Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [rsyslog]

rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.

rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.

It consists of an open source project with commercial addons such as the ability to log Windows events, as well as available support contracts.

684 questions
71
votes
2 answers

How to restart rsyslog daemon on ubuntu

how can i restart rsyslog or rsyslogd on ubuntu 10 root@terminator:/etc/init.d# service rsyslog status rsyslog stop/waiting root@terminator:/etc/init.d# service rsyslog stop stop: Unknown instance: root@terminator:/etc/init.d# service rsyslog…
John
19
votes
4 answers

Configuring Rsyslog To Stop The Logging Of Certain Messages

I want to stop rsyslog logging these messages. [168707.740364] TCP: Peer 192.168.100.1:46199/41503 unexpectedly shrunk window 2027330493:2027331431 (repaired) I tried this in the /etc/rsyslog.conf but the messages are still logged. if $msg contains…
Stephen
  • 201
14
votes
4 answers

Rsyslog is not working properly, it does not log anything

I'm running a Debian server and a couple of days ago my rsyslog started to behave very weird, the daemon is running but it doesn't seem to do anything. Many people use the system but I'm the only one with (legal) root access. I'm using the default…
Victor Henriquez
  • 263
7
votes
1 answer

Proper way to reload rsyslog with a config file for a custom application

I want to log my app so that it writes its log into its own log file. I create the log file and save it under /etc/rsyslog.dbut my app doesn't create/write to the designated file. However, once I reload rsyslog, there are log entries the next time…
sdot257
  • 3,069
7
votes
3 answers

kernel.log stays empty: “rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.”

I'm on a VPS (Ubuntu 14.04.2 LTS, Kernel 3.13.0-042stab094.8, rsyslog 7.4.4-1ubuntu2.5) and kernel.log stays empty with only this line: rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted. The server was preconfigured…
Felix
  • 81
  • 1
  • 1
  • 3
6
votes
2 answers

rsyslog does not discard messages

I have the following rsyslog.conf: $PreserveFQDN on # rsyslog v5 configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html #### MODULES…
Iokanaan Iokan
  • 185
6
votes
3 answers

rsyslogd not monitoring all files

So.. I've installed Logstash, and instead of using the logstash shipper (because it needs the JVM and is generally massive), I'm using rsyslogd with the following configuration. # Use traditional timestamp format $ActionFileDefaultTemplate…
Tom O'Connor
  • 27,560
4
votes
0 answers

Rsyslog not logging after logrotate

I am using rsyslog and have a number of network devices sending their logs to this server. Rsyslog then splits each out device's logs into "devicename.log". Via this: $template…
Daniel Hood
  • 73
  • 4
4
votes
0 answers

rsyslog: Logs on local0 only on restart of rsyslogd

I have configured rsyslog.conf such that my program's log get logged in local0 facility. I have prevented logging in messages as well. *.info;mail.none;authpriv.none;cron.none;local0.none /var/log/messages local0.* …
Prabhu
  • 205
4
votes
1 answer

rSyslog and short hostname

I'm working with rsyslog through multiple hops. What I want is the following, I do not want the short hostname in the msg I only want the IP. So the server sending the msg I do not want it to add its short hostname to the message being sent I only…
user52297
  • 41
3
votes
1 answer

global configuration rsyslog using RainerScript how to?

Right now i have this in my rsyslog.conf file. /* GLOBAL DIRECTIVES */ # Global umask for all actions $umask 0022 # Set the default permissions for all log files. module(load="buildin:omfile" # To enable high precision timestamps, use the…
serine
  • 33
3
votes
1 answer

Suppress logging rsyslog boot messages in my message file

I have rsyslog installed and I am listening to a log stream from a device. The problem I'm having is that before I start saving the device's own log lines, some lines are generated that correspond to the rsyslog itself. Someone can tell me how to…
xav
  • 153
3
votes
1 answer

remote rsyslog client/server issue

I only want rsyslog to send the logs to the centralized rsyslog server but it is sending them locally as well. This is for legal reasons, the servers will not have a logs directory, only the centralized rsyslog server will have logs. I thought by …
BioRod
  • 303
3
votes
2 answers

syslog message format question

is there a way with rsyslog or syslog-ng to allow tab delimited messages? I'm currently using rsyslog and the c syslog() function to generate syslog messages from within my app. The problem is that I use \t and they get translated into #011 when I…
razor
2
votes
1 answer

can the log.file of rsyslog impstats module be limited by size?

I am using rsyslog 8.2.0, and logging rsyslog's own impstats output to a file. I could not find reference to it - is it possible to limit its size? It could get quite large in a system that runs for a long time...
Neomi
  • 23
  • 3
1
2 3 4 5 6 7