Questions tagged [rsyslog]

rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Configure rsyslog on a haproxy1.7 container

I'm using HAProxy 1.7 which needs rsyslog to push logs to stdout. Once the container writes logs to stdout, programs like filebeat or fluentd will pickup. Docker container has: Ubuntu 20.04, HAProxy ...
0
votes
1answer
16 views

rsyslog single filter conditional syntax

I'm looking for a way to write a single rule with multiple match values, don't write those rows to logfile if the message contain first word or second word. This works but isn't DRY: if $msg contains &...
0
votes
1answer
31 views

rsyslog conf file syntax multiple filters

I'm setting up rsyslog on a Red Hat 8 system. I have the the first part working, that being filtering based on source IP, putting logs in a specific file, like this: if $fromhost-ip startswith '10.1.2....
1
vote
0answers
16 views

rsyslog unexpected end of file on log files with OMFileZipLevel

OS: Centos7 rsyslog: 8.24.0 I have various hosts sending logs to my centralised rsyslog server. I use OMFileZipLevel option in my config file to compress my logs and then zcat anytime i wish to view ...
2
votes
0answers
22 views

Recommendations for high-volume request logs from containers

We have a service that uses raw AWS EC2 instances to field requests. Response times are in the 2-3 ms range. That response time is important to the health and success of the service. Part of the ...
0
votes
1answer
31 views

Rsyslog using more memory on CentOS 7

I see rsyslog is using more memory on my EC2 instance. Is there a way we can fix it? I tried cat /proc/<pid_of_rsyslogd>/limits and tried changing the limit value but no luck. Max stack size ...
0
votes
0answers
54 views

Messages appears with delayed in /var/log/messages

I'm using rsyslog to collect logs from multiple servers which are all being sent to a single server. I've noticed that logs sometime appears with delay of 2-5 minutes in /var/log/messages of the ...
1
vote
2answers
26 views

Rsyslog forward log with space in path or name

How would one go about forwarding a log file with a space in the filename or path using Rsyslog? $ModLoad imfile $InputFileName /var/lib/plexmediaserver/Library/Application\ Support/Plex\ Media\ ...
0
votes
0answers
15 views

Why is rsyslog concatenating log entries and inserting “var - - - ” into them?

I have rsyslog setup and it is full of entries looking like this: <133>1 2020-12-11T10:22:31.865164+00:00 example-hostname var - - - <133>1 2020-12-11T10:15:51.647499+00:00 example-...
1
vote
1answer
23 views

Unable to get rsyslog to save only msg without timestamp

When I have the default settings, my logs are like this: 2020-12-01T18:34:06+02:00 10.132.90.194 {"wfd_successful_hits_sec": "0", "sql_hits_sec_max": "0", "...
0
votes
0answers
60 views

forward logfiles of any format using rsyslog

I want to forward the log-files of some applications on my linux-system (periodically) from server A to server B. I could probably use FTP but there are probably other tools which are more "...
0
votes
0answers
12 views

Rsyslog: Template filtering on properties

I have been using a legacy template for my rsyslog server. We are trying to upgrade to v8 of rsyslog. One of the things I noticed happening was the rsyslog was that messages coming in from my Cisco ...
0
votes
1answer
34 views

rsyslog on CentOS 8.2

I just configured rsyslog 8.1911 on CentOS 8.2. The server rsyslog.conf has these lines $template RemoteLogs,"/logs/serverlogs/%$YEAR%-%$MONTH%-$DAY%/%HOSTNAME%/%PROGRAMNAME%.log" *.* ?...
0
votes
0answers
31 views

send logs of flask through rsyslog on remote server

I have flask running in my environment which creates logs in /var/log/api/api.log. i have configured rsyslog service to send all logs to my remote server but rsyslog sending api.logs to syslog file ...
1
vote
1answer
123 views

Rsyslog 8 dynafile with a template

I'm trying to setup rsyslog to use the template RSYSLOG_TraditionalFileFormat as the default action template, but for some specific messages i need to use another template. In both cases i need ...

15 30 50 per page
1
2 3 4 5
41