Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [syslogd]

26 questions
5
votes
2 answers

How to check syslog.d is running

My syslog is running correctly but out of curiosity how to check that syslog daemon is running. Is there anyway I could check the status like apache root@server1:/etc# /etc/init.d/apache2 status Apache2 is running (pid 12894). I'm running Debian…
sg552
  • 389
  • 3
  • 4
  • 11
4
votes
2 answers

Properly Configured Rsyslog on CentOS

I'm trying to configure Rsyslog 5.8.10 on CentOS 6.4 to send Apache's error and access logs to a remote server. It's working, but I have a couple questions. UPDATE: A, B and C are the only ones pending an answer. A) I would like to use as few queues…
Gaia
  • 1,777
  • 4
  • 32
  • 58
3
votes
2 answers

Rewriting facility/severity in rsyslog v7 before shipping off to a remote collector

I have a machine "A" with a local rsyslogd, and a remote collector machine "B" elsewhere listening with its own syslog daemon and log processing engine. It all works great...except that there is one process on A that logs at local0.notice, which is…
AlwaysLearning
  • 129
  • 6
2
votes
2 answers

syslogd filtering not working on FreeBSD

I am failing to get filtering by program or facility working in FreeBSD syslogd. I added local6.debug /var/log/test.log !testd *.debug /var/log/test.log to my /etc/syslog.conf and restarted the syslog daemon. I then wrote…
snøreven
  • 165
  • 1
  • 9
2
votes
1 answer

Moving from syslog.conf to syslogng.conf

I'm moving a Solaris box from syslogd to syslog-ng, because the Solaris version of syslogd obliterates the original source hostname on the logs. I'm looking through the syslogng.conf documentation, but am not sure I understand it all fully. We…
coding_hero
  • 221
  • 3
  • 5
  • 11
2
votes
1 answer

Redirect all messages from dhcpd to its own log file?

I'd like to redirect all messages from dhcpd to their own log file, rather than having them appear in /var/log/messages. Here is the configuration on /etc/syslog.conf: !dhcpd *.* /var/log/dhcpd.log The messages are redirected to…
Dave
  • 143
  • 1
  • 7
2
votes
2 answers

How can I force syslog traffic to use TCP instead of UDP?

Centos 5.x I'd like to have my syslog traffic use TCP instead of UDP. Does the stock syslog daemon for CentOS support this? If so, where would I set that option? -M
Mike B
  • 11,570
  • 42
  • 106
  • 165
1
vote
3 answers

syslogd no such file or directory - OpenBSD 3.9

OK - long story short: I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get. Errors on screen: when logged in, console output on screen…
GoZippy
  • 511
  • 3
  • 5
1
vote
0 answers

Why does syslog create a user.log instead using syslog.log?

I have experienced something a bit weird for me. I have filebeat monitoring my rsyslog (syslog.log) file and sending it to my logstash. I have noticed that after restarting filebeat where syslog is running, syslogs creates a new file user.log under…
ndarkness
  • 193
  • 1
  • 7
1
vote
2 answers

Remote Logging with syslog

I have two machines running FreeBSD, bsdclient and bsdserver. I am trying to setup remote logging such that bsdclient sends all the logs to bsdserver. My syslog.conf on bsdclient goes like this *.* @bsdserver.domain.com On bsdserver, the…
suenda
  • 115
  • 2
  • 4
1
vote
3 answers

syslogd: Logfile format (not configuration format)

I'd like to parse logfiles. Is the logfile format of syslogd the same for all systems? On my system (Debian Lenny), it's: Mar 7 04:22:40 my-host-name ... (I'm not much interested in the ... part) Can I rely on this? And is there maybe some…
Chris Lercher
  • 3,982
  • 9
  • 34
  • 41
1
vote
0 answers

Large number of kernel messages 'testing the buffer'

My syslog shows hundreds of successive messages: ... Jun 4 09:18:21 www kernel: [55101.038066] testing the buffer Jun 4 09:18:21 www kernel: [55101.038181] testing the buffer Jun 4 09:18:21 www kernel: [55101.040872] testing the buffer ... Where…
andro
  • 121
  • 2
1
vote
1 answer

remote logging using syslogd - Ubuntu 18.04.2 LTS - just will not send

so, playing with centralized logging and i just cannot get syslogd to send the messages to a remote syslog server. background: syslog server is setup and working, tested with other devices sending logs into it. networking both server and client…
Lee Hill
  • 30
  • 7
1
vote
1 answer

How to restart rsyslog on alpine?

In my alpine 3.1..5 linux docker container, I installed rsyslog as: # apk add --no-cache rsyslog I am running rsyslogd as: # rm -f /var/run/rsyslogd.pid # rsyslogd How do I restart rsyslogd without restarting my container? I tried: # sudo service…
user674669
  • 159
  • 6
0
votes
0 answers

is there any way to filter in syslog (not rsyslog) such as programname?

I need to add filter in my syslogs. I know how to do in rsyslogs. But we need to add same logs in syslogs as well in legacy systems.Is there any way to do it? Corresponding rsyslog entries are: :msg, contains, "ABC" /var/log/abc.log :programname,…
sgupta
  • 101
  • 1
1
2