Questions tagged [rsyslog]
rsyslog is an enterprise-ready replacement for the syslog daemon on Linux and other UNIX operating systems.
611
questions
0
votes
0answers
19 views
Configure rsyslog on a haproxy1.7 container
I'm using HAProxy 1.7 which needs rsyslog to push logs to stdout. Once the container writes logs to stdout, programs like filebeat or fluentd will pickup.
Docker container has: Ubuntu 20.04, HAProxy ...
0
votes
1answer
16 views
rsyslog single filter conditional syntax
I'm looking for a way to write a single rule with multiple match values, don't write those rows to logfile if the message contain first word or second word.
This works but isn't DRY:
if $msg contains &...
0
votes
1answer
31 views
rsyslog conf file syntax multiple filters
I'm setting up rsyslog on a Red Hat 8 system. I have the the first part working, that being filtering based on source IP, putting logs in a specific file, like this:
if $fromhost-ip startswith '10.1.2....
1
vote
0answers
16 views
rsyslog unexpected end of file on log files with OMFileZipLevel
OS: Centos7
rsyslog: 8.24.0
I have various hosts sending logs to my centralised rsyslog server. I use OMFileZipLevel option in my config file to compress my logs and then zcat anytime i wish to view ...
2
votes
0answers
22 views
Recommendations for high-volume request logs from containers
We have a service that uses raw AWS EC2 instances to field requests. Response times are in the 2-3 ms range. That response time is important to the health and success of the service.
Part of the ...
0
votes
1answer
31 views
Rsyslog using more memory on CentOS 7
I see rsyslog is using more memory on my EC2 instance. Is there a way we can fix it?
I tried cat /proc/<pid_of_rsyslogd>/limits and tried changing the limit value but no luck.
Max stack size ...
0
votes
0answers
54 views
Messages appears with delayed in /var/log/messages
I'm using rsyslog to collect logs from multiple servers which are all being sent to a single server.
I've noticed that logs sometime appears with delay of 2-5 minutes in /var/log/messages of the ...
1
vote
2answers
26 views
Rsyslog forward log with space in path or name
How would one go about forwarding a log file with a space in the filename or path using Rsyslog?
$ModLoad imfile
$InputFileName /var/lib/plexmediaserver/Library/Application\ Support/Plex\ Media\ ...
0
votes
0answers
15 views
Why is rsyslog concatenating log entries and inserting “var - - - ” into them?
I have rsyslog setup and it is full of entries looking like this:
<133>1 2020-12-11T10:22:31.865164+00:00 example-hostname var - - - <133>1 2020-12-11T10:15:51.647499+00:00 example-...
1
vote
1answer
23 views
Unable to get rsyslog to save only msg without timestamp
When I have the default settings, my logs are like this:
2020-12-01T18:34:06+02:00 10.132.90.194 {"wfd_successful_hits_sec": "0", "sql_hits_sec_max": "0", "...
0
votes
0answers
60 views
forward logfiles of any format using rsyslog
I want to forward the log-files of some applications on my linux-system (periodically) from server A to server B.
I could probably use FTP but there are probably other tools which are more "...
0
votes
0answers
12 views
Rsyslog: Template filtering on properties
I have been using a legacy template for my rsyslog server. We are trying to upgrade to v8 of rsyslog.
One of the things I noticed happening was the rsyslog was that messages coming in from my Cisco ...
0
votes
1answer
34 views
rsyslog on CentOS 8.2
I just configured rsyslog 8.1911 on CentOS 8.2. The server rsyslog.conf has these lines
$template RemoteLogs,"/logs/serverlogs/%$YEAR%-%$MONTH%-$DAY%/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?...
0
votes
0answers
31 views
send logs of flask through rsyslog on remote server
I have flask running in my environment which creates logs in /var/log/api/api.log. i have configured rsyslog service to send all logs to my remote server but rsyslog sending api.logs to syslog file ...
1
vote
1answer
123 views
Rsyslog 8 dynafile with a template
I'm trying to setup rsyslog to use the template RSYSLOG_TraditionalFileFormat as the default action template, but for some specific messages i need to use another template. In both cases i need ...
