Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
0
votes
1 answer

Rsyslog replace newline to
in message part

I am using rsyslog to relay events from a machine to Loggly (cloud log management). I have an application running on that machine that logs to the local rsyslog by using the SyslogAppender of log4net. However, since some of the events are…
Simon S.
  • 563
  • 4
  • 21
0
votes
1 answer

Centos 7 rsyslog not logging remote messages

I've setup a remote rsyslog server for testing but I can't seem to get it to log from a remote system. I have an app on my desktop (windows) called "Syslog Test Message Utility 1.0" which sends test syslog messages on UDP 514. I see the message…
stumped221
  • 89
  • 4
  • 18
0
votes
1 answer

Unsure how to approach rsyslog logging format

Basically, I want my logs to appear in the format /var/log/2014-03-01/192.168.3.2_SW0002 where 192.168.3.2_SW0002 is a file automatically generated by rsyslog. $template routerLogFile,"/etc/logs/**2014-03-01**/%fromhost-ip%_%HOSTNAME%" Currently I…
user
  • 493
  • 6
  • 13
0
votes
1 answer

Integrating external plugin with rsyslog

I am trying to write an external plugin for rsyslog in perl for my use. I am able to get basic skeleton from github but i am not able to get any info on how to integrate it with rsyslog setup. I read interface.md on github and it ask to read…
shivams
  • 2,597
  • 6
  • 25
  • 47
0
votes
1 answer

rsyslog taking huge memory

I am using rsyslog to send messages to remote machines over TCP. A java service is writing to a logger in syslog named local4. The memory sage starts from 1MB and grows till 4-5GB. I am not sure how to debug this issue and figure out what in Rsyslog…
mohit_d
  • 235
  • 2
  • 13
0
votes
1 answer

how to integrate 2 different server logs to splunk server?

i want to take various server logs and send it to the splunk server. is that possible? i assume it has to do something with the rysyslog.conf ... but I have no idea of how to do it?
user3597043
  • 37
  • 1
  • 1
  • 6
0
votes
1 answer

rsyslog stale file handler with catalina.out

Problem: After deploying a microservices as a war via AWS EBS Tomcat 7 container...noticed that the log rotation which occurs at UTC day boundary leaves a stale inode file. The log rotation is more of a copy n truncate, which causes a stale file…
0
votes
1 answer

How to receive nginx logs programmatically?

I want to display requests as they come in an nginx server to a java application. Nginx can redirect access_log/error_log to syslog. How can I receive syslog messages from Java ? Is there another way to receive the access_log and error_log from…
Stephan
  • 41,764
  • 65
  • 238
  • 329
0
votes
1 answer

How to integrate rsyslog, AWS ELB & Flume

I have been using a php script to write logs to rsyslog and then rsyslog send messages directly to flume(syslogtcp source) on a tcp port. Now as I am moving to AWS I want to introduce an ELB(Elastic Load Balancer) layer between rsyslog & flume…
mohit_d
  • 235
  • 2
  • 13
0
votes
1 answer

should rsyslog TLS configuration work after CA/machine certificate expiry?

I have done tls configuration between two nodes (client and server). i want to know what will happen if either one of the certificate ca.pem(CA certificate) or machine certificate get exipred. rsyslog communication will stop…
0
votes
3 answers

How to disable DNS hostname lookup in rsyslog?

How do I configure rsyslog to write raw IP addresses instead of DNS names in log files for remote hosts?
Babken Vardanyan
  • 14,090
  • 13
  • 68
  • 87
0
votes
1 answer

How to stop logs ( rsyslog ) for commands in linux?

I am using Linux system, when I run any command the command are getting logged, but not having root permissions I get following errors in my commands VD PLATFORM is : X14 KERNELARCH : arm chmod: changing permissions of …
pushE
  • 394
  • 3
  • 16
0
votes
3 answers

Add syslog handler in Laravel for paperTrail .

How could i link Laravel log files to PaperTrial ? According to this article : http://mattstauffer.co/blog/laravel-forge-logging-with-papertrail#step-4-add-a-syslog-handler I followed steps and reached to step 4 putting Syslog Monolog handler in the…
Yunis Hawwash
  • 98
  • 2
  • 13
0
votes
1 answer

Syslog open once or for each log

I'm using Syslog for the first time to log my C/C++ application. I want to know what is the berst practice, alwase open/close (with openlog and closelog) for each logging message, or open on the launch of the application and close at the end? Thanks
Dazul
  • 157
  • 9
0
votes
1 answer

50-default.conf entry meaning

I went through the rsyslog.d/50-default.conf file.. the entries in the files are like this. auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none -/var/log/syslog #cron.* /var/log/cron.log #daemon.* …
user3924676
  • 1
  • 1
  • 2