Questions tagged [syslog]
syslog is a standard for logging messages about the operation of a system.
674 questions
0 votes
0 answers
73 views
Two identical rsyslog configurations, one of them not working
I have two VMs, with the identical rsyslog version and configuration: rsyslogd -v rsyslog internal message (3,-2455): could not transfer the specified internal posix capabilities settings to the ...
0 votes
0 answers
38 views
How to parse log using mmnormalize and save them to file using omfile module with rsyslog
I'm trying to convert log from a specific format received on UDP port to RFC 5424 using mmnormalize rsyslog module (liblognorm). But after multiple attempt, I'm not able to get the log in the correct ...
0 votes
0 answers
72 views
Postfix stops creating log when syslog reload
I am facing an issue in my server. Sometime syslog auto restart. But after auto restart postfix is not create any logs. When restart postfix manually then it will work. How to solve this issue. root@...
0 votes
0 answers
74 views
How to prevent Ceph RGW to generate logs for each file during large `aws cp` operation?
Context: Ceph Reef installed with cephadm, upgraded to Squid. During the copy of a large amount of files with aws cp --recursive, the /var/log/syslog file on the RGW host (named cephrgw here) is ...
0 votes
1 answer
213 views
Why does my syslog-ng Docker container restart every ~1 minute?
I have a Docker Swarm with various services running. I've added a syslog-ng OSE service using https://github.com/linuxserver/docker-syslog-ng. The syslog-ng stack has the following docker-compose.yml: ...
0 votes
0 answers
64 views
Custom rsyslog Rule Not Logging to Specific File in Yocto Project on Ubuntu
I am working on a Yocto Project running on Ubuntu and have configured rsyslog to route log messages from a specific program to a custom log file. However, the messages don't seem to be logged as per ...
1 vote
0 answers
135 views
How to log remote syslog/journal to per-host journals?
I am trying to setup a logging server using rsyslog. As clients I have machines that can use journald as well as legacy applications that can only use syslog. As such, there needs to exist a plain ...
2 votes
2 answers
1k views
Fluent Bit as Syslog Server Alternative
We have an application deployed on AWS EKS cluster, which has a requirement of sending the application error messages to a syslog server. Our default logs shipper is Fluent Bit, deployed as a ...
1 vote
2 answers
194 views
Upgraded to debian bookworm - How do I configure monit to check for text in syslog (systemd's journal)?
I have been using monit for some time. One of the checks I had was to make sure that my mail server wasn't being abused. I use milter-limit to limit the rate of sending - and it logs to syslog. Prior ...
0 votes
2 answers
258 views
How to detect smartd errors from logs
I want to monitor multiple servers, and want to know when a drive fails. I have a script which monitors /var/log/syslog. What i want is a regex that matches only when a drive has a big problem. I do ...
0 votes
1 answer
117 views
script to print dhcpd.leases info to syslog/file
So i'm running dhcpd on a server and to my knowledge the logs from dhcpd are not adjustable, if they are i'm dying to know how... Anyways, i need something to check the dhcpd.leases-file which is ...
0 votes
1 answer
210 views
Is there a way to prevent log spamming with rsyslog?
I have AuditD running and one process like to constantly spawn children processes that do the same activity. Is there a way to have rsyslog not send in the same log message again? The hard part is the ...
1 vote
2 answers
788 views
syslog-ng adds a prefix to syslog messages
I have a squid proxy logging access logs to a file and syslog-ng reading those logs and based on squid's action it sets a severity - either info or notice - and forwards that as a syslog message to a ...
2 votes
2 answers
633 views
How to tell syslog-ng to ignore source files if they are absent
I'm trying to deploy a standard configuration file for syslog-ng on multiple linux servers. My infrastructure includes many services (apache, confluence, ...) with log file located at various places. ...
0 votes
0 answers
121 views
How to get syslogd and/or Apache2 to STOP logging DEBUG messages to console
When I SSH into one of my Linux boxes (Ubuntu 20.04.2), I periodically see messages appear on the console screen: Message from syslogd@my-hostname at Jan 30 21:35:17 ... apache2: [MY-APP] DEBUG - 2024-...