Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
-1
votes
1 answer

Forward custom path logs via rsyslog

I have a mountpoint on my server where logs are getting pushed via application in a log file. I have created a custom file in /etc/rsyslog.d/xyz.conf. Below is the configuration of the file. $ModLoad imfile $InputFilePollInterval 10 …
-1
votes
1 answer

How to send haproxy info log to rsyslog via unix sock?

Hi i'm trying to config haproxy/rsyslog so that ONLY haproxy info log is sent to ryslog via unix sock. Here my config: haproxy config frontend MY_FRONT_END log 127.0.0.1 /var/log/haproxy/dev/log info bind *:12080 default_backend…
jAckOdE
  • 2,402
  • 8
  • 37
  • 67
-1
votes
1 answer

How to send additional parameters from syslog to logstash like message or some addtional name

I want to send additional parameters like message from syslog in omfwd format and also need to know what filter i can set on logstash to read this additional parameter Syslog configuration: ..... action(type="omfwd" Target="1.1.1.1" Port="1234"…
-1
votes
1 answer

Issues with rsyslog configuration

I'm trying to config a RSYSLOG server to receive logs from my other machine, by having my conf file inside /etc/rsyslog.d/my.conf file: my.conf source s_net { udp(ip(192.168.0.1) port(514)); }; filter VM01{ host( "192.168.0.2" ); }; destination…
D.P.
  • 73
  • 1
  • 1
  • 7
-1
votes
1 answer

Syslog server not displaying sonic wall firewall logs

We have configured syslog in sonic wall firewal... in firewall packets are forwarding to syslog server that is centos but in the syslog server we are unable to findout where the logs have been stored.
karthik sl17
  • 19
  • 1
  • 7
-1
votes
1 answer

HAProxy and Keepalived for rsyslog load balance

I want to make use of HAProxy and Keepalived for rsyslog load balancing. Is it possible to install HAProxy and Keepalived on the same host where the rsyslog server is running? Reason being i only have 2 servers and i need to achieve load balancing…
IanCool
  • 1
  • 3
-1
votes
3 answers

Enable Rsyslog with TLS to Graylog2

My problem is that I cannot get logs from my remote app to log to a Graylog2 input using TLS. The remote app was logging just fine before I attempted to enable TLS with self-signed certs so I am pretty sure I just have a config problem Here is some…
battibatch
  • 53
  • 8
-1
votes
1 answer

What is causing my rsyslog timezone offset and / or time to be incorrect?

I have a central logging server running rsyslog 7.x on RHEL 6 The logs are coming in with a UTC time but an EST offset for a device. Here are some relevant configs. $template TEMPLATE_NAME,"%TIMESTAMP:::date-rfc3339% %fromhost%…
Jlom84
  • 3
  • 4
-1
votes
2 answers

how to send only specific files to remote server using rsyslog

I am new to rsyslog. I have multiple servers(rsyslog servers) sending syslog messages to a remote server(syslog-ng server). Right now, I am sending everything to the remote server. I want to filter out and send logs from specific files to the remote…
Meet101
  • 711
  • 4
  • 18
  • 35
-1
votes
1 answer

syslog service restart takes too much time in centos

In my system rsyslog service running, after change the rsyslog config I need to restart rsyslog service, but sometimes it requires too much time (around 1.30 min 1) to restart service. (TLS connection for sending syslog messages) rsyslog.conf file…
Mangesh Auti
  • 1,123
  • 1
  • 7
  • 12
-1
votes
1 answer

Dockerfile rsyslog

I have implemented a dockerfile to have a postfix that logs using rsyslog, but it raises an error while running. Output Error: tail: cannot open '/var/log/mail.log' for reading: No such file or directory tail: no files remaining Here is my…
MWA
  • 51
  • 2
  • 11
-1
votes
1 answer

Rsyslog error messages RHEL 7

We are facing many issues regarding journal error messages and we want to know how to keep messages related to system in /var/log/messages and delete other messages?
mokazo
  • 1
-1
votes
1 answer

syslog NG not starting up when specifying an ip address but works as a catch all and write to file setup

I am trying to setup a syslog NG server where i could collect all the logs. now ive managed to create the settings where the server will collect all the logs from all the servers and write it to a single file. but i was wondering if its possible to…
-1
votes
1 answer

No logs for Postfix in Docker with rsyslog?

I'm building a Docker container from debian:jessie. I've installed rsyslog this normally causes /var/log/mail.log to be created. However after running some commands with postfix I look in /var/log/ and can't find anything related to mail. Is there a…
Philip Kirkbride
  • 21,381
  • 38
  • 125
  • 225
-1
votes
1 answer

RSYSLOG from Linux server to Windows machine

I have my application server running in a Linux server which generates application specific logs. I want these logs to be captured in a different machine. Previously I used RSYSLOG to capture these logs in another Linux server. Now I want these logs…
Venkat
  • 19
  • 2
1 2 3
48
49