Stack Overflow
Stack Overflow

Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
6
votes
1 answer

Java to rsyslog: STDOUT or syslog?

My understanding of rsyslog is that it is a syslog server implementation common on Ubuntu machines. Futhermore, my understanding is that rsyslog can be used to hook/capture STDOUT output as well as standard syslog messages. Last, my understanding is…
DirtyMikeAndTheBoys
  • 1,077
  • 3
  • 15
  • 29
5
votes
2 answers

Enable log rotation in rsyslog

How to enable log rotation in rsyslog configuration. The method described in the official documentation of rsyslog using output channels is not working for me. The script given in the official documentation of rsyslog for output channel is available…
Kumar Rounak
  • 49
  • 1
  • 5
5
votes
3 answers

Kafka Producer config retry strategy

What parameters of Kafka Producer config are needed to be changed so that the producer should: 1) Retry n times 2) After n interval for the same message in case if the broker is down. I need to handle a situation related to this:…
Tejas
  • 51
  • 1
  • 1
  • 4
5
votes
2 answers

Why does rsyslog replace tabs with #011?

I am using rsyslog to collect nginx logs. All looks good except the replacing usual tabs with '#011' text. Example of corrupted output: 217.118.93.88#0111473674833.412#0114418687#011... How it should look: 217.118.93.88 1473674833.412 4418687…
Samriang
  • 403
  • 6
  • 18
5
votes
1 answer

Docker rsyslog driver add message length before actual message

I'm trying to configure a rsyslog server for receiving logs from docker containers. I am currently usinsg the following commando for running a docker container: sudo docker run -d --log-driver=syslog --log-opt syslog-address=udp://localhost:514…
vitor.avancini
  • 111
  • 7
5
votes
2 answers

rsyslog config to store only raw message ($msg) to a file

How can I store only the raw message to a file? E.g.: I received a message via rsyslog: Received syslog message: May 4 13:18:47 xxxx apache-error: [Wed May 04 13:18:41.256596 2016] [:error] [pid 54583] [client 192.168.30.200:52638] script…
MrRolling
  • 2,145
  • 1
  • 24
  • 33
5
votes
1 answer

Rsyslog's imfile plugin not working on CentOS 7?

I am trying to get Rsyslog's imfile plugin working without any real success. Here is useful OS version information: # cat /etc/centos-release CentOS Linux release 7.1.1503 (Core) And here is Rsyslog version information: # rsyslogd -v rsyslogd…
mjf
  • 498
  • 4
  • 15
5
votes
1 answer

How to use more than one template with rsyslog

I am using rsyslogd and I want to put messages into custom log files based on their content (using a template) as well as use a custom file format (using a template). The rsyslog documentation provides good information on how to create a template…
Stuart
  • 193
  • 2
  • 8
5
votes
1 answer

rsyslog logging to multiple servers with different TLS configurations

Is it possible to have rsyslog log to multiple servers with different TLS configurations? We're currently logging to a local syslog server using the following: $DefaultNetstreamDriver gtls $DefaultNetstreamDriverCAFile…
Bruce P
  • 19,995
  • 8
  • 63
  • 73
5
votes
1 answer

Android: How to integrate Log4j2?

I'm trying to integrate Log4j2 in Android but getting the following error message: java.lang.ClassCastException: org.apache.logging.log4j.simple.SimpleLoggerContext cannot be cast to org.apache.logging.log4j.core.LoggerContext import…
Gkapoor
  • 840
  • 1
  • 13
  • 27
5
votes
1 answer

log4j syslogappender stack trace output not on the same line

I am trying to get centralised logging working with log4j and rsyslog. What I have so far Solr running inside tomcat6 on RHEL6, using the following log4j and sl4j libs # lsof -u tomcat | grep log4j java 14503 tomcat mem REG …
Andrey
  • 215
  • 3
  • 7
5
votes
1 answer

Ubuntu 12.04 logger won't write to remote syslog

I've already posted this question to Server Fault and it was upvoted twice as a respectable question, but unfortunately it has been crickets as far as an answer so I'm taking a shot at posting it here since this forum seems very active. If there are…
RuMORDeN
  • 51
  • 1
  • 2
4
votes
0 answers

Logging from multiple processes in a single docker container

I have an application (let's call it Master) which runs on linux and starts several processes (let's call them Workers) using fork/exec. Therefore each Worker has its own PID and writes its own logs. When running directly on a host machine (without…
Michael D.
  • 83
  • 7
4
votes
1 answer

Why does rsyslog fail to start after logrotate?

At midnight, a cronjob initiates logrotate to rotate 4 key log files. These 4 log files are also being sent to a log aggregation server by rsyslog. Despite running the rsyslog logrotate command after each log is rotated, sometimes, the server…
turtlefranklin
  • 509
  • 6
  • 14
4
votes
1 answer

The %procid% sometimes blank in rsyslog template

I'm trying to configure rsyslog to output in RFC5424 format. This means that the PROCID must be output in the syslog header. If there's no header, it should output a single dash (-) in its place. However, some of the events output have it just…
Kathucka
  • 41
  • 3
1 2
3
…
48 49