Ubuntu :: Tail Log Files To Syslog?
Mar 23, 2011Is there a way to tail a log file and send each line as a syslog event to a remote server?
View 1 RepliesIs there a way to tail a log file and send each line as a syslog event to a remote server?
View 1 RepliesI noticed in my system that my root partition is getting full. I found a lot of old compacted syslogfiles. Had a look at etc/sysconfig editor eg cron but could not find a setting which allows to delete files older than a month. Where and how could I influence this ? I deleted manually all syslog files older than a month. Approx 6GB
View 9 Replies View RelatedI have a 60GB partition with / and home on it. I logged on yesterday and it gave me a warning saying that I had only 1.9 GB of disk space left. I ignored it for a day and assumed that i had too many videos and pics.But the next day i had not added any files or downloaded any software but i had 0B left. I used the disk usage analyser and found that 33GBs came from /var/log. It was from two log files. syslog and daemon.log 16.5GB each!! I opened them up and i found that this line of text was repeated hnundreds of thousands of times.
Code:
Jul 22 19:32:36 aulenback-desktop ntfs-3g[5315]: Failed to decompress file: Value too large for defined data type
[code]...
I am looking for an open source syslog server which accumulate the each and every log of Windows, Solaris, Linux and network devices. Currently I am using Syslog-ng which is not fulfiling my requirement in Windows clients, as I need the logs of every action which user performed after logon.
View 2 Replies View RelatedCan syslog be used to "watch" other log-Files from other software? I would like to get an info in messages if a logfile of squid is changed/something is added.
View 4 Replies View RelatedIn my system, I see two syslog configuration files, /etc/rsyslog.conf and /etc/syslog.conf.. What is the use of each file? I know only that of /etc/syslog.conf...how about /etc/rsyslog.conf? what is its use?
View 1 Replies View RelatedI am currently using Syslog-NG to make the log files in the format of: $R_YEAR$R_MONTH$R_DAY$R_HOUR and I need to be a little more granular.
I am wondering if there is a way to to divide the hour by 12, making a new log file every 5 minutes. We have been using LogRotate, but when Syslog-NG is restarted we have some data loss. Is this possible? Another solution I can think of would be to add $R_MINUTE (or whatever it is) and run a cron job every 5 minutes to concatenate the files.
Syslog is used to store simple log files or we can manage them too? Well, the thing is, that I need to run a software (like syslog) to collect my logs and put them in order and organize them so it makes them "understandable". I have been told that syslog can do the job and that it doesn't need a complex configuration to work.
View 12 Replies View Relatedtrying to replace syslog with syslog-ng. When I:
yum erase syslog,
wants to remove everything else that (presumably) has syslog as a dependency. how do I replace the dependency on syslog with a dependency on syslog-ng?
I have installed Ubuntu 11.04 over the weekend and wanted to tail the logs whilst doing so stuff. When I browsed to the folder after getting an error trying to tail, I noticed that the messages file does not exist.
Usually use tail -f /var/log/messages
tail -f <filename> is not working as planned on my Ubuntu 9.10, it doesn't show the appended data.tail -F works, but it does not append the new line, it reopens the file with the message: "tail: <filename> has been replaced; following end of new file"
View 4 Replies View RelatedI need to printout auth.log each line by log event, I think it should be running using the following command:
~# tail -f /var/log/auth.log | lpr
but it's not, why?
the lpr package already is installed in myserver, there is no problem to print directly.
~# cat /var/log/auth.log | lpr
I am trying to use tail -f and play a sound everytime a new line appears. I tried this: for i in tail -f myFile; do aplay alert.wav; done; Which kinda worked, the output is:
Playing WAVE 'alert.wav' : Signed 16 bit Little Endian, Rate 22050 Hz, Mono
Playing WAVE 'alert.wav' : Signed 16 bit Little Endian, Rate 22050 Hz, Mono
Playing WAVE 'alert.wav' : Signed 16 bit Little Endian, Rate 22050 Hz, Mono
But after 3 times it stops, and I would like to print the tail -f result and not the aplay result. How could I achieve that?
I'm running ubuntu 9.10 with the latest networkmanager (from ppa)I thought this could be wrong credentials setting, so i've tried a huge amount of setups (user: phonenumber, password: phonenumber, avp:telenor, seems to be the general consensus for how it should be)Is there something I'm missing or is there any way I could tail the output as NetworkManager tries to connect (hopefully seeing something like "wrong password" etc.)
View 6 Replies View RelatedI was using Opensuse on Virtualbox earlier today. I issued the tail -f /var/log/messages command on Opensuse 11.3 to see the messages. Then I logged in from my Mac into Opensuse 11.3. I noticed that Opensuse was displaying realtime messages of the things happening. For eg, I entered a wrong su password and it displayed that too. But no such things were happening on my Fedora 13 installation. So is there any way if I could get some realtime messages on Fedora 13 too like the one on Opensuse..?
View 4 Replies View RelatedI was recently looking into using tail -f to monitor some text files like so: tail -f /var/sometext However, when I did some testing, it doesn't seem to work. What I did was I created a new file and ran: tail -f /home/name/text Then, I opened the log in vim and did some editing, saved it, and it seems that tail is not "seeing" the change.
The weird thing is, running echo "hello" >> /home/name/text seems to work fine (tail sees the change). I read somewhere this has something to do with file descriptors and new inodes being created when saving a file.
I need to tail -f a log file that is rotated.
This is the exact same issue as the one here, but on OS X:
Why does less tail mode stop working?
So how can I constantly track a file whose inode might change under OS X?
am facing a problem with tailing a log file. Logs of application located in one folder:applog_20100101_0200.log <--log until 2 am january 1applog_20100101_0456.log <--log until 4:56 amapplog.log <-- current logApplication can change log when ever it wants to. I need to monitor this log, what i do:tail -f applog.logBut when app changes log my tail just stops. How can i tail applog.log all the time with out stops?
View 7 Replies View RelatedI am running a script with nohup and this generates a lot of logs.
In order to view the log I use tail -f nohup.out
The problem is that the info supplied by this command is not always the latest//sometimes I need to use the command again order to view the latest info added to the nohup.out file.
I have had update problems for a very long time in my desktop e-machine. Maybe since 5.3. Usually something about Gwenview and other things. And, while --skip-broken got other packages updated, sorry, an incomplete update just isn't acceptable. Because of this I stopped using Centos for a long time. Yesterday, I got ambition and gave it another try. I had a lot of yum upgrade failures when upgrading 5.4 to 5.5, using --skip-broken.
I decided to fix things or delete Centos completely. But, I like the idea of free R****t. I realize this may have been posted, but I had no luck finding it via Google, So I started Googling. I soon found the --disablerepo option, and playing with repos, got most of the failures to upgrade. But, still hung up on a lot of stuff, like 11 packages or more.
Next, I learned about yum-prioroties and setting repo prorities. Yum-priorities was already installed, but I did go in and set the priorities. Since Google has a lot of information on this, I will not repeat here. You go into the repo config files and add a priority number to each repo listing. Here is a script to display repo priorities that I found online, sorry, I lost the author:
[Code]...
Installed Fedora 12 in vmware and during the installation of a professional program versioned 2003, following error encountered.
tail: cannot open `+124' for reading: No such file or directory
gzip: tmptarfile.tar.Z: not in gzip format
tar: This does not look like a tar archive
tar: Error exit delayed from previous errors
extract error, installation cannot proceed.
Checked the google and tried ncompress and export_posix2_version=199209, but the problem persists.Is fedora compatible to this program, MEDICI 2003 ver?
I want to tail the latest log file in one command line. I dont know what command/option to use for the same.
View 5 Replies View RelatedHow to print a sequence of line say line number 10 to 20 of a 50 line file ?
View 6 Replies View RelatedFollowing script name is 123.sh and I need to put this in the background if I do 123.sh -bg this will not bring me back to the prompt but echoes what ever I put (using echo hello >> /tmp/123) in to the /temp/123 file. the only way that I have found doing this is to do "nohup 123.sh &" to put this in to the background. Is this okay or is there any better way of doing this?
#!/bin/bash
# file name is 123.sh
tail -f /temp/123 | while read line
[code]...
I'm trying to write a script that will either tail or watch /var/log/messages for the words
PHP Code:
signal Gone into alarm state
From this line below.
I would then like the script execute:
And have run at start up.
I'm stuck with grep-ping only one word
PHP Code:
By invoking x11vnc with the -gui tray option the TCL/TK GUI attempts to embed itself onto the system tray, but I encounter the error message "tail: cannot watch /tmp/x11vnc.tray.*", after the first settings dialog approved [clicked OK]. I believe that a package is still missing to be installed and this is not really a software bug. I use the XFCE version shipped along F15, and the GUI can be started but not as a docked-applet.
View 3 Replies View RelatedI wrote a script which will run in ubuntu box and will display in tty1, without loading the gdm. The problem is when I plugged in a usb drive it will cause some messages to be printed into the current tty user logged in.
Like : [sdb] Assuming drive cache: write through
This is really disturbing when a user is running the script. Is there anyway that I can direct all the messages to some other tty which I don't use.
I was checking my syslog.conf file recently and it seems that it is an empty file >_> it shouldn't be correct?
View 2 Replies View RelatedAMD64, Ubuntu 10.10 64bit os, with onboard video.Works really well all the way to 1680X1050 resolution, but I get this error every 10 seconds added to my syslog.
View 9 Replies View RelatedThere was an useful discussion on "how to stop logging cron to syslog". The useful answer is to update the line targeting syslog in /etc/syslog.conf to say something like:
Code:
*.*;auth,authpriv.none,mail.none,cron.none -/var/log/syslog
the significant part being that cron.none means that cron will not log to syslog.
There was discussion about whether this was a good thing to do, but omitted to suggest that adding/ uncommenting the following line would mean that no information would be lost but that syslog would be less cluttered as a source of monitoring info:
Code:
cron.* -/var/log/cron.log
You've still got all your cron-related log items available in cron.log if and when you need them. To make the new /etc/syslog.conf lines effective you should also, with root privileges:
Code:
touch /var/log/cron.log
chown syslog:adm /var/log/cron.log
and restart syslog. In my case:
Code:
/etc/init.d/sysklogd restart