Stack Overflow
Stack Overflow

Questions tagged [rsyslog]

Rsyslog is enhanced syslogd with lot of enhanced features

Rsyslog is enhanced syslogd and supports among other things MYSQL, PostgreSQL, failover log destination etc. Features like encryption, failover destination, precise timestamps etc make it a ideal candidate for enterprise log management. It is available in both flavors: with support and community edition.

References:

729 questions
3
votes
2 answers

how to spoof hostname in syslog messages?

I am logging messages like this in perl - syslog ("LOG_INFO", "this is info"); syslog ("LOG_WARNING", "this is warning"); when I see these messages, I get this- Nov 15 20:20:47 ubuntu tag-0.0.2[13399]: this is info Nov 15 20:20:47 ubuntu…
user837208
  • 2,487
  • 7
  • 37
  • 54
3
votes
1 answer

capture journald properties with rsyslog

I am struggling on how to capture systemd-journald properties into rsyslog files. My setup ubuntu inside docker on arm (raspberrypi): FROM arm64v8/ubuntu:20.04 docker command (all subsequent actions taken inside running docker container) $ docker…
woodz
  • 737
  • 6
  • 13
3
votes
1 answer

Need guidance in delimiter for regex

Trying to send multiline Kafka log from RSYSLOG to FLuentd. (?\[.*?\]) (.*?) ((.|\n*)*) Here is the link: https://regex101.com/r/iFHyTi/1 But my regex is considering next timestamp pattern as a single line. Requirement is to stop before the…
Gautam
  • 95
  • 6
3
votes
1 answer

Django on AWS elastic beanstalk: failed to generate rsyslog file with error Procfile could not be parsed

I am trying to add a custom Procfile to my Django elastic beanstalk environment but I am receiving the following error during the deploy: 022/06/02 08:14:22.827519 [INFO] Generating rsyslog config from Procfile 2022/06/02 08:14:22.827557 [ERROR]…
Salvatore Avanzo
  • 2,656
  • 1
  • 21
  • 30
3
votes
1 answer

log4j2.properties syslog is not wrking

My java application problem is that log4j2 syslog is written not in 'local1.log' but 'messages'. My /etc/rsyslog.conf is configured 'local1.* /var/log/local1.log' in /etc/rsyslog.conf. But One of weired is when I removed…
gnr71
  • 31
  • 2
3
votes
1 answer

ssl encryption in rsyslog

could anyone give me hint where this problem is, I am unable to encrypt log files comming from my client machine to central log, i dont understand the reason, could i get any relevent information. (i can see unencrypted files, coming towards central…
tike
  • 548
  • 3
  • 12
  • 22
3
votes
1 answer

rsyslog stop command copies messages instead of moving

On Ubuntu 18.04 with rsyslogd 8.32.0, To move log entries from my service, named "mqtt433", I have added the following into /etc/rsyslog.d/50-default.conf: if $programname == 'mqtt433' then { action(type="omfile"…
Anton
  • 455
  • 6
  • 12
3
votes
1 answer

messages lost due to rate-limiting

We are testing the capacity of a Mail relay based on RHEL 7.6. We are observing issues when sending an important number of msgs (e.g.: ~1000 msgs in 60 seconds). While we have sent all the msgs and the recipient has received all the msgs, logs are…
Fdv
  • 385
  • 2
  • 5
  • 14
3
votes
3 answers

SysLogHandler messages grouped on one line on remote server

I am trying to use python logging module to log messages to a remote rsyslog server. The messages are received, but its concatenating the messages together on one line for each message. Here is an example of my code: to_syslog_priority: dict = { …
Craig
  • 2,286
  • 3
  • 24
  • 37
3
votes
1 answer

Rsyslog imfile error: no file name given

I am using rsyslog version 8.16.0 on ubuntu 16.04. Following is my configuration file : module(load="imfile") #needs to be done just once # File 1 input(type="imfile" mode="inotify" File="/var/log/application/hello.log" …
Salman Shaikh
  • 575
  • 1
  • 7
  • 24
3
votes
0 answers

How to configure an syslog TLS input in Graylog2

I have two servers, a production server and a monitoring server. On the monitoring server I have Graylog2 installed (version 2.3.2). Before I passed the logs between the two servers in UDP. With this config: Production server…
gspohu
  • 41
  • 1
  • 5
3
votes
1 answer

Scrambled output when constructing a syslog message

I was writing a program which could convert a standard syslog message that is already logged in the file, for eg: Mar 9 15:51:36 ldaptestserver slapd[392]: slap_global_control: unrecognized control: 1.3.6.1.4.1.42.2.27.8.5.1 to a syslog message…
scott
  • 1,557
  • 3
  • 15
  • 31
3
votes
1 answer

How to configure rsyslog template for Exception error for remote logging?

I'm using rsyslog to ship logs to a remote Logstash server, and the Logstash on that service expects input data in a json format. How can I configure an rsyslog template to json-ify a exception. For example, I want to send the following exception as…
Chris F
  • 14,337
  • 30
  • 94
  • 192
3
votes
1 answer

Change timezone to UTC in rsyslog configuration

Sample JSON Config Template: I want to change dateFormat into UTC to unify the TZ for different clients template(name="json-template" type="list") { constant(value="{") constant(value="\"@timestamp\":\"") property(name="timereported"…
Abhijeet
  • 139
  • 1
  • 2
  • 7
3
votes
1 answer

rsyslog filtering and forwarding

I'm trying to achieve filtering and forwarding using a rsyslog vm. When I use *.* @@192.168.1.100:514 It forwards all logs to that log server. What I need to do is filter out logs that contain 'testing' and 'flow' and also prevent logs from…
Harry
  • 33
  • 1
  • 1
  • 3
1 2 3
…
48 49