Stack Overflow
Stack Overflow

Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
0
votes
1 answer

CentOS Property-based compare-operations Rsyslog

I´m using CentOS and I´m looking for a solution to filter some messages from /var/log/messages by tag to user defined file. I´m trying something like that in /etc/rsyslog.conf :msg, contains, "mytag" /var/log/mytag/mytag.log but it doesnt work. I…
CI2
  • 1
0
votes
0 answers

Log4j SyslogAppender not sending any logs to local Syslog

I am trying to get the Syslog thing working. I am using Log4j 2.7 SyslogAppender (org.apache.logging.log4j.core.appender). I have local syslog relay server listening on port 514 (UDP). All the local syslog messages are forwarded to remote Syslog…
Amit Gautam
  • 71
  • 1
  • 7
0
votes
2 answers

MongoDB convert timezone for Loganalyzer

I have installed rsyslog-8.26.0, loganalyzer-4.1.5 and MongoDB 3.4.4 on CentOS7. MongoDB stores all dates and times in UTC and I can see data on Loganalyzer also UTC. any idea to change this for local timezone? either change MongoDB default…
Waruna C. Senavirathna
  • 21
  • 1
0
votes
1 answer

Rsyslog v8 imfile directory wildcard

I am trying to solve "sending" log files from directories and subdirectories to central log server using imfile in Rsyslog. OS is CentOS 7 CentOS Linux release 7.3.1611 (Core) Rsyslog is v8 from official repo. rsyslogd 8.26.0, compiled with: …
cr4wen
  • 1
  • 3
0
votes
1 answer

journalctl shows removed iptables logs

Im logging a lot with iptables and to put my logs in a separate file I have put a couple rules in /etc/rsyslog.d/iptables.conf :msg, startswith, "iptables: " -/var/log/iptables.log & ~ :msg, regex, "^\[ *[0-9]*\.[0-9]*\] iptables: "…
methuselah-0
  • 96
  • 1
  • 5
0
votes
0 answers

Several tcp connections from same syslog-ng clients

We have a syslog-ng server with several rsyslog clients. Over time some of them open a lot of client connections to the server instead of just one TCP connection. From the client perspective a netstat shows only one connection but from the server…
keegita gina
  • 35
  • 9
0
votes
1 answer

How to receive syslog messages and convert them to string

First I would like to receive the syslog message, the second I would like to syslog message into string type, please tell me how to write java code。 The following code can only be output in the console, how to get the string type of…
Aaron
  • 1
  • 2
0
votes
0 answers

pthread_cond_wait and syslog writer conflict

I am currently developing a pthread-related socket communication program with gcc / g++. I'm having a problem using syslog. If I do not use the syslog() function, pthread_cond_wait works correctly when I send pthread_cond_signal. However, when using…
J. Kim
  • 39
  • 3
0
votes
1 answer

Log4j SyslogAppender won't log to syslog without daemon restart

Can someone help me understand why Log4j messages meant to get logged in syslog sometimes won't appear until I restart the rsyslog daemon? On Ubuntu I've got a Java project setup to use Log4j2. I am using Log4j's SyslogAppender to log messages to…
Michael
  • 648
  • 11
  • 23
0
votes
0 answers

set source ip for remote rsyslog

I am using rsyslog-8.22 on my product. Is there a way for me to set the source ip when forwarding a message to a remote server ? I need this since the remote server is running a firewall which is opened to a specific interface, I'd like to be able…
user3087632
  • 143
  • 2
  • 9
0
votes
0 answers

What is the criteria for rsyslogd to create symbolic link to my own file similar to /var/log/messages

When I check the file descriptors opened by rsyslogd, i see the process have created symbolic link to /var/log/messages and similar files, root@blr09> ll /proc/16635/fd total 0 lr-x------. 1 root root 64 Jan 4 08:29 0 -> /dev/null l-wx------. 1…
Nikhil
  • 576
  • 1
  • 11
  • 31
0
votes
2 answers

How do most daemon applications do their logging in linux?

How do most daemons do their logging these days. syslog or is there a newer logging facility that I'm not aware of? or custom? The reason I ask is that I started using syslog but noticed most of the daemon processes were not logging to the normal…
hookenz
  • 36,432
  • 45
  • 177
  • 286
0
votes
1 answer

(rsyslog) filter out facility?

Trying to remotely log all syslogs, but cron. I've tried the following statement which seem to work, but I'm not sure if this is officially supported, because I do not find any documentation on how to do this. *.*;cron.!* …
ThunderJack
  • 63
  • 1
  • 7
0
votes
1 answer

Why rsyslog logs the same log multiple times

SOLVED: Changed c == accept(... to c = accept(... One should use -Wall to see warning when == is used improperly. I configure syslog connection opening openlog("program", LOG_PID, LOG_USER); Server code: for (;;) { syslog(LOG_NOTICE, "before…
Bulat M.
  • 680
  • 9
  • 25
0
votes
1 answer

Can fluentd replace rsyslog in collecting server logs?

I want to collect the logs from openstack, for which i have rsyslog on the log server. This then forwards the logs to fluentd. However i want to know if the logs can directly be collected using fluentd instead of using rsyslog
NSP
  • 1,193
  • 4
  • 15
  • 26
1 2 3
…
48 49