All,
After quite a bit of trail and error I managed to get log collection
working. Here are the commands for /etc/syslog-ng/syslog-ng.conf:
source s_net { tcp(ip(10.0.0.1) port(514) max-connections (5000));
udp(ip(10.0.0.1) port(514)); };
destination cisco-remote { file("/var/log/cisco.log"); };
On Sun, Apr 13, 2025 at 11:59 PM Timothy M Butterworth <
timothy.m.butterwo...@gmail.com> wrote:
>
>
> On Sun, Apr 13, 2025 at 11:00 PM Timothy M Butterworth <
> timothy.m.butterwo...@gmail.com> wrote:
>
>>
>>
>> On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth <
>> timothy.m.butterwo...@gma
On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth <
timothy.m.butterwo...@gmail.com> wrote:
> All,
>
> I modified /etc/syslog-ng/syslog-ng.conf to the following:
>
>
> # Sources
>
> # Add the following line
> source s_net { tcp(ip(0.0.0.0) por
On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth <
timothy.m.butterwo...@gmail.com> wrote:
>
>
> On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth <
> timothy.m.butterwo...@gmail.com> wrote:
>
>> All,
>>
>> I modified /etc/syslog-ng/syslog-ng.conf to the following:
>>
>> ###
On Sun, Apr 13, 2025 at 11:00 PM Timothy M Butterworth <
timothy.m.butterwo...@gmail.com> wrote:
>
>
> On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth <
> timothy.m.butterwo...@gmail.com> wrote:
>
>>
>>
>> On Sun, Apr 13, 2025 at 10:31 PM Timothy M Butterworth <
>> timothy.m.butterwo...@gma
Hi everyone and for people dropping by having the same issue.
The problem is *solved* \o/
The issue was: missing /run/systemd/journal/socket
What solved the problem:
- apt-get install --reinstall systemd systemd-sysv libsystemd0
dbus-user-session
- /run/systemd/journal/socket and /run/sy
> I've tried they sent me back here :/
>
> Le 02/02/2023 à 17:06, debian-u...@howorth.org.uk a écrit :
> >> On 01/02/2023 21:48, Freyja wrote:
> >>> Instead of just creating the folders, I've reinstalled some
> >>> packages:
> >> I would consider complete reinstall (install from scratch). It m
I need to look deeper in your recommendations, I will try them as soon
as I can.
Le 02/02/2023 à 17:28, songbird a écrit :
debian-u...@howorth.org.uk wrote:
...
Maybe it's worth asking on the systemd-devel mailing list?
did you reinstall rsyslog? did you purge the configs for it
(back th
I've tried they sent me back here :/
Le 02/02/2023 à 17:06, debian-u...@howorth.org.uk a écrit :
On 01/02/2023 21:48, Freyja wrote:
Instead of just creating the folders, I've reinstalled some
packages:
I would consider complete reinstall (install from scratch). It may be
faster even for a pers
Hi,
Both are installed but when I try to remove them it want to remove too
many packages :/
--
❯ dpkg -l |grep selinux
ii libselinux1:amd64
3.1-3 amd64 SELinux
runtime shared libraries
--
--
❯ apt-get remove libselinux1
Reading package list
Are you using SELinux or AppApparmor ?
Have you tried disabling it?
OpenPGP_signature
Description: OpenPGP digital signature
debian-u...@howorth.org.uk wrote:
...
> Maybe it's worth asking on the systemd-devel mailing list?
did you reinstall rsyslog? did you purge the configs for it
(back them up if needed)? when i remove a package i have been
having troubles with i often purge it instead of uninstalling
it.
you
> On 01/02/2023 21:48, Freyja wrote:
> > Instead of just creating the folders, I've reinstalled some
> > packages:
>
> I would consider complete reinstall (install from scratch). It may be
> faster even for a person having experience with systemd
> troubleshooting. Something low level is affect
Max Nikulin wrote:
> On 01/02/2023 21:48, Freyja wrote:
>> Instead of just creating the folders, I've reinstalled some packages:
>
> I would consider complete reinstall (install from scratch). It may be
> faster even for a person having experience with systemd troubleshooting.
> Something low lev
This is only a solution I'll look at as last resort.
There is too much work on that server.
But I agree it's something I was already thought of.
But we are not on Windows there, we should be able to do something.
The only time I had to do this is because dpkg was totally broken for an
unknown r
Deleted the folder, restarted and back to square 1.
--
❯ systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
● dbus.socket loaded failed failed D-Bus System
Message Bus Socket
● syslog.socket loaded failed failed Syslog Soc
On Thu, Feb 02, 2023 at 02:27:33PM +0100, Freyja wrote:
> This [reinstalling] is only a solution I'll look at as last resort.
> There is too much work on that server.
>
> But I agree it's something I was already thought of.
>
> But we are not on Windows there, we should be able to do something.
This is only a solution I'll look at as last resort.
There is too much work on that server.
But I agree it's something I was already thought of.
But we are not on Windows there, we should be able to do something.
The only time I had to do this is because dpkg was totally broken for an
unknown r
On 01/02/2023 21:48, Freyja wrote:
Instead of just creating the folders, I've reinstalled some packages:
I would consider complete reinstall (install from scratch). It may be
faster even for a person having experience with systemd troubleshooting.
Something low level is affected.
However I
Freyja wrote:
...
> However journalctl still stucks on 24th Oct:
> --
> ❯ journalctl -b
> -- Journal begins at Sun 2022-10-23 19:55:11 CEST, ends at Mon
> 2022-10-24 14:14:33 CEST. --
> -- No entries --
if you are not concerned about keeping the last journals for
any reason i would remove the
On Wed, Feb 01, 2023 at 03:39:05PM +0100, Freyja wrote:
> But I've found that some processes were complaining that selinux filesystem
> was not mounted.
> I know I've disabled apparmor and selinux in the past because too many
> processes were blocked by them
I don't know much about SELinux. If t
Ok,
Instead of just creating the folders, I've reinstalled some packages:
--
❯ apt-get install --reinstall systemd systemd-sysv libsystemd0
dbus-user-session
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
0 upgraded, 0 newly installed, 4 reins
I don't remember all the steps I've made.
I tried so many things.
But I've found that some processes were complaining that selinux
filesystem was not mounted.
Mounted the filesystem with the command "cat /etc/systemd/system.conf"
and it helped starting some process.
That time, even if the fil
On Wed, 1 Feb 2023 13:26:58 +0100
Freyja wrote:
> For /run/systemd/journal/socket this is another story.
> The folder journal does not exist at all.
Well, that could be a problem. On one of my computers:
root@jhegaala:~# ll /run/systemd/journal/socket
srw-rw-rw- 1 root root 0 Jan 25 09:55 /run/
On Thu, 2 Feb 2023 at 00:07, Freyja wrote:
> I've already tried to solve this issue in December with some success
Hi, could you describe in detail what you did?
Can you also post the output of:
cat /etc/systemd/system.conf
Also, a small thing I happened to notice:
> root in /var/log
> ❯ ls
There is an interesting part: I've already tried to solve this issue in
December with some success except for 2 systemd services (udevd-control
& udevd-kernel).
It stopped again working the 25th of december.
--
I've found a journal related to 24th December in /var/log/journal:
root in /var/log
Hi greg,
--
❯ df /run
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 1629236 3732 1625504 1% /run
--
For /run/systemd/journal/socket this is another story.
The folder journal does not exist at all.
--
❯ ls -la /run/systemd/
total 0
drwxr-xr-x 17 root r
On Wed, Feb 01, 2023 at 11:15:58AM +0100, deb...@sioban.net wrote:
> "journalctl -e" ends the 24th of October.
> ❯ journalctl -b
> -- Journal begins at Sun 2022-10-23 19:55:11 CEST, ends at Mon 2022-10-24
> 14:14:33 CEST. --
> -- No entries --
> ❯ systemctl start systemd-journald.service
> A depe
Hi max,
"journalctl -e" ends the 24th of October.
--
Oct 24 14:14:33 shax systemd[1]: Stopped Update UTMP about System
Boot/Shutdown.
Oct 24 14:14:33 shax systemd[1]: systemd-tmpfiles-setup.service: Succeeded.
Oct 24 14:14:33 shax systemd[1]: Stopped Create Volatile Files and
Directories.
Oct
On 31/01/2023 16:57, deb...@sioban.net wrote:
I'm contacting you because I'm clueless on what's happening.
Basically my issue is I don't have logs anymore :/
...
> systemctl start rsyslog.service
A dependency job for rsyslog.service failed. See 'journalctl -xe' for
details.
❯systemctl --fa
Le 31/01/2023 à 19:29, Greg Wooledge a écrit :
Requires=syslog.socket
This is the only part of it that looks like a "dependency". Maybe
this is the thing that's breaking? You can try
"systemctl status syslog.socket" and see if it gives anything useful.
Here is the result:
❯ systemctl sta
On Tue, Jan 31, 2023 at 05:22:23PM +0100, Sioban wrote:
> Here is the output.
>
> ❯ systemctl cat rsyslog.service
That looks exactly like mine. So that's probably fine.
> Requires=syslog.socket
This is the only part of it that looks like a "dependency". Maybe
this is the thing that's breaking
Here is the output.
❯ systemctl cat rsyslog.service
# /lib/systemd/system/rsyslog.service
[Unit]
Description=System Logging Service
Requires=syslog.socket
Documentation=man:rsyslogd(8)
Documentation=man:rsyslog.conf(5)
Documentation=https://www.rsyslog.com/doc/
[Service]
Type=notify
ExecStart=/u
On Tue, Jan 31, 2023 at 03:52:32PM +0100, deb...@sioban.net wrote:
> ❯ df /var/log /var/log/journal
> Filesystem 1K-blocks Used Available Use% Mounted on
> /dev/md24 46096212 1620728 42101496 4% /var/log
> /dev/md24 46096212 1620728 42101496 4% /var/log
OK, not out of disk
Hi Greg,
I'm sorry, I was unsure what kind of logs to give, thanks for giving me some
instructions.
❯ df /var/log /var/log/journal
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/md24 46096212 1620728 42101496 4% /var/log
/dev/md24 46096212 1620728 42101496 4% /
On Tue, Jan 31, 2023 at 11:09:59AM +0100, deb...@sioban.net wrote:
>
> Le 31/01/2023 à 11:08, Nicolas George a écrit :
> > deb...@sioban.net (12023-01-31):
> > > A dependency job for rsyslog.service failed. See 'journalctl -xe' for
> > > details.
> > Have you considered seeing journalctl -xe for
Le 31/01/2023 à 11:08, Nicolas George a écrit :
deb...@sioban.net (12023-01-31):
A dependency job for rsyslog.service failed. See 'journalctl -xe' for
details.
Have you considered seeing journalctl -xe for details?
Hi,
Yes, that was my first action.
The last line of log is from Oct 24 :/
deb...@sioban.net (12023-01-31):
> A dependency job for rsyslog.service failed. See 'journalctl -xe' for
> details.
Have you considered seeing journalctl -xe for details?
--
Nicolas George
gracias!. era eso mismo. ya me estaba volviendo loco.
On 12/11/2018 11:41 AM, Greg Wooledge wrote:
On Tue, Dec 11, 2018 at 11:29:28AM -0500, Eriel Perez wrote:
(*system*) ERROR (Missing newline before EOF, this crontab file will be
ignored)
Add the missing newline. If you use vi/vim, this hap
On Tue, Dec 11, 2018 at 11:29:28AM -0500, Eriel Perez wrote:
> (*system*) ERROR (Missing newline before EOF, this crontab file will be
> ignored)
Add the missing newline. If you use vi/vim, this happens automatically
and you cannot stop it. If you use something else, maybe you just have
to press
On Fri, 2016-06-03 at 08:16 +0100, Joe wrote:
> On Fri, 03 Jun 2016 07:42:46 +0100
> David wrote:
>
> > Dear Group,
> >
> > I am running Syslog-ng on a Raspberry Pi, it stores the data sent to
> > it on a 64G memory stick. It's working very well.
> >
> > I retrieve the syslog file by SSHing int
On Fri, 03 Jun 2016 07:42:46 +0100
David wrote:
> Dear Group,
>
> I am running Syslog-ng on a Raspberry Pi, it stores the data sent to
> it on a 64G memory stick. It's working very well.
>
> I retrieve the syslog file by SSHing into the Pi and copying the file
> to my main PC.
>
> The problem
I don't have my pi with me, but in Debian, the logrotate package handles
regular rotation and signaling daemons to open new files. You should be
able to figure out a suitable configuration from one of the files already
in /etc/logrotate.d/
As for the large log file you already have, I think split
* Darac Marjal [140924 07:37]:
> On Tue, Sep 23, 2014 at 05:55:22PM -0700, John Magolske wrote:
> > After a recent `aptitude dist-upgrade` I'm getting syslog messages
> > flooding the console, pages & pages of "Asset Found" stuff like:
> >
> > Message from syslogd@mymachine at Sep 23 13:46:11 ...
On Tue, Sep 23, 2014 at 05:55:22PM -0700, John Magolske wrote:
> After a recent `aptitude dist-upgrade` I'm getting syslog messages
> flooding the console, pages & pages of "Asset Found" stuff like:
>
> Message from syslogd@mymachine at Sep 23 13:46:11 ...
> ... Asset Found: IP Address - 16.20.3.
On Jul 16, 2013, at 5:20 PM, Michael Biebl wrote:
> sysklogd is dead, and has been removed from the archive. You shouldn't
> use it anymore.
I think the problem here is that I installed Wheezy on this machine with a
dist-install. I'd never done that before, and it's near the top of my list to
Hi,
On 17/07/13 01:20, Michael Biebl wrote:
> Am 17.07.2013 00:07, schrieb Glenn English:
>> Why are there 3 logging daemons (syslogd, rsyslog, and syslog-ng) on
>> Wheezy? (There's only syslogd on my one remaining Lenny box, looks
>> like two (no ng) on Squeeze.) All three are enabled, and at lea
Am 17.07.2013 00:07, schrieb Glenn English:
> Why are there 3 logging daemons (syslogd, rsyslog, and syslog-ng) on
> Wheezy? (There's only syslogd on my one remaining Lenny box, looks
> like two (no ng) on Squeeze.) All three are enabled, and at least
> some logging seems to happen. Does /dev/log s
Thanks bro. it worked :)
On Tue, Jul 10, 2012 at 7:26 PM, Michael Biebl wrote:
> On 10.07.2012 16:24, Michael Biebl wrote:
>
>> With rsyslog you have powerful filtering capabilities and you can
>> basically match on any part of the syslog message and drop it with the
>> "~" operator.
>>
>> http:/
On 10.07.2012 15:37, Muhammad Yousuf Khan wrote:
> there is a very specific daemon log which is generating every minute
> and i want this log not written in syslog message however the daemon
> itself not providing the facility to stop it. so is there any thing
> that i could configure debian not to
On 10.07.2012 16:24, Michael Biebl wrote:
> With rsyslog you have powerful filtering capabilities and you can
> basically match on any part of the syslog message and drop it with the
> "~" operator.
>
> http://www.rsyslog.com/doc/rsyslog_conf_filter.html
http://www.rsyslog.com/doc/property_repla
On Fri, 10 Feb 2012 14:15:38 -0800, T Elcor wrote:
> Any ideas what the following messages in the syslog mean (there are a
> lot of them) or how to fix it?
It could be several things: bad sata cables, a problem with the disk
controller, a kernel or module glitch, a BIOS fault...
> If the messa
On Sun, 05 Sep 2010, Andrei Popescu wrote:
> On Du, 05 sep 10, 11:01:13, Henrique de Moraes Holschuh wrote:
> > On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> > > On Sun, 2010-09-05 at 10:17 -0300, Henrique de Moraes Holschuh wrote:
> > > > On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
>
> [snip]
On Du, 05 sep 10, 11:01:13, Henrique de Moraes Holschuh wrote:
> On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> > On Sun, 2010-09-05 at 10:17 -0300, Henrique de Moraes Holschuh wrote:
> > > On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
[snip]
I'm not complaining[1], but I'm still curios why woul
On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> On Sun, 2010-09-05 at 10:17 -0300, Henrique de Moraes Holschuh wrote:
> > On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> > > I have found the reason:
> > >
> > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585395
> > > http://bugs.debian.org/cg
On Sun, 2010-09-05 at 10:17 -0300, Henrique de Moraes Holschuh wrote:
> On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> > I have found the reason:
> >
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585395
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=586156
> >
> > The first also has
On Sun, 05 Sep 2010, Joost Kraaijeveld wrote:
> I have found the reason:
>
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585395
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=586156
>
> The first also has a workaround/patch that works for me.
Do yourself a huge favour, and switch to rsy
I have found the reason:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585395
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=586156
The first also has a workaround/patch that works for me.
--
Groeten,
Joost Kraaijeveld
Askesis B.V.
Molukkenstraat 14
6524NB Nijmegen
tel: 024-3888063 / 06-5
On Sun, 2010-09-05 at 10:59 +0300, Andrei Popescu wrote:
> Do you have enough space on the partition containing /var/log/ ?
Yes, I have: 19G.
--
Groeten,
Joost Kraaijeveld
Askesis B.V.
Molukkenstraat 14
6524NB Nijmegen
tel: 024-3888063 / 06-51855277
fax: 024-3608416
web: www.askesis.nl
signat
On Du, 05 sep 10, 09:35:40, Joost Kraaijeveld wrote:
> Hi,
>
> I noticed on one of my machines that syslog stopped logging
> tot /var/log/messages. I have compared this machine to another one on
> which syslog still works. I cannot find any differences between the two
> machines.
>
> 1. Does any
On Tue, 04 May 2010 11:08:12 +0200, Imre Vida wrote:
> a few days ago syslog-ng stopped working properly on my laptop.
>
> Its output consists only of error report lines such as the following:
(...)
I maybe wrong, but that looks like the common output. They're just the
syslog-ng own stats, out
On Tue, May 04, 2010 at 11:08:12AM +0200, Imre Vida wrote:
>
> a few days ago syslog-ng stopped working properly on my
> laptop.
>
> Its output consists only of error report lines such as the following:
> May 3 06:35:16 sharp syslog-ng[4361]: Log statistics;
> processed='destination(d_error)=2
Boyd Stephen Smith Jr. wrote:
> On Thursday 14 January 2010 07:27:22 Roman Gelfand wrote:
>> I am running a service which generates logs. What do I need to do to
>> haave these log entries also appear in syslog?
>
> That's not how syslog works. There's isn't a process that goes through and
> ga
On Thursday 14 January 2010 07:27:22 Roman Gelfand wrote:
> I am running a service which generates logs. What do I need to do to
> haave these log entries also appear in syslog?
That's not how syslog works. There's isn't a process that goes through and
gathers logs from various services and glu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 16 Oct 2009 05:23:01 +0200
Tom H wrote:
> > I noticed this today - my syslog is filling up with repeated
> > calls to my internet provider...even though I am obviously connected.
> > Is this caused by some mis-configuration ?
> >
> > This is
> I noticed this today - my syslog is filling up with repeated
> calls to my internet provider...even though I am obviously connected.
> Is this caused by some mis-configuration ?
>
> This is the sort of thing I mean:
> Oct 14 19:02:21 squeeze dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port 67
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 15 Oct 2009 12:29:12 +0800
Jerome BENOIT wrote:
> >>>
> >>> I noticed this today - my syslog is filling up with repeated
> >>> calls to my internet provider...even though I am obviously connected.
> >>> Is this caused by some mis-configuratio
Hello,
Frank McCormick wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 15 Oct 2009 08:39:43 +0800
Jerome BENOIT wrote:
I noticed this today - my syslog is filling up with repeated
calls to my internet provider...even though I am obviously connected.
Is this caused by some mis-c
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 15 Oct 2009 08:39:43 +0800
Jerome BENOIT wrote:
> >
> >
> > I noticed this today - my syslog is filling up with repeated
> > calls to my internet provider...even though I am obviously connected.
> > Is this caused by some mis-configuration
Hello Franck,
Frank McCormick wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I noticed this today - my syslog is filling up with repeated
calls to my internet provider...even though I am obviously connected.
Is this caused by some mis-configuration ?
This is the sort of thing I mean:
2009/3/23 Anton Piatek :
> Not sure when these errors started, but I have recently been seeing
> errors in my syslog like the following:
>
> Mar 23 13:55:05 dementia kernel: [ 8535.882191] vxW:
> [�gkrellmd�,4613:#40002|40002|40002] did lookup hidden
> 8103f59eeb08[#0,4026531859] �/proc�.
> Mar
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Boyd Stephen Smith Jr. wrote:
> On Thursday 2009 January 15 10:58:28 Frank McCormick wrote:
>> Boyd Stephen Smith Jr. wrote:
>>> On Thursday 2009 January 15 09:09:11 Frank McCormick wrote:
Jan 15 10:00:09 debian dhclient: DHCPREQUEST on eth0 to 19
On Thursday 2009 January 15 10:58:28 Frank McCormick wrote:
>Boyd Stephen Smith Jr. wrote:
>> On Thursday 2009 January 15 09:09:11 Frank McCormick wrote:
>>> Jan 15 10:00:09 debian dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port
>>> 67 Jan 15 10:00:26 debian dhclient: DHCPREQUEST on eth0 to 192.1
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Boyd Stephen Smith Jr. wrote:
> On Thursday 2009 January 15 09:09:11 Frank McCormick wrote:
>> Jan 15 10:00:09 debian dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port 67
>> Jan 15 10:00:26 debian dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port 67
>>
On Thursday 2009 January 15 09:09:11 Frank McCormick wrote:
>Jan 15 10:00:09 debian dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port 67
>Jan 15 10:00:26 debian dhclient: DHCPREQUEST on eth0 to 192.168.1.1 port 67
>Jan 15 10:01:32 debian last message repeated 4 times
>Jan 15 10:02:36 debian last me
On Mon, 8 Sep 2008, François Cerbelle <[EMAIL PROTECTED]> writes:
> You can find this in the syslog man :
>-m interval
> The syslogd logs a mark timestamp regularly. The default inter-
> val between two -- MARK -- lines is 20 minutes. This can be
>
Le Lun 8 septembre 2008 13:31, Volkan YAZICI a écrit :
> ...
> Sep 8 12:05:21 arge -- MARK --
> Sep 8 12:25:21 arge -- MARK --
> Sep 8 12:45:21 arge -- MARK --
> Sep 8 13:05:22 arge -- MARK --
> Sep 8 13:25:22 arge -- MARK --
> ...
> What might be causing this garbage output. I
man syslogd:
-m interval
The syslogd logs a mark timestamp regularly. The default interval
between two -- MARK -- lines is 20 minutes.
This can be changed with this option. Setting the interval to zero
turns it off entirely.
> -Original Message-
> From: Volkan YAZICI [m
On 2008-08-29T00:53:10, Mag Gam wrote:
> Thanks all for the responses. It seems I am going to the syslog-ng
> way, however I am having trouble setting up the email alerts.
> I have written a script to email me but I am not sure how to set this
> up in syslog-ng
Here is what I use:
filter alert {
Thanks all for the responses. It seems I am going to the syslog-ng
way, however I am having trouble setting up the email alerts.
I have written a script to email me but I am not sure how to set this
up in syslog-ng
For example, in /var/log/messages if I get a message "foo" I would
like it to email
On Mon, 2008-08-25 at 07:58 -0400, Mag Gam wrote:
> Currently at my university we have 50 servers in our physics lab, and
> I am forwarding all syslog messages to 1 server. Is it possible to
> email me an alert once a particular alert occurs? Instead of
> constantly parsing the log file, I would li
On 2008-08-25T07:58:57, Mag Gam wrote:
> Is it possible to email me an alert once a particular alert occurs?
> Instead of constantly parsing the log file, I would like something a
> big more realtime.
I use syslog-ng for this, and wrote a little program to bound latency
and message size on aler
On Mon, Aug 25, 2008 at 07:58:57AM -0400, Mag Gam wrote:
> Currently at my university we have 50 servers in our physics lab, and
> I am forwarding all syslog messages to 1 server. Is it possible to
> email me an alert once a particular alert occurs? Instead of
> constantly parsing the log file, I w
Le Monday 25 August 2008 14:48:29 Gilles Mocellin, vous avez écrit :
> Le Monday 25 August 2008 13:58:57 Mag Gam, vous avez écrit :
> > Currently at my university we have 50 servers in our physics lab, and
> > I am forwarding all syslog messages to 1 server. Is it possible to
> > email me an alert
Le Monday 25 August 2008 13:58:57 Mag Gam, vous avez écrit :
> Currently at my university we have 50 servers in our physics lab, and
> I am forwarding all syslog messages to 1 server. Is it possible to
> email me an alert once a particular alert occurs? Instead of
> constantly parsing the log file,
On Wed, Jun 25, 2008 at 8:35 PM, Alex Samad <[EMAIL PROTECTED]> wrote:
> Hi
>
> I am looking at aggregating my syslogs, I have had a quick look at the
> available packages.
> syslog-ng
> dsyslog
> rsyslog
>
> I am wondering what other people are using. I am favouring rsyslog
> basically because it
Message-
From: Joel Roberts [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 06, 2007 10:39 AM
To: Douglas A. Tutty; debian-user@lists.debian.org
Subject: RE: Syslog Server on Debian Etch
Syslog was working fine on the clients, I had it installed to a diff
linux server and was trying to move it
ewalls? Is there
something other than local7.debug I should be using to send it to the
logfile I want?
Thanks.
-Original Message-
From: Douglas A. Tutty [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 06, 2007 8:17 AM
To: debian-user@lists.debian.org
Subject: Re: Syslog Server on Debia
On Tue, Nov 06, 2007 at 08:05:39AM -0700, Joel Roberts wrote:
> I'm trying to configure a syslog server on Debian Etch, but so far the
> only walkthrough I've found is for Debian Sarge. The walkthrough says to
> modify the /etc/init.d/sysklogd file at the line that says: SYSLOGD=""
> and change it
Michael Shuler <[EMAIL PROTECTED]>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and m
Michael Shuler <[EMAIL PROTECTED]>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and m
2007/9/29, s. keeling <[EMAIL PROTECTED]>:
> Michael Shuler <[EMAIL PROTECTED]>:
> > On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > > like Kiwi syslog) and another that's much more scalable and would let
> > > me, s
Michael Shuler <[EMAIL PROTECTED]>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and m
On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> like Kiwi syslog) and another that's much more scalable and would let
> me, say, aggregate logs from lots of different boxes and maybe even do
> other sorts of cool things (fi
Am 2007-08-01 12:54:23, schrieb Tony Heal:
> I am trying to move my postgresql (v7.4) logging out of the syslog and
> into a postgres.log. I want to do this so I can
> turn on logging full bore and have logrotate keep the logs to a
> reasonable size.
>
> Here is my problem. Postgresql v7.4 will ei
Works great. thanks
Tony Heal
Pace Systems Group, Inc.
800-624-5999
[EMAIL PROTECTED]
> -Original Message-
> From: Douglas Allan Tutty [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 01, 2007 1:07 PM
> To: debian-user@lists.debian.org
> Subject: Re: syslog help
>
On Wed, Aug 01, 2007 at 12:54:23PM -0400, Tony Heal wrote:
> I am trying to move my postgresql (v7.4) logging out of the syslog and
> into a postgres.log. I want to do this so I can turn on logging full
> bore and have logrotate keep the logs to a reasonable size.
>
>
>
> Here is my problem. Po
On Fri Jun 29, 2007 at 20:44:17 +1000, Robert S wrote:
> I would like to replace syslog with syslog-ng on Etch. Am I likely to run
> into any problems with breakages etc if I do this?
No.
Steve
--
# Kink-Friendly Dating
http://ctrl-alt-date.com/
--
--
To UNSUBSCRIBE, email to [EMAIL PROT
On Tue, 6 Jun 2006 00:27:45 +0200
"Michele Della Marina" <[EMAIL PROTECTED]> wrote:
> Yes, thank you, I know apt-cache search... but I'm searching a
> web-based monitor tool (not awstats)
> :)
>
Have you thought of replacing syslog with syslog-ng and configuring it
to filter out just the things
On (06/06/06 00:27), Michele Della Marina wrote:
> Yes, thank you, I know apt-cache search... but I'm searching a
> web-based monitor tool (not awstats)
> :)
Sorry, half-asleep ... I did come across this though:
http://www.slac.stanford.edu/xorg/nmtf/nmtf-tools.html
I haven't explored any furthe
1 - 100 of 183 matches
Mail list logo
