Stack Overflow
Stack Overflow

Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
0
votes
0 answers

Rsyslog's filter is unable to filter specified logs

I have logs being forwarded to my syslog server, I have built a filter in rsyslog.conf file that should put the logs into a separate logfile if it contains "username". Unfortunately it doesn't seems to be working, the filter I use is: if…
Bash Noob
  • 53
  • 2
  • 10
0
votes
1 answer

Rsyslog filtering

How can i forward different app/service log messages from one server to a central rsyslog server ? for clarification : server1:swift(all in one) server2:Rsyslog swift log location :/var/log/swift/all/log(server1) sshd log…
Arup Barua
  • 51
  • 1
  • 2
  • 7
0
votes
1 answer

Logstash rsyslog + apache

I would like to use rsyslog to retrieve apache log and process them using Logstash Log are well received in rsyslog, and then in logstash, but I would like to extract the content of the apache logfile from the message part of rsyslog. For instance,…
tomsoft
  • 4,448
  • 5
  • 28
  • 35
0
votes
1 answer

Centos6.3 Rsyslog writes to both custom log and /var/log/messages

Centos6.3 running rsyslog-5.8.10-6.el6.x86_64 writes to both my custom log file and /var/log/messages. After making changes to my iptables files to log dropped packets : -N LOGGING -A INPUT -j LOGGING -A OUTPUT -j LOGGING -A LOGGING -m limit --limit…
NE1scott
  • 1
  • 1
0
votes
1 answer

Template to store Rsyslog logs with MongoDB

I am trying to insert the logs coming from RSyslog to a MongoDB database. The logs stored into MongoDB have to respect the following structure : { "_id" : ObjectId("55b8c845a671d907a0ab9e0b"), "receptionTime" : "2015-06-12 14:29:45", …
Félix Veysseyre
  • 259
  • 2
  • 16
0
votes
1 answer

Difference between Rsyslog and Packetbeat

While surfing through internet I came accross rsyslog term which is something like monitoring and logging tool. Fer points that I collected : 1.Multi-threading 2.TCP, SSL, TLS, RELP 3.MySQL, PostgreSQL, Oracle and more 4.Filter any part of syslog…
Shashank Vivek
  • 16,888
  • 8
  • 62
  • 104
0
votes
1 answer

How to change the directory rsyslogd uses?

I'm running an ubuntu instance and have limited space on the drive mounted on the / directory so I want to change where rsyslogd logs from /var/log to another directory, say /abc. I've tried changing the /etc/rsyslog.d/50-default.conf file to set…
Brian
  • 79
  • 12
0
votes
1 answer

RSYSLOG custom config for log filtering

I trying to filter out audispd log from /var/log/messages, audispd by defaults sending it log using "user.info" My current situation is that /etc/rsyslog.conf is shared within a few set of machine in the network so most of the custom configuration…
skelator
  • 13
  • 4
0
votes
0 answers

Timezone in PHP error log

My PHP error log has the wrong timezone listed. I have the correct timezone on my system as can be seen by typing the date command at the Debian command prompt. I have restarted rsyslogd by typing service rsyslog restart. I have even rebooted the…
kojow7
  • 10,308
  • 17
  • 80
  • 135
0
votes
1 answer

How to stop Rsys from sending log data

Hello i am relatively new to rsyslog, and i have a file stored here /etc/rsyslog.d/ to tell rsyslog to send log data. I now have enough data to analyze and would like to stop rsyslog from keep sending log data and waste my bandwidth. So the question…
Jeremy
  • 2,516
  • 8
  • 46
  • 80
0
votes
1 answer

Configure rsyslog to log all commands

I have a CentOS 6.6 and I want to configure rsyslog to log in /var/log/secure every command inserted by root or normal user.
antiks
  • 263
  • 5
  • 14
0
votes
1 answer

Display 2 different query results in table with Kibana

I'm trying to show logs from 2 different servers in Kibana. Here's picture: https://i.stack.imgur.com/fhgCq.png In first table I'd like to show logs about Server 1 and in table 2( on the right) logs from another Server. Is this even possible with…
user2488832
  • 33
  • 1
  • 6
0
votes
0 answers

C server using syslog doesn't log

Hi guys i am trying to make a daemon server that writes to syslog but i can't get it to work.. i have rsyslog installed and configured with facility local0.info /var/log/simple-server.log Some of my code: server.c …
Aristos Miliaressis
  • 25
  • 1
  • 6
0
votes
0 answers

Unable to get logs of application over rsyslog server

I used this template on my server to arrange logs by the client hostname: $template TmplAuth, "/var/log/%HOSTNAME%/%PROGRAMNAME%.log" and on client end: *.*@10.x.x.x:514 The problem is that the logs only consist of sshlog.cron logs and compiz…
anand
  • 741
  • 5
  • 11
0
votes
2 answers

dumping rsyslogd output to some file

I wish to dump the output of rsyslog(service) to some file at a selected location. Following is what I have tried : 1. Made changes to /etc/rsyslog.conf ################# #### MODULES #### ################# $ModLoad imfile $ModLoad omprog <-----…
Abhishek Choubey
  • 883
  • 6
  • 16
1 2 3
…
48 49