Questions tagged [syslog]

syslog is a standard for logging messages about the operation of a system.

syslog is a standard that defines the format of messages about a system's operation. They are further categorized by facility (user,mail,kern), etc and a severity (critical, emergency, informational, etc). These messages are usually then processed by a network monitoring system to take appropriate action. For example, on an emergency message, staff could be paged to resolve the issue, whereas long term analysis could be done on informational messages to properly maintain sytems.

660 questions
6
votes
1 answer

Getting journald to send email on certain events

I found these solutions for syslogd that send emails on certain events like local0.crit or local1.err How can I make syslogd email certain log messages to…
6
votes
2 answers

How does an administrator generalize alerting when an event doesn't happen?

Often my users require me to be just as responsible for knowing if an event hasn't happened. I've always had to build custom and brittle solutions with cron'ed shell scripts and lots of date edge case testing. Centralized logging ought to allow…
Dan Garthwaite
  • 2,962
  • 1
  • 19
  • 31
6
votes
1 answer

Configuring JBoss AS 7.2 to log to syslog

In my standalone.xml, I have the syslog-handler configured like so:
cemerick
  • 283
  • 2
  • 6
6
votes
1 answer

How to configure rsyslog to log into PostgreSQL without too much latency?

I'm trying to configure RSyslog on a Debian machine to log everythingo into PostgreSQL, while also logging as usual on disk. I'm using a pretty stock Debian configuration and I activated the related configuration directives after reading the…
Jonathan Ballet
  • 161
  • 1
  • 1
  • 4
6
votes
4 answers

imuxsock messages in syslog and system becomes unresponsive

I am getting such messages in syslog. rsyslogd-2177: imuxsock lost 21869 messages from pid 3418 due to rate-limiting rsyslogd-2177: imuxsock begins to drop messages from pid 3427 due to rate-limiting My server is becoming unresponsive for last few…
shashuec
  • 277
  • 2
  • 3
  • 6
6
votes
2 answers

Avoiding log noise from cron jobs - with syslog-ng rather than syslog

On my small Debian squeeze web server, I have syslog-ng installed (not syslogd, like in this question). Generally, my logs are nice and quiet, with -- MARK -- lines. My /var/log/syslog, however, is littered with this Sep 23 23:09:01 bookchin…
einpoklum
  • 1,652
  • 3
  • 21
  • 31
6
votes
1 answer

Ubuntu syslog: After log rotation nothing is written on /var/log/syslog

I've been running a Ubuntu VPS for a few weeks now, so a couple of monthly log rotations took place yestarday. For things like /var/log/wtmp things look as expected: logfile has recent entries, while logfile.1 older entries. However, /var/log/syslog…
ezequiel-garzon
  • 577
  • 2
  • 7
  • 16
6
votes
1 answer

rsyslog not logging messages

i'm attempting to set up my ec2 instance (running amazon linux which as i understand is built on RHEL 5) to forward log messages to loggentries.com but nothing is getting forwarded. as a sanity check i followed the instructions in this article to…
hackerhasid
  • 309
  • 1
  • 4
  • 9
6
votes
3 answers

Increase rsyslog/syslog precision to include fractional seconds?

I use syslog and rsyslog to handle logging on my Linux & FreeBSD systems. The timestamp is currently in seconds but I would like to increase the precision of these timestamps to include milliseconds. Is this possible using the syslog variants such…
Stefan Lasiewski
  • 23,667
  • 41
  • 132
  • 186
6
votes
3 answers

Syslog severity levels when to use Alert vs Critical

Short overview: Is Alert more severe than Critical. RFC 5424 briefly defines syslog severity levels and gives a short description. Each syslog level is given a code 0 - 7. It was my understanding that 0 (Emergency) was most severe and 7 (Debug) was…
Sean Bannister
  • 751
  • 8
  • 19
6
votes
3 answers

What's the best centralized syslog viewing tool for *nix out there

Looking for what people think are the best for doing web viewing of a centralized syslog server. I am open to using any syslog server also. EDIT I actually went with GrayLog2
Mike
  • 22,310
  • 7
  • 56
  • 79
6
votes
2 answers

exclude syslog facility from all others

I'm adding some custom logging on local0 in syslog. Writing these messages to a specific log is easy, in my syslog.conf I have local0.* -/var/log/my.log But how can I exclude local0 from all other logs? In my current setup, local0 messages…
Ben K.
  • 2,379
  • 4
  • 18
  • 15
6
votes
3 answers

Log Locally and Remotely with rsyslogd

How can I make it so log file is stored both remotely and locally using rsyslog?
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
6
votes
2 answers

Why is Syslog Not Writing Logs To The Designated Files?

I've been trying to route Apache's logs through Syslog (for some reason log rotation had stopped, and using Syslog and logrotate seemed a reasonable solution). I have sent Apache's error logs to local7 and piped the access logs to local6 via the…
chrisbunney
  • 503
  • 2
  • 9
  • 20
5
votes
1 answer

Using linux environment variable in rsyslog template

I'm trying to add an environment variable to my rsyslog template. I tried using 'getenv()' function without any luck, I always get an empty string in return. I'm attaching an example of my rsyslog config file, I'm using 'HOME' env variable as an…
Hanoch Giner
  • 153
  • 1
  • 4