Server :: Set Up Syslog On Fedora 10?
Mar 10, 2010How to set up syslog server on Fedora 10 Linux server ?
View 1 Replies
ADVERTISEMENT
General :: Best Open Source Syslog Server / Syslog-ng Which Is Not Fulfiling Requirement?
Dec 11, 2010I am looking for an open source syslog server which accumulate the each and every log of Windows, Solaris, Linux and network devices. Currently I am using Syslog-ng which is not fulfiling my requirement in Windows clients, as I need the logs of every action which user performed after logon.
View 2 Replies View RelatedFedora :: Configuring Syslog Server To Accept Remote Logging?
Nov 12, 2009I'm having trouble getting my pix firewall to log to syslog server. Here are the steps I took:
1) Added the following line to /etc/sysconfig/syslog:
SYSLOG_OPTIONS "-m 0 -r514"
**for some reason, without the 514, syslog doesn't listen
[code]....
CentOS 5 :: Replacing Syslog With Syslog-ng?
May 5, 2009trying to replace syslog with syslog-ng. When I:
yum erase syslog,
wants to remove everything else that (presumably) has syslog as a dependency. how do I replace the dependency on syslog with a dependency on syslog-ng?
Server :: Loging Ssh With Syslog-ng ?
Nov 14, 2010Im trying to get syslog-ng to log ssh stuff to a own file (later i want it to be forwarded to a other server but thats a later problem.
The thing is that if i restart my syslog-ng server and login with ssh, it logs it. but when i login again it dont. But if i restart the syslog-ng daemon again it logs again, but only once.
Here is my config.
Code:
OpenSUSE Install :: Syslog Files Accumulating Searching For Setting To Delete Old Syslog Files?
Oct 7, 2010I noticed in my system that my root partition is getting full. I found a lot of old compacted syslogfiles. Had a look at etc/sysconfig editor eg cron but could not find a setting which allows to delete files older than a month. Where and how could I influence this ? I deleted manually all syslog files older than a month. Approx 6GB
View 9 Replies View RelatedServer :: Bug Installation Syslog-ng In Centos 5.6
Jun 1, 2011I tried to install Syslog-ng-3.2.4 in Centos 5.6,when i need to start the deamon syslog-ng =>Failure and i have this message:
Code: [root@RelaisXXX etc]# service syslog-ng start Starting syslog-ng: Your configuration file uses an obsoleted keyword, please up Your configuration file uses an obsoleted keyword, please update your configurat
Error creating persistent state file; filename='/usr/local/var/syslog-ng.persist Starting Kernel Logger [FAILED]:
Server :: Disabling Syslog Compression?
Dec 3, 2010I�m installing fail2ban to improve the security of a home asterisk server which from time to time becomes the target of some sip account cracker and/or ssh brute force attack.For those not familiar with fail2ban, this utility monitors log files to find matches with user specified expressions to identify the presence of a brute force attack. Then configures iptables rules to block the offending IP.Here�s an example:
Code:
NOTICE[1734] chan_sip.c: Registration from '"613"<sip:613@xx.xxxx.xxx.xxx>' failed for 'yyy.yyy.yyyy.yyy' - No matching peer found
[code].....
Server :: Logging To 2 Syslog Servers?
Mar 10, 2011I'm guessing its possible but I can't seem to find any documentation on how to do this.I've tried playing with entries at the top of my syslog.conf file like:
*.* @172.20.10.1 # 1 server, works file
*.* @172.20.10.1,172.20.20.11 # doesn't work
*.* @172.20.10.1 172.20.20.11 # nor this
*.* @172.20.10.1,@172.20.20.11 # nor this
*.* @172.20.10.1 @172.20.20.11 # nor this
Server :: Convert Syslog Messages To XML?
Feb 8, 2011What is the easiest way in Linux to convert syslog messages to XML?
View 1 Replies View RelatedCentOS 5 Server :: How To Log Vsftpd To Syslog
Jan 11, 2009I open "man vsftpd.conf", it says syslog_enable If enabled, then any log output which would have gone o /var/log/vsftpd.log goes to the system log instead. Logging is done under the FTPD facility. Default: NO So I add "syslog_enable=YES" to the /etc/vsftpd.conf, and add "ftpd.* /var/log/ftplog" into /etc/syslog.conf. But there is no log infomation in the ftplog file.
View 7 Replies View RelatedCentOS 5 :: How To Configure Syslog Server
Nov 20, 2009how to configure syslog server in centos?
View 3 Replies View RelatedServer :: BIND Messages Filling Up SysLog?
Dec 9, 2009I have the following BIND messages filling up my SysLog that I'm hoping someone can explain to me:
Code:
Dec 9 09:35:44 dns2 named[30103]: client 67.130.224.5#49551: query (cache) 'www.domain.com/A/IN' denied
Dec 9 09:35:47 dns2 named[30103]: client 67.130.224.5#64561: query (cache) 'www.domain.com/A/IN' denied
[code].....
I would expect this behavior if "domain.com and anotherdomain.com" wasn't a domain that I hosted. But this is a valid domain that this server should be answering for. In my named.conf I do have the
Quote:
allow-query { any; };
option on every zone. This is my slave server and I have the primary shut off so I can test this slave server. FYI: So far queriers still seem to be working. The pages for the sites are still coming up via the internet.
Server :: Configuring Syslog And Exporting Of Logs?
Jan 17, 2011configure syslog server on ubuntu now i want to export logs of windows and ubuntu desktop to the syslog server
View 6 Replies View RelatedServer :: Possible To Open Log Files Of Other Software In Syslog?
May 12, 2009Can syslog be used to "watch" other log-Files from other software? I would like to get an info in messages if a logfile of squid is changed/something is added.
View 4 Replies View RelatedServer :: Uses Of Syslog Configuration Files In System?
May 20, 2010In my system, I see two syslog configuration files, /etc/rsyslog.conf and /etc/syslog.conf.. What is the use of each file? I know only that of /etc/syslog.conf...how about /etc/rsyslog.conf? what is its use?
View 1 Replies View RelatedServer :: Syslog Analyzer For Central Log File?
Dec 16, 2009We have several SLES, CentOS, Fedora server and use logmail to filter the logs on our central syslog-Server. The problem is, that the filtering take more and more time and the configuration gets more and more confusing. What program to use to analyse our central logfile? Something mysql based?
View 1 Replies View RelatedServer :: Syslog-NG Macros - Make The Log Files ?
Mar 18, 2010I am currently using Syslog-NG to make the log files in the format of: $R_YEAR$R_MONTH$R_DAY$R_HOUR and I need to be a little more granular.
I am wondering if there is a way to to divide the hour by 12, making a new log file every 5 minutes. We have been using LogRotate, but when Syslog-NG is restarted we have some data loss. Is this possible? Another solution I can think of would be to add $R_MINUTE (or whatever it is) and run a cron job every 5 minutes to concatenate the files.
Server :: Syslog Not Updating The Messages File?
Feb 16, 2011I am facing an issue with my syslog server. The server is collecting remote log also. and the issue is no log messages are updated in /var/log/messages file. But other files are getting updated.
[root@Server1 ~]# cat /etc/syslog.conf
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
[code]....
Server :: Syslog Stops Writing In Log / Get That To Work?
Sep 13, 2010Syslog stops writing immediately after log rotation, after I start the system (but not after reboot), and at some other times, into my fast cgi application's log. It starts working after /etc/init.d/sysklogd restart.
Configuration:
I am using Ubuntu 8.04 lts server, Apache web server.
My (fast cgi) application uses code...
Server :: Ubuntu 6.06 Syslog Crashes After Logrotate?
Aug 23, 2010I have a postfix mailserver that works fine except for the logrotate.
syslog.conf
mail.* -/var/log/mail.log
logrotate.conf
/var/log/mail.log {
[Code]....
So when cron does the logrotate, there is a new logfile but its empty. After i restart the syslogd it gets back to its normal logging.
What am i missing? All this works with CentOS, why is Ubuntu such a pain...
CentOS 5 :: Syslog Server For SOHO Infrastructure?
Aug 7, 2011I have a dual-processor x86 box with CentOS 5 Linux 2.6.18-238.19.1.el5, mysql Ver 14.12 Distrib 5.0.77, and tons of storage space. I want to run a syslog solution on this box for a SOHO infrastructure. We've got routers, switches, Windows servers, other Linux boxes, etc. I've looked at syslog-ng, but it seems rather overkill, but I like the idea of storing logs in a MySql database. Is there anything I can yum install?
View 2 Replies View RelatedGeneral :: Forward System Logs To Syslog Server?
Sep 24, 2009I'm running Ubuntu Desktop 9.10. How do I get it to forward its logs to a syslog server (its running on a different machine)?
View 2 Replies View RelatedServer :: How Clients Handle Offline Syslog Servers
Apr 19, 2011How do clients handle offline syslog servers?Will the log files be buffered locally to be sent to the syslog server when it comes back online, or will any log data generated during downtime be lost in cyber space?
View 1 Replies View RelatedServer :: Redistribution Of Inbound Syslog Messages To Syslogd?
Apr 28, 2010RHEL 5.4 i want to be able to do redistribution of inbound syslog messages to syslogd. as example, my syslog.conf has in it at the end:
*.* @192.168.5.5
*.* @192.168.5.6
my sysconfig/syslog file has "-r" as the only option for syslogd. any messages generated by the localhost will be sent to the two remote servers, but messages that come into this box (udp 514) only get logged locally and do not get sent out to the remote hosts.
you may ask why do i want to do this. because i have several syslog servers (for security purposes) and many of my net devices are configured to send syslog to all the syslog servers, hence each device is sending way too much duplicate udp-514. so i would like to minimize the udp-514 coming out of the devices, have all devices send to a central syslog server, and then central syslog server do distribution to the other syslog servers. others have also called this "syslog proxy". or, if not with syslogd, how to achieve this (preserving the original syslog message host info, etc)?
Server :: Syslog Collector - Calculating Severity Of Message?
Jan 18, 2010I am writing my own syslog collector, but im stuck with calculating the severity of the message. The PRI value is calculated:-
Code:
(Facility * 8) + Severity
But from the context of a collector, neither Facility or severity would be known? You need to know either severity or Facility to calculate facility or severity?! The RFC goes in to no more detail about calculating the severity value, other tan this expression.
Security :: Building An Opensource Syslog-SNMP Server With Web Interface?
Jun 16, 2010I am looking to build a dedicated syslog-SNMP server with remote web interface and I would appreciate a discussion from our community on recommending the best solutions to deploy. I would like to be able to create an opensource architecture I could easily duplicate for multiple stand-alone customer environments.
View 1 Replies View RelatedServer :: Configure Syslog - The Other Device Doesn't Allow You To Change The Facility
Sep 8, 2010I have a syslog server which is logging locally and also receiving syslogs from another device. The other device doesnt allow you to change the facility. The facility it is using is "4 - security/authorization messages". Is there anyway to configure syslog so that it writes the sec/auth logs in different places for both the local machine and the remote machine?
View 1 Replies View RelatedSoftware :: Syslog Alerts Not Triggering To Server (Redhat Enterprise 5)?
Nov 13, 2010just set up a windows server and other windows boxes send alerts to it no problem.Yesterday I configured my linux box (RHEL 5) using /etc/sysconfig/syslog and /etc/syslog.conf so that all alerts would go to the syslog server.There are no external firewalls involved and while the firewall is working on my linux boxI have made sure port 514 TCP/UDP are let through.Ive checked syslogd and klogd are running.I've also applied the '*@10.20.30.40' line in etc/syslog.conf. Basically Id like everything to go to the syslog server.Now if I telnet to the syslog server on port 514 I can type text on the linux box and it comes through on the syslog server. Great - but no syslog alerts seem to come through normally, even when I reboot the box.I've tried *., .*, and * to no avail, ive got an entry in my hosts file for the server 10.20.30.40 and tried using a name instead of an ip address, no luck.
View 1 Replies View RelatedCentOS 5 Server :: Rotating Named Logs Via Syslog.conf?
Mar 1, 2010OS CentOS 5.4 I have a DNS server that is logging all named and dns requests to the chrooted named directory. By default named logs to /var/log/messages but I want to isolate all the dns queries and requests to separate files. I know I can add entries to /etc/syslog.conf to "roll" the logs and logrotate should pick them up but fuzzy as to the syntax. I don't know what "tag" to use in the first fieild. for example
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none/var/log/messages
Here is the logging section of my named.conf
# pwd
# /var/named/chroot/etc
logging
{
[code]....
