Questions tagged [syslogd]
26 questions
5
votes
2 answers
How to check syslog.d is running
My syslog is running correctly but out of curiosity how to check that syslog daemon is running. Is there anyway I could check the status like apache
root@server1:/etc# /etc/init.d/apache2 status
Apache2 is running (pid 12894).
I'm running Debian…
![](../../users/profiles/109483.webp)
sg552
- 389
- 3
- 4
- 11
4
votes
2 answers
Properly Configured Rsyslog on CentOS
I'm trying to configure Rsyslog 5.8.10 on CentOS 6.4 to send Apache's error and access logs to a remote server. It's working, but I have a couple questions.
UPDATE: A, B and C are the only ones pending an answer.
A) I would like to use as few queues…
![](../../users/profiles/34560.webp)
Gaia
- 1,777
- 4
- 32
- 58
3
votes
2 answers
Rewriting facility/severity in rsyslog v7 before shipping off to a remote collector
I have a machine "A" with a local rsyslogd, and a remote collector machine "B" elsewhere listening with its own syslog daemon and log processing engine. It all works great...except that there is one process on A that logs at local0.notice, which is…
![](../../users/profiles/128844.webp)
AlwaysLearning
- 129
- 6
2
votes
2 answers
syslogd filtering not working on FreeBSD
I am failing to get filtering by program or facility working in FreeBSD syslogd.
I added
local6.debug /var/log/test.log
!testd
*.debug /var/log/test.log
to my /etc/syslog.conf and restarted the syslog daemon.
I then wrote…
![](../../users/profiles/147066.webp)
snøreven
- 165
- 1
- 9
2
votes
1 answer
Moving from syslog.conf to syslogng.conf
I'm moving a Solaris box from syslogd to syslog-ng, because the Solaris version of syslogd obliterates the original source hostname on the logs. I'm looking through the syslogng.conf documentation, but am not sure I understand it all fully. We…
![](../../users/profiles/106475.webp)
coding_hero
- 221
- 3
- 5
- 11
2
votes
1 answer
Redirect all messages from dhcpd to its own log file?
I'd like to redirect all messages from dhcpd to their own log file, rather than having them appear in /var/log/messages.
Here is the configuration on /etc/syslog.conf:
!dhcpd
*.* /var/log/dhcpd.log
The messages are redirected to…
![](../../users/profiles/69252.webp)
Dave
- 143
- 1
- 7
2
votes
2 answers
How can I force syslog traffic to use TCP instead of UDP?
Centos 5.x
I'd like to have my syslog traffic use TCP instead of UDP.
Does the stock syslog daemon for CentOS support this? If so, where would I set that option?
-M
![](../../users/profiles/21875.webp)
Mike B
- 11,570
- 42
- 106
- 165
1
vote
3 answers
syslogd no such file or directory - OpenBSD 3.9
OK - long story short:
I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get.
Errors on screen: when logged in, console output on screen…
![](../../users/profiles/402011.webp)
GoZippy
- 511
- 3
- 5
1
vote
0 answers
Why does syslog create a user.log instead using syslog.log?
I have experienced something a bit weird for me. I have filebeat monitoring my rsyslog (syslog.log) file and sending it to my logstash.
I have noticed that after restarting filebeat where syslog is running, syslogs creates a new file user.log under…
![](../../users/profiles/239833.webp)
ndarkness
- 193
- 1
- 7
1
vote
2 answers
Remote Logging with syslog
I have two machines running FreeBSD, bsdclient and bsdserver. I am trying to setup remote logging such that bsdclient sends all the logs to bsdserver. My syslog.conf on bsdclient goes like this
*.* @bsdserver.domain.com
On bsdserver, the…
![](../../users/profiles/109650.webp)
suenda
- 115
- 2
- 4
1
vote
3 answers
syslogd: Logfile format (not configuration format)
I'd like to parse logfiles. Is the logfile format of syslogd the same for all systems? On my system (Debian Lenny), it's:
Mar 7 04:22:40 my-host-name ...
(I'm not much interested in the ... part)
Can I rely on this? And is there maybe some…
![](../../users/profiles/37454.webp)
Chris Lercher
- 3,982
- 9
- 34
- 41
1
vote
0 answers
Large number of kernel messages 'testing the buffer'
My syslog shows hundreds of successive messages:
...
Jun 4 09:18:21 www kernel: [55101.038066] testing the buffer
Jun 4 09:18:21 www kernel: [55101.038181] testing the buffer
Jun 4 09:18:21 www kernel: [55101.040872] testing the buffer
...
Where…
![](../../users/profiles/350139.webp)
andro
- 121
- 2
1
vote
1 answer
remote logging using syslogd - Ubuntu 18.04.2 LTS - just will not send
so, playing with centralized logging and i just cannot get syslogd to send the messages to a remote syslog server.
background:
syslog server is setup and working, tested with other devices sending logs into it.
networking both server and client…
![](../../users/profiles/415564.webp)
Lee Hill
- 30
- 7
1
vote
1 answer
How to restart rsyslog on alpine?
In my alpine 3.1..5 linux docker container, I installed rsyslog as:
# apk add --no-cache rsyslog
I am running rsyslogd as:
# rm -f /var/run/rsyslogd.pid
# rsyslogd
How do I restart rsyslogd without restarting my container? I tried:
# sudo service…
![](../../users/profiles/126800.webp)
user674669
- 159
- 6
0
votes
0 answers
is there any way to filter in syslog (not rsyslog) such as programname?
I need to add filter in my syslogs. I know how to do in rsyslogs. But we need to add same logs in syslogs as well in legacy systems.Is there any way to do it?
Corresponding rsyslog entries are:
:msg, contains, "ABC" /var/log/abc.log
:programname,…
![](../../users/profiles/483716.webp)
sgupta
- 101
- 1