Questions tagged [syslog]
Syslog is a standard for logging program messages.
1,116
questions
0
votes
1
answer
10
views
Is there a syslog private enterprise number for custom/internal use?
So I recently was looking for a way to add extra metadata to logs and found out that syslog got me covered. I can add custom metadata using SD-ID feature like this:
[meta@1234 project="project-...
0
votes
0
answers
10
views
Has anyone used the following npm simple syslog server(https://www.npmjs.com/package/simple-syslog-server) library?
const Syslog = require('simple-syslog-server') ;
// Create our syslog server with the given transport
const options = {type: 'udp4'} ;
const address = '10.179.228.10' ; // Any
const port = 514 ;
...
0
votes
0
answers
20
views
Not able to configure syslog as data input on Port 514 on splunk kubernetes deployment [closed]
I have installed splunk on Azure kubernetes cluster by simply running the following 2 commands:
1.
kubectl apply -f https://github.com/splunk/splunk-operator/releases/download/1.1.0/splunk-operator-...
1
vote
0
answers
81
views
Is syslog.h still the way to log in modern C++?
syslog.h is the C library to write logs via syslog.
I saw this also in C++ code and wonder, if there is no C++ pendant for this and if it is still good style to include syslog.h in modern C++ projects....
-1
votes
0
answers
14
views
syslog server for IPv6 not identifying client host ip address properly
when i forward some specific log to another syslog server and trying to add fromhost-ip as prefix. there is a gap in-between the ipv6 address. like [2250: :8] instead of [2250::8].
for ipv4 it is ...
0
votes
1
answer
36
views
Syslog-NG: Possible to disable "keep_hostname" but enable for a specific filter?
Was wondering if this was possible at all. I am currently facing a situation where I have a legacy NG system with a number of sources integrated. We are working to slowly transition off of this ...
0
votes
0
answers
16
views
Sending log4j logs in stdout to fluentd container and search logs in splunk
I am trying to send logs(in stdout) from a pod to the fluentd container in it. I a pod i have 2 containers among which 1 is fluentd.
It works if i have a file in fluentd using the command:
@type tail.
...
0
votes
0
answers
24
views
May i know about how to print sysLog level alert into a file in java
The standard Java logging defines the following log levels:
WARNING
INFO
CONFIG
ERROR
This is incompatible to RFC 5424, because it lacks a ALERT level. Java lacks some additional log levels (critical ...
0
votes
0
answers
20
views
Send tcp logs to ports other than 514
I want to configure Syslog on ESXi to send logs to TCP port except 514.
I read some articles and VMware doc bus I don't understand whether it is possible or not.
Remote host to which syslog messages ...
0
votes
0
answers
8
views
log4J connection to syslog server causes startup errors when unavailable
I have a tomcat application using log4J to log to a syslog server. If the syslog server is unavailable because of network issues, etc. The application will not start logging an error. I suspect ...
2
votes
1
answer
48
views
log4j2.properties syslog is not wrking
My java application problem is that log4j2 syslog is written not in 'local1.log' but
'messages'.
My /etc/rsyslog.conf is configured 'local1.* /var/log/local1.log' in /etc/rsyslog.conf.
But One of ...
0
votes
1
answer
44
views
how to configure the fluentd daemonset syslog and forward everything?
Im trying to use this one, https://github.com/fluent/fluentd-kubernetes-daemonset/blob/master/fluentd-daemonset-syslog.yaml
Configured the syslog host, IP, protocol, applied it and only not so useful ...
0
votes
0
answers
26
views
Can logging to syslog from inside a container be visible to host's syslog?
I have a C application that uses syslog API for logging. This application is further running inside a docker container (FROM ubuntu 20.04)
I am trying to collect the logs from container using the ...
-1
votes
1
answer
77
views
Cannot find Logstash Index in Kibana
I am trying to setup a central Logging solution for Syslog-UDP Logging data with ELK stack in the docker environment.
I tried to setup a docker-compose.yml with the oss versions of the ELK-Stack. ...
0
votes
1
answer
50
views
How to order syslog data in csv by time
I have syslog data in csv file and I am trying to sort this data by time.
Actually I am able to sort my csv data with the following code.
import csv
import sys, datetime, time
import re
from openpyxl ...
0
votes
0
answers
14
views
Bitbake Syslog Conf output directories
I am trying to create a hidden directory on my new Linux image. From a few previous questions I am able to create a directory anywhere I like and send syslog logs to the directory. Previously I was ...
0
votes
0
answers
12
views
How to add syslog-cpp to meson.build file
I found this project cpp-syslog But I don't know how to add to my meson.build file (a tiny poc with a main.cpp) .
-4
votes
3
answers
57
views
Regex - Match username inside Brackets and prepend string
I've a syslog message like this:
03-25-2022 18:02:51 Local1.Notice 192.168.1.1 Mar 25 18:02:51 2022 192.168.1.1 stm[6358]: <501199> <NOTI> AP:AP01 <192.168.1.1 aa:bb:cc:dd:ee> ...
0
votes
0
answers
20
views
syslog-ng killing frequently leading to failure
syslog-ng keeps restarting multiple times in a day with below error. After few restarts it is failing. I don't see anylogs other than below logs in /var/log/messages. Can anyone please let me how to ...
1
vote
1
answer
41
views
How to remove the Header from syslog message while using log4j SyslogAppender in Java
I'm using the SyslogAppender of log4j version 2.17.1 (package org.apache.logging.log4j.core.appender) in order to send syslog messages.
the message are sent in the next format:
Mar 23 17:32:24 se-demo ...
0
votes
1
answer
22
views
supervising syslog-ng doesnot run in the background
Below is my syslog-ng unit script. I could see there is no process with supervising syslog-ng running. Whenever syslog-ng is failed, I had to restart manually . Can anyone please let me now if we can ...
1
vote
0
answers
46
views
C syslog Wrapper
I am trying to use syslog and a custom syslog.conf to create a logger for multiple modules. I have created a logging struct that allows a module to create a logger with custom settings
struct ...
0
votes
0
answers
9
views
Redirect logged information from one computer to a process in another?
My setup: I have one computer running an application, foo, and logging information using rsyslog to a file on another remote machine. The remote machine is running a different application, bar. bar ...
0
votes
0
answers
46
views
Haproxy SSL termination for syslog clients
I'm sorry to post this question but i've come to a limit regarding my project.
I have a Graylog Server which i'd like to use to collect the log events of remote servers i have to monitor.
...
0
votes
1
answer
98
views
send logs to a specific file in rsyslog server from rsyslog client
I am using rsyslog client to send freeradius logs to rsyslog server. Freeradius logs are stored in /var/log/radius.log in rsyslog client PC. I want to send it to rsyslog server PC. I am using the ...
0
votes
1
answer
85
views
Caddy Server Logs Outputting to Azure Log Analytics
We are running Caddy 2.4.6 in a Linux VMs and are trying to get the logs output into Azure Log Analytics via rsyslog. I have added the facilities for all log levels for syslog, user, local0 through ...
0
votes
0
answers
56
views
Python SIEM log collector hangs randomly
I am trying to troubleshoot a script for Mimecast's API. The script runs fine for the most part, but a few times, I have noticed that it stops pulling logs and generally appears to be a hung process. ...
0
votes
0
answers
20
views
How to send syslog to multi destination ip or port using log4j2?
One of my business requirements is to send data to multiple different servers through syslog. The list of IP addresses and ports of these servers receiving syslog is not fixed and may increase or ...
0
votes
1
answer
120
views
Error while trying to send logs with rsyslog without local storage
I'm trying to send logs into datadog using rsyslog. Ideally, I'm trying to do this without having the logs stored on the server hosting rsyslog. I've run into an error in my config that I haven't been ...
0
votes
0
answers
13
views
Does latest Dropwizard version have inbuilt tcp handling for Syslog?
I am working on Syslog where I want to send logs through tcp connection. Initially I had written custom SyslogAppender and SyslogTCPOututStream and it was working. I want to know if in the latest ...
1
vote
0
answers
153
views
filebeat cannot assign requested address
I am trying to read the syslog information by filebeat. I have my filebeat installed in docker. I get error message
ERROR [syslog] syslog/input.go:150 Error starting the servererrorlisten ...
-1
votes
2
answers
39
views
Crontab add message to syslog
I would like to add message after every step in crontab, something like:
15 23 * * * sudo ifconfig wlan0 down 2>&1 | logger -t WiFi_Down
15 9 * * * sudo ifconfig wlan0 up 2>&1 | logger -...
-1
votes
2
answers
132
views
Extract data from syslog with rsyslog
I'm actually working on Syslog Server in CentOS 7.
I would like to create a dynamic file from the user variable on the message part.
So, in my example, if the message part is :
30-Jan-2022 11:50:10 ...
0
votes
0
answers
39
views
mail.log postfix/smtpd command=
In mail.log/syslog, I have lines of the form
postfix/smtpd[58383]: disconnect from SomeSite.com[1.2.3.4] ehlo=1 quit=1 commands=2
I'd like to understand what commands=n means, I have searched many ...
0
votes
0
answers
28
views
syslog is running late and why syslog message are delay by 1hour
we are redirecting the container logs to syslog using the driver in our docker swarm deployment script. Writing to syslogs is getting delayed. If we directly access the docker logs (without writing to ...
0
votes
0
answers
50
views
How to add source path record in Fluentd?
My fluentd config:
<source>
@type syslog
port 5140
bind 0.0.0.0
tag rsyslog
</source>
<filter>
@type record_transformer
enable_ruby
<record>
hostname "#{...
0
votes
0
answers
48
views
odoo[1179109]: ValueError: Module mail not loaded or inexistent
My odoo was installed using the below URL.
https://www.vultr.com/docs/how-to-install-odoo-on-ubuntu-20-04/
After creating users below is the URL for odoo login.
http://erp.digiklug.com:8069/web/login
...
0
votes
1
answer
48
views
Program in docker logging with syslog does not generate log files
I am using a centos 7.9 for my docker. I'm running a C++ program in my docker image which writes logging via syslog.
However, I cannot find these log anywhere when I run it in docker. On my centos ...
0
votes
1
answer
263
views
QNX Slogger2 Vs Syslog
What is the difference between Slogger2 (System Logger) and Linux based syslog?
I understand the difference between journald and syslog. Slogger2 also gives a way to redirect syslog messages to ...
0
votes
0
answers
17
views
nscd doesn't point to custom log or /dev/null - still writes into /var/log/syslog
I don't know what to do, I still want to deny nscd spamming syslog full with unecessary messages like this:
# tail -f /var/log/syslog
Dec 17 18:26:20 ... nscd: 103435 monitoring directory `/etc` (2)
...
0
votes
1
answer
93
views
Is there a way to monitor syslog in realtime from a C++ application under Linux?
I'm on an ARM Linux board that has some USB issues when a USB 1.1 device is connected or disconnected to the USB 3.0 ports, in that case a kernel message is generated, something like:
[14720.301195@0]...
0
votes
2
answers
133
views
syslog-ng processing all messages after restart
i'm running syslog-ng inside docker, i'm collecting logs from local files, process them and then write to another logfile or send them to slack.
I noticed that whenever i need to updated syslog-ng ...
0
votes
1
answer
123
views
syslog-ng value mapping for variable sub-string
i'm running syslog-ng in container balabit/syslog-ng:3.35.1
i would like to do value mapping for value in vpnrd variable
Below is config for value mapping + example of CSV file
parser p_json {
...
1
vote
1
answer
41
views
syslog-ng return original value when mapping does not exists
i'm using syslog-ng for collecting json messages and send alarms to slack
there is parameter in json message which contains IP address of router from which I'm receiving the json message and I want to ...
0
votes
0
answers
35
views
linux: syslog not working after launching with execvp()
Mentioned case is working on ubuntu with kernel(5.4.0-91-generic) but it's not working on kernel(4.19.71)
I'm using launcher.cpp to launch the application after changing the
user-id and group-id,
but ...
0
votes
0
answers
42
views
Milliseconds not correct when data collected using fluentd
When I'm using fluentd as data collector with elasticsearch & graylog the milliseconds on the generated log is not correct.
When I view messages, the messages that occured in the same second are ...
0
votes
0
answers
42
views
Set appname in Syslog header with .NET
I need to set the appname in the syslog header, but it is not set.
Does anybody know how this can be done?
From my appsettings.json:
"Serilog": {
"WriteTo": [
{
&...
0
votes
0
answers
143
views
manage log rotation using syslog-ng
I would like to implement a log rotation strategy using syslog-ng and I want to improve myself on the best practices for doing so. I have to rotate the log files once a month. When an event occurs, my ...
1
vote
1
answer
90
views
How to use Syslog in Django REST framework?
I’m developing a Python Django REST API. Currently, I need to incorporate a logger to Syslog.
Do I need to just define the logger and Syslog handler in the Settings.py?
I’m relatively new to Django ...
0
votes
1
answer
310
views
Syslog RFC5424 Vs RFC6587
I was reading across the net, and I wasn't able to find what are the differences between those protocols when Syslog message is being sent, nor a proper example for how RFC6587 log messages look like. ...