Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
4
votes
1 answer

Logging from Docker

I have a rails app running through docker. I bring up the app with docker-compose (config below). The whole app covers a mysql, redis, rails (including sidekiq workers), nginx (with react frontend) and a rsyslog server, which forwards all logs to…
martin
  • 3,289
  • 5
  • 22
  • 27
4
votes
1 answer

Multiline Log issue with rsyslog

I have an application server (Ubuntu 14.04) which has tomcat server running on top of it. This application server uses "rsyslog" which is configured to send the logs to a NXlog server (on Ubuntu 14.04). Rsyslog sends all its logs, including the…
Nishant Singh
  • 3,055
  • 11
  • 36
  • 74
4
votes
1 answer

Java app in Docker container does not log to syslog properly

My Goal I have a couple of different containers running inside a host. They all share a volume with each other's /dev/log socket. The host forwards these logs to a central logging server. All the other containers logs are showing up on the host's…
Monis Siddiqui
  • 138
  • 1
  • 1
  • 7
4
votes
1 answer

Latest syslog messages are delayed

My program outputs info to log files with this kind of commands: #include int main(void) { openlog(NULL, LOG_PID | LOG_PERROR, LOG_USER); /* ... */ syslog(LOG_INFO, "My message\n"); } I have also created the following file…
Gauthier
  • 40,309
  • 11
  • 63
  • 97
4
votes
3 answers

rsyslog sending badly encoded (corrupted?) data via tcp (receiving using logstash)

My rsyslog logs locally correctly, however I wanted to also receive the logs remotely, so I added the rule: *.* @@myIP:5141 to the end of my rsyslog.conf To receive the output, I'm running logstash with the configuration input { tcp { port => 5141…
Paradise
  • 1,408
  • 1
  • 14
  • 25
4
votes
4 answers

rsyslog - Property-based filtering not working

I almost hate to submit a topic for this, but I haven't been able to figure it out on my own. I'm running a Federoa 17 server, and I'm attempting to log dropped packets from iptables to a separate log file via rsyslog, but it keeps sending them to…
sirjames2004
  • 453
  • 2
  • 9
  • 18
4
votes
2 answers

Rsyslog central logging separate local logs

I have an Rsyslog central server where multiple machine send log files and these log files are stored by machine IP. $template DailyPerHostLogs,"/var/log/remote/%fromhost-ip%_%$YEAR%-%$MONTH%-%$DAY%.log" *.* -?DailyPerHostLogs This works fine…
user3158262
  • 109
  • 3
  • 6
4
votes
1 answer

How to increase php syslog maximum limit of 2048

Is there a simple way to log message greater than 2048 char using syslog? e.g raw response of a curl request. // msg is a string > 2048 char. This truncates message to 2048 chars syslog(LOG_DEBUG, msg);
Venkat Kotra
  • 10,413
  • 3
  • 49
  • 53
4
votes
1 answer

syslog not logging my program log entries

I tried logging from my C program, but I'm not finding anything entries from my program in /var/log/messages. There are other recent entries there. I'm using Fedora 17: Linux appliance.localdomain 3.5.3-1.fc17.i686 #1 SMP Wed Aug 29 19:25:38 UTC…
user994165
  • 9,146
  • 30
  • 98
  • 165
4
votes
1 answer

How to send structured data through Syslog?

I have structured data, key value pairs, that should be logged through syslog. In the end we want to see statistics about these metrics. How should we encode and then decode it on the reciever side? One option that we parse the message part of the…
VuesomeDev
  • 4,095
  • 2
  • 34
  • 44
4
votes
2 answers

My rsyslog.conf action doesn't trigger a Shell Execute

I'm using version 4.6.2 of rsyslog and have the following lines in /etc/rsyslog.conf: $template InputToScript,"/home/user/%msg%" if $msg contains "abcdefg" then ^touch;InputToScript I did a kill -1 where is the PID for rsyslogd Then I…
4
votes
2 answers

Efficient logging of stdin with rsyslog

Our environment: CentOS 5, which comes with Apache 2.2 and rsyslog 2.0.6 In order to send Apache 2.2 error log we followed instructions found on the here: http://wiki.rsyslog.com/index.php/Working_Apache_and_Rsyslog_configuration It works, but the…
Amos Shapira
4
votes
1 answer

How to change log level of Munin's munin-graph.log, munin-html.log, munin-limits.log and munin-update.log?

I've already changed the log level for "munin-node.log" in "/etc/munin/munin-node.conf" but now that everything is working 100%, how do I change the log level of "munin-graph.log", "munin-html.log", "munin-limits.log" and "munin-update.log"? They…
Hayden
  • 361
  • 4
  • 18
4
votes
5 answers

JBoss AS 7 configure logging to Syslog Appender

In a previous version of Jboss I was able to configure a SYSLOG appender with the following configuration in jboss-log4j.xml:
Jarred Olson
  • 3,075
  • 1
  • 19
  • 34
3
votes
1 answer

Is syslog a logging standard, or a protocol standard?

Syslog is a network protocol as described in RFC 5424 and RFC 3164 before that. -AND- Syslog is a standard in the *nix world. It's how you do logging. Even on just the local machine, UDP packets are never created. (Right?) The protocol, and the RFC,…
Jos van Egmond
  • 2,370
  • 15
  • 19