新媒观察：让大数据的“镜像”服务美好生活
百度 报告预测，以目前发展趋势，中国有望3年内赶超美国，成为国际专利申请的最大来源国。
rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.
699 questions
1
vote
0
answers
64
views
interpreting action numbers in rsyslog impstats output
I see lines like this in the output from impstats:
action-21-builtin:omfwd: origin=core.action processed=87059 failed=0 suspended=0 suspended.duration=0 resumed=285
how do I relate the number 21 back ...
- 241
1
vote
0
answers
48
views
rsyslog server GnuTLS error -54
Running rsyslog v8.2102.0-15.el8_10.1 on RHEL 8.10 (and 9.6). It logs these messages about clients sending syslog via TLS:
Jul 17 13:06:38 rsyslog-server rsyslogd[1782767]: unexpected GnuTLS error -54 ...
- 11
1
vote
2
answers
117
views
Syntax error setting a custom variable in rsyslog configuration [Solved]
Running rsyslog version 8.2412.0-1.el9 on Red Hat Enterprise Linux 9.6.
I'm trying to set a custom variable that I can check later in the configuration with this statement:
if $syslogtag == "...
- 11
0
votes
0
answers
63
views
Postfix stops creating log when syslog reload
I am facing an issue in my server. Sometime syslog auto restart. But after auto restart postfix is not create any logs. When restart postfix manually then it will work. How to solve this issue.
root@...
0
votes
1
answer
48
views
trying to diagnose rsyslog config
system ubuntu 24.04, package Version: 8.2312.0-3ubuntu9.1
I have created a file in /etc/rsyslog.d :
module(load="impstats"
interval="900"
severity="7"
...
- 241
0
votes
1
answer
87
views
journald is suppressing auditd events sent out by rsyslogd
I've encounterd an odd behavior I do not fully understand. Journald is supressing auditd messages being send out by rsyslog to a remote server for some reason on my centos 7-x64 VM:
Thats the ...
0
votes
0
answers
43
views
debugging rsyslog log rotation
I set up rsyslog on a raspberry pi to track some very noisy systems (into /var/log/router.log). I don't need to keep a lot of data, so I want to rotate out the logs quickly, or preferably, by log size....
- 101
0
votes
1
answer
60
views
rsyslog: how do I explicitly set a PRI value in a template
I need to override the priority and facility values in messages forwarded to one destination. There does not appear to be a 'property replacer' option to do a simple text replacement in a template. ...
- 241
0
votes
1
answer
81
views
Redirecting SFTP event logging fails on OpenSSH 9.6
I'm trying to save the SFTP debug level events to one file (sftp_debug.log) and info level events to another file (sftp_info.log) on my Linux ssh daemon.
When I log on with admin account (osboxes, ...
- 211
0
votes
0
answers
32
views
Why rsyslog need to be restarted with a remote client?
I am running rsyslogd (2023.02) on Debian Bookworm with a new configuration file in /etc/rsyslog.d/myprog.conf :
module(load="imudp")
template(name="remote_logs" type="...
- 111
2
votes
1
answer
235
views
rsyslog stops accepting new connections
I have an rsyslog server configured to accept remote messages from around ~400 servers, however it seems once the server gets about ~256 connections it stops accepting new connections and the clients ...
- 591
0
votes
0
answers
55
views
Custom rsyslog Rule Not Logging to Specific File in Yocto Project on Ubuntu
I am working on a Yocto Project running on Ubuntu and have configured rsyslog to route log messages from a specific program to a custom log file. However, the messages don't seem to be logged as per ...
0
votes
0
answers
51
views
How to split logs from auditd rules files
I have a question how can I split logs from auditd rules files for forwarding events only from one of them to remote log server. For example I have auditd1.rules and auditd2.rules on one server I need ...
1
vote
0
answers
123
views
How to log remote syslog/journal to per-host journals?
I am trying to setup a logging server using rsyslog. As clients I have machines that can use journald as well as legacy applications that can only use syslog. As such, there needs to exist a plain ...
- 11
0
votes
1
answer
121
views
Rsyslog ruleset filter based on matching a source IP list instead of a chain of "or" operators
I have a syslog server receiving different kinds of logs from multiple clients, either through a dedicated port or through UDP 514. When received, logs are written to a directory dedicated for a ...
