. Since I bought my new setup with AMD Athlon(tm) II X4 635 Processor and asus m4a89td pro/usb3 motherboard with ecc ram I ...
2
votes
0answers
114 views

Which logs will tell me about the Touchpad and Keyboard locking up?

I have an Asus N53SM laptop that I leave running for several weeks at a time. I never put it in hibernate or suspend, I only close the lid when I'm not using it. After a few days or weeks of running, ...
2
votes
1answer
274 views

Syslog/kernlog filling up with “did not claim interface N before use”

As I discovered when asking this question, it appears that demond_nscan is trying to use a device without claiming it. And it does it.... hundreds of time per second apparently. This makes kern.log ...
1
vote
2answers
122 views

What does this output in syslog mean?

There is this output every passing minute - one time - in syslog: CRON[15164]: (root) CMD (/usr/bin/test -x /usr/sbin/autodns-dhcp_cron && /usr/sbin/autodns-dhcp_cron) What does this mean ?