Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rsyslog]

rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.

rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.

It consists of an open source project with commercial addons such as the ability to log Windows events, as well as available support contracts.

667 questions
67
votes
4 answers

What is the difference between syslog, rsyslog and syslog-ng?

I am a bit confused in syslog, rsyslog and syslog-ng. From where can I get the source code for syslog()? Is there any difference between rsyslog and rsyslogd?
StackUser
  • 803
  • 1
  • 7
  • 7
66
votes
2 answers

How to restart rsyslog daemon on ubuntu

how can i restart rsyslog or rsyslogd on ubuntu 10 root@terminator:/etc/init.d# service rsyslog status rsyslog stop/waiting root@terminator:/etc/init.d# service rsyslog stop stop: Unknown instance: root@terminator:/etc/init.d# service rsyslog…
John
32
votes
5 answers

How to keep haproxy log messages out of /var/log/syslog

I set up haproxy logging via rsyslogd using the tips from this article, and everything seems to be working fine. The log files get the log messages. However, every log message from haproxy also shows up at /var/log/syslog. This means that once the…
itsadok
  • 1,839
  • 5
  • 21
  • 33
27
votes
2 answers

How to forward specific log file outside of /var/log with rsyslog to remote server?

How can I forward message from a specific log file like /www/myapp/log/test.log with rsyslog client to remote rsyslog server? This log file is outside of the directory /var/log.
Kevin Campion
  • 427
  • 2
  • 7
  • 15
27
votes
5 answers

How do I get rsyslogd to log a server's FQDN instead of it's short hostname?

I'm trying to implement a simple centralized syslog server using stock rsyslogd (4.2.0-2ubuntu8.1) on Ubuntu 10.04 LTS. At this point I have all my client nodes sending logs to the central server, but the clients are sending log messages which…
cwjohnston
  • 536
  • 1
  • 4
  • 8
23
votes
5 answers

rsyslog with logrotate: reload rsyslog vs copytruncate

I'm working on Ubuntu 14 with the default rsyslog and logrotate utility. In the default rsyslog logrotate /etc/logrotate.d/rsyslog config I see the following: /var/log/syslog { rotate 7 daily missingok notifempty …
Mattan
  • 333
  • 1
  • 2
  • 5
19
votes
2 answers

What does "-/filepath" ACTION mean in rsyslog configuration

I came across this one Debian Linux installation (6.0.6), and examining its /etc/rsyslog.conf, I see configuration lines like this: auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none -/var/log/syslog I can't find…
Pawel Veselov
  • 744
  • 8
  • 19
18
votes
4 answers

Haproxy not logging requests?

So, I configured Haproxy so the logging would go through rsyslog and, for now, be all dumped in one file. It's definetly logging, as I get those "starting" messages on startup, but no HTTP requests logging at all. What is wrong with my…
Silver Quettier
  • 503
  • 2
  • 6
  • 14
18
votes
4 answers

HAProxy logging to syslog

I installed HAProxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per this Debian repository selection tool. The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The setup is basically the…
Petah
  • 650
  • 2
  • 13
  • 24
18
votes
3 answers

Configuring Rsyslog To Stop The Logging Of Certain Messages

I want to stop rsyslog logging these messages. [168707.740364] TCP: Peer 192.168.100.1:46199/41503 unexpectedly shrunk window 2027330493:2027331431 (repaired) I tried this in the /etc/rsyslog.conf but the messages are still logged. if $msg contains…
Stephen
  • 191
  • 1
  • 2
  • 7
16
votes
1 answer

manually rotating logfile with rsyslogd

I want to force logfile rotation using logrotate -f /var/log/syslog, but it's only return tones of: error: syslog:1 unknown option 'May' -- ignoring line error: syslog:1 unexpected text I know that on this system rsyslogd is running. How to rotate…
kbec
  • 913
  • 1
  • 9
  • 10
13
votes
4 answers

Rsyslog is not working properly, it does not log anything

I'm running a Debian server and a couple of days ago my rsyslog started to behave very weird, the daemon is running but it doesn't seem to do anything. Many people use the system but I'm the only one with (legal) root access. I'm using the default…
Victor Henriquez
  • 243
  • 1
  • 3
  • 8
13
votes
3 answers

how to filter rsyslog messages by tags

I have several applications and scripts that I want to redirect the output to custom files. I launch those applications using command | logger -t TAG I would like to filter these messages based on their tags and redirect them to different files. I…
mistyrouge
  • 301
  • 1
  • 2
  • 8
12
votes
1 answer

How do I setup rsyslog to send all logs to multiple remote servers?

I am trying to make rsyslog to send all logs to 2 remote servers, but it seems rsyslog only sends to the secondary server if the first one fails. *.* @@server1 *.* @@server2 If I put the above in /etc/rsyslog.conf, server2 will not receive any logs…
Daniele Testa
  • 631
  • 4
  • 10
  • 18
11
votes
2 answers

how to prevent cron logs from registering in syslog?

I have separated my crontab logging into /var/log/cron.log by uncommenting the below line in /etc/syslog.conf, but it still writes to /var/log/syslog too! cron.* /var/log/cron.log How can i prevent it from writing…
shgnInc
  • 1,634
  • 3
  • 21
  • 29
1
2 3
…
44 45