Stack Overflow
Stack Overflow

Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
0
votes
1 answer

Linux Rsyslogd Configuration

I need to modify a couple of things in the configuration of rsyslogd thus this gets me to this file: /etc/rsyslogd.conf. I want to make rule, more precisely a filter condition. I want to select all mesages of facility mail with the priority at least…
Dragos Rizescu
  • 3,380
  • 5
  • 31
  • 42
0
votes
1 answer

need systemd error loging document

With syslog error logging beign expired in some Linux distributions like arch Linux, I am looking for some way to log error with systemd but I couldn't find any documentation or resource about it. If you know about error logging with systemd please…
arastoo.s
  • 51
  • 1
  • 3
0
votes
1 answer

syslog: wrong programname in log file (#001)

I use rsyslog and want to log some actions from my application. The logging works fine and the log file will be created properly. I formatted the output because I would like to see the programname: rsyslog.conf: $template usermsg,"%TIMESTAMP%…
MeJ
  • 1,088
  • 10
  • 18
0
votes
1 answer

Where redirected rsyslog is saved to?

I have connected two of my computers to form a network, with only an ethernet cable between them. They are both Ubuntu 12.04, and can ping each other without a problem. For the logs, I want to forward IP address 10.0.0.1 and the want I want to send…
Mustafa Doe
  • 125
  • 1
  • 2
  • 7
0
votes
1 answer

rsyslog "if" statement doesn't work

I have the following statement in my /etc/rsyslog.conf: # This one is the template to generate the log filename dynamically $template DynFile,"/var/log/proxy/%$year%/%$month%/%$now%.log" if $fromhost-ip == '192.168.1.1' then *.* ?DynFile The idea…
XorOrNor
  • 8,868
  • 12
  • 48
  • 81
0
votes
1 answer

Rsyslog search and replace output

I've been scouring through the rsyslog documentation for a way to anonymize mysql log data by removed quoted strings. I've successfully managed to detect strings with sensitive data using the :contains property but I can't seem to find a way to…
A23
  • 1,596
  • 2
  • 15
  • 31
0
votes
2 answers

rsyslogd issues , logged with openlog () but logs going to /var/log/messages

i have a c program the code is setlogmask (LOG_UPTO (LOG_NOTICE)); openlog ("thelog", LOG_CONS | LOG_PID | LOG_NDELAY, LOG_LOCAL1); syslog (LOG_NOTICE, "thelog : started by User %d", getuid ()); syslog (LOG_INFO, "thelog: an info is logging"); …
Kajal
  • 223
  • 4
  • 15
0
votes
0 answers

PHP: LOCAL_LOG0 isn't recognized

I am working on Ubuntu (it use rsyslog), and I need to custom log some info with PHP. Here is my code: openlog("mywebsite", LOG_PID | LOG_PERROR, LOG_LOCAL2); syslog(LOG_WARNING, "mywebsite: 1000th visitor !"); closelog(); and I defined in…
Pierre Lebon
  • 445
  • 1
  • 5
  • 12
0
votes
1 answer

Ellipsis in remote rsyslog output

I have a rsyslog daemon running on a server receiving and aggregating messages from a number of other servers. Occasionally, I see line written which looks like the start of a message, an ellipsis(...), and the end of another, different, message.…
Michael Rutherfurd
  • 13,815
  • 5
  • 29
  • 40
0
votes
1 answer

Can we change the log message format in sysklogd (similar to creating templates in rsyslog)

I have to send data from rsyslog in a format like this Eg: fac:kern HELLO pri:info HELLO May 5 14:06:31 nitish-VirtualBox kernel: Kernel logging (proc) stopped. So i created a new conf file called "my.conf" in /etc/rsyslog.d/ and added the…
Nitish P
  • 43
  • 9
0
votes
1 answer

syslog.conf configuration to log only into a custom log file,

I am using syslog in my application, I have created a rule in syslog.conf file to log data from my application in to specific file. But it is also writing in to the standard syslog file, i dont want that. Can anybody please tell me to how to make…
fkhan
  • 1
  • 1
0
votes
2 answers

rsyslog config with both "$msg contains" and "$fromhost-ip startswith"

can i use the statement both "$msg contains" and "$fromhost-ip startswith" in rsyslog config? when i use the follow for rsyslog config, it work! if $msg contains 'src_port=6699' then -?DynFileA & ~ if $fromhost-ip startswith '10.10.10.1' then…
alvin
  • 291
  • 1
  • 4
  • 5
0
votes
1 answer

Rsyslog filter option

I configured my system to put syslog to a remote machine. The logging is heavy and I am running out of memory. so I want to filter it based on priority for example log only error message. I see some of the option in rsyslog website…
user2265423
  • 1
  • 1
0
votes
1 answer

Heroku log drain performance

I am currently trying to figure out why a relative simple app I have on Heroku is (sometimes) taking very long to respond. One of the things I am looking into is the log drain: apps write to stdout, which Heroku collects and which you can view (e.g.…
Nitzan Shaked
  • 13,460
  • 5
  • 45
  • 54
0
votes
1 answer

how i grep for certain log lines

I have the following logs (removed unnecessary info) : Feb 18 11:38:54 Kingston dhcpd: DHCPACK Feb 18 11:39:01 duxbury /USR/SBIN/CRON[27892]: Feb 18 17:39:01 ruby /USR/SBIN/CRON[13080]: How Can I grep for a server name (kingston, ruby or duxbury)…
lacrosse1991
  • 2,972
  • 7
  • 38
  • 47
1 2 3
…
48 49