Re: Syslog-NG

2016-06-03 Thread David
On Fri, 2016-06-03 at 08:16 +0100, Joe wrote: > On Fri, 03 Jun 2016 07:42:46 +0100 > David wrote: > > > Dear Group, > > > > I am running Syslog-ng on a Raspberry Pi, it stores the data sent to > > it on a 64G memory stick. It's working very well. > &g

Re: Syslog-NG

2016-06-03 Thread Joe
On Fri, 03 Jun 2016 07:42:46 +0100 David wrote: > Dear Group, > > I am running Syslog-ng on a Raspberry Pi, it stores the data sent to > it on a 64G memory stick. It's working very well. > > I retrieve the syslog file by SSHing into the Pi and copying the file > to my

Re: Syslog-NG

2016-06-03 Thread Andrew Clark
split should be able to break it into multiple pieces that you can read. On 3 June 2016 at 16:42, David wrote: > Dear Group, > > I am running Syslog-ng on a Raspberry Pi, it stores the data sent to it > on a 64G memory stick. It's working very well. > > I retrieve the syslo

Syslog-NG

2016-06-02 Thread David
Dear Group, I am running Syslog-ng on a Raspberry Pi, it stores the data sent to it on a 64G memory stick. It's working very well. I retrieve the syslog file by SSHing into the Pi and copying the file to my main PC. The problem I have is that the file has now grown to 3.7G and normal

Syslog-ng problem : IP Address folder

2012-03-23 Thread Julien Groselle
Hello everybody, I have posted that on syslog-ng mailing-list, but i don't have any answer for now... I try to submit my problem to debian's experts ;) -- I work for a lange society, and we use syslog-ng for 5 years now. We have a centralized server with storage tank to keep lo

Re: syslog-ng log output corrupted

2010-05-04 Thread Camaleón
On Tue, 04 May 2010 11:08:12 +0200, Imre Vida wrote: > a few days ago syslog-ng stopped working properly on my laptop. > > Its output consists only of error report lines such as the following: (...) I maybe wrong, but that looks like the common output. They're just the syslo

syslog-ng log output corrupted

2010-05-04 Thread Imre Vida
a few days ago syslog-ng stopped working properly on my laptop. Its output consists only of error report lines such as the following: May 3 06:35:16 sharp syslog-ng[4361]: Log statistics; processed='destination(d_error)=249', processed='cent er(received)=0', processed=&

Re: syslog-ng log output corrupted

2010-05-04 Thread i . vida
On Tue, May 04, 2010 at 11:08:12AM +0200, Imre Vida wrote: > > a few days ago syslog-ng stopped working properly on my > laptop. > > Its output consists only of error report lines such as the following: > May 3 06:35:16 sharp syslog-ng[4361]: Log statistics; > processed

Re: Filtering Syslog-NG

2007-09-05 Thread Nathan
estination d_CUDA { file("/var/log/CUDA/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"); }; and I setup the following filter: filter f_cuda { host(x.x.x.x); }; x.x.x.x should be a regular expression (for example: host("fubar")) and you want that to match whatever syslog-ng l

Re: Filtering Syslog-NG

2007-09-05 Thread Allan Wind
stination: > > destination d_CUDA { > file("/var/log/CUDA/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"); }; > > > and I setup the following filter: > > filter f_cuda { host(x.x.x.x); }; x.x.x.x should be a regular expression (for example: host("fubar&

Filtering Syslog-NG

2007-09-05 Thread Nathan
I've got several hosts all dumping their syslog logs to a dedicated box running syslog-ng. As it stands I used the following line in the syslog-ng.conf file to create seperate files and directories for the different boxes. destination d_ALL { file("/var/log/$R_YEAR/$R_MONTH/$HO

Re: syslog-ng and etch

2007-06-29 Thread Steve Kemp
On Fri Jun 29, 2007 at 20:44:17 +1000, Robert S wrote: > I would like to replace syslog with syslog-ng on Etch. Am I likely to run > into any problems with breakages etc if I do this? No. Steve -- # Kink-Friendly Dating http://ctrl-alt-date.com/ -- -- To UNSUBSCRIBE, email to

syslog-ng and etch

2007-06-29 Thread Robert S
I would like to replace syslog with syslog-ng on Etch. Am I likely to run into any problems with breakages etc if I do this? TIA. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: iptables not logging via syslog-ng

2006-09-12 Thread Justin Piszcz
Yeah, my guess is you don't have the ulogd support in the kernel. On Mon, 11 Sep 2006, Justin F. Knotzke wrote: Thanks Justin again for the reply.. Here is what I have: justin:/var/log/ulog# cat /etc/ulogd.conf nlgroup 6 logfile /var/log/ulog/ulogd.log loglevel 1 rmem 131071 bufsize 15

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin Piszcz
Also you need the ulogd module loaded or compiled into the kernel. On Mon, 11 Sep 2006, Justin Piszcz wrote: Is your firewall working? Have you tested it? On Mon, 11 Sep 2006, Justin F. Knotzke wrote: Thanks Justin again for the reply.. Here is what I have: justin:/var/log/ulog# cat /et

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin Piszcz
Is your firewall working? Have you tested it? On Mon, 11 Sep 2006, Justin F. Knotzke wrote: Thanks Justin again for the reply.. Here is what I have: justin:/var/log/ulog# cat /etc/ulogd.conf nlgroup 6 logfile /var/log/ulog/ulogd.log loglevel 1 rmem 131071 bufsize 15 syslogfile /var/log

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin F. Knotzke
Thanks Justin again for the reply.. Here is what I have: justin:/var/log/ulog# cat /etc/ulogd.conf nlgroup 6 logfile /var/log/ulog/ulogd.log loglevel 1 rmem 131071 bufsize 15 syslogfile /var/log/ulog/syslogemu.log syslogsync 1 plugin /usr/lib/ulogd/ulogd_LOGEMU.so Here are my firewall

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin Piszcz
You need to DEFINE the log rule. rule123 -j ULOG --ulog-nlgroup 5 --ulog-prefix "LOGGING_BLOCK" rule123 -j DROP # look at the nlgroup = 5 above # netlink multicast group (the same as the iptables --ulog-nlgroup param) nlgroup=5 then, use logemu: # output plugins. plugin="/app/ulogd-1.23/lib/ulo

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin F. Knotzke
On 9/11/06, Justin Piszcz <[EMAIL PROTECTED]> wrote: Why not use ulogd? That is its purpose, to "log" iptables logs. Good question, I just installed it. Looking at the ulog config file, it appears that it should be logging to /var/log/ulog/ I see the entries indicating that ulog has start

Re: iptables not logging via syslog-ng

2006-09-11 Thread Justin Piszcz
On Mon, 11 Sep 2006, Justin F. Knotzke wrote: Hi, iptables does not log via syslog-ng. There is nothing in kern.log or in syslog.. I have the package's defaut syslog-ng.conf (see below) This is the logging entries for my firewall (monmotha). Any ideas ? Thanks J #These logging c

iptables not logging via syslog-ng

2006-09-11 Thread Justin F. Knotzke
Hi, iptables does not log via syslog-ng. There is nothing in kern.log or in syslog.. I have the package's defaut syslog-ng.conf (see below) This is the logging entries for my firewall (monmotha). Any ideas ? Thanks J #These logging chains are valid to specify in DROP= above

syslog messages are not sending to syslog-ng server

2006-03-24 Thread david robert
Hi,   I have installed syslog-ng and in server i am getting all the logs in to mysqldb.I am having real problem i am not able to receive any messages from client machines.Client machines are using syslog.conf file to send the log file to server i have defined client syslog file as follows

Parse problem starting syslog-ng...HELP

2005-08-03 Thread javier rojas
hello i'm having trouble starting the syslog-ng server, when i try to start it i get this error: # /etc/init.d/syslog-ng start Starting system logger: parse error at 17 Parse error reading configuration file, exiting.     [F

Re: syslog-ng failed to start

2005-07-27 Thread javier rojas
and leaved it to 0, here's what i got... # /etc/init.d/syslog-ng start klogctl: Invalid argument KERNEL_RINGBUF_SIZE is of unaccepted value. Starting system logging: syslog-ng start failed. now appears another error, is this syslog-ng.conf related??? 2005/7/27, Christopher Pharo Glæserud &l

Re: syslog-ng failed to start

2005-07-27 Thread Christopher Pharo Glæserud
javier rojas, > # /etc/init.d/syslog-ng start > CONSOLE_LOG_LEVEL is of unaccepted value. > KERNEL_RINGBUF_SIZE is of unaccepted value. > Starting system logging: syslog-ng start failed. These two values are checked from the syslog-ng script. CONSOLE_LOG_LEVEL is expected to be 0-

syslog-ng failed to start

2005-07-27 Thread javier rojas
hello, im running debian 3.1 and just installed syslog-ng, #apt-get install syslog-ng Reading Package Lists... DoneBuilding Dependency Tree... DoneThe following packages will be REMOVED: klogd sysklogdThe following NEW packages will be installed: syslog-ng 0 upgraded, 1 newly installed, 2 to

syslog-ng error message while starting / stopping: KERNEL_RINGBUF_SIZE & KERNEL_RINGBUF_SIZE is of unaccepted value

2005-06-14 Thread Mart Frauenlob
Hello debian-user mailing list ! Fresh installed system Dual MMX 466 with sarge r0 (not r0a) and 2.6.8-2-686-smp kernel. echolon:~# apt-get install syslog-ng Reading Package Lists... Done Building Dependency Tree... Done The following packages will be REMOVED: klogd sysklogd The

syslog-ng and size based logrotate

2004-11-17 Thread xavier
Hi, I setted up my workstation to logrotate logs based on size. thoses entries are in /etc/logrotate.d/syslog-ng : [...] /var/log/ppp.log { rotate 20 size=10M missingok notifempty compress } [...] /var/log/syslog { rotate 20 size=10M compress postrotate

Re: debian hangs with syslog/syslog-ng (urgent)

2004-11-12 Thread Henrique de Moraes Holschuh
in logs but many cron and defuncts process. I > saw an url saying that it is because of syslog and login (or > passwd/shadow I don't remember anymore). > I removed syslog and I changed it in syslog-ng. Since, It works fine. > But now, it comes back to hang!! I had to disable "sys

debian hangs with syslog/syslog-ng (urgent)

2004-11-11 Thread Manou Rabary
n url saying that it is because of syslog and login (or passwd/shadow I don't remember anymore). I removed syslog and I changed it in syslog-ng. Since, It works fine. But now, it comes back to hang!! I had to disable "syslog-ng" to solve the problem. And now, my system runs without l

syslog-ng disappears for days?

2004-07-17 Thread Carl Fink
Yesterday I noticed that no syslog-managed logs had been written to on my Sarge system for several days. "ps ax" didn't show any syslog daemon running. When I manually started syslog-ng, suddenly it wrote several hundred K of log entries. Since I've restarted it (and I'

Logging from Shorewall to syslog-ng

2003-03-23 Thread Kurt Petersen
Hi Could someone please help me clarify the logging mechanism between Shorewall and syslog-ng? Both are installed "out-of-the-box". In Shorewall, logging is set to: LOGFILE="/var/log/messages" Well, NO logging is done in that file by Shorewall. All logging is done o

Re: syslog-ng[3946]: STATS: dropped 0

2002-12-22 Thread Jeff
Sam Varghese, 2002-Dec-23 00:01 +1100: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I've got a system that has started to produce many messages in > the system logs that say "syslog-ng[3946]: STATS: dropped 0". > > I've looked over the syslog-

syslog-ng[3946]: STATS: dropped 0

2002-12-22 Thread Sam Varghese
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've got a system that has started to produce many messages in the system logs that say "syslog-ng[3946]: STATS: dropped 0". I've looked over the syslog-ng docs, but I've been unable to figure out what these messages mean.

Re: syslog-ng

2002-09-09 Thread Allan Wind
On 2002-09-09 19:17:35, Matus fantomas Uhlar wrote: > I had the same problem and I found out that klogd is not able to log to > stream, therefore i needed to change unig-stream to unig-dgram. http://www.campin.net/syslog-ng/faq.html#klogd is wrong then, if this idneed was on a lin

Re: syslog-ng

2002-09-09 Thread Matus \"fantomas\" Uhlar
-> > For some reason when I upgraded to syslog-ng some time ago (removing -> > sysklogd) my kern.log stopped showing. My syslog-ng.conf file seems to -> > include a kern.log -> -> Yep. That happened to me too. Somebody, somewhere, sometime, -> posted a soluti

Re: syslog-ng

2002-09-09 Thread Javier Bertoli
On Sat, 31 Aug 2002, Phillip Hofmeister wrote: > All, > > For some reason when I upgraded to syslog-ng some time ago (removing > sysklogd) my kern.log stopped showing. My syslog-ng.conf file seems to > include a kern.log Yep. That happened to me too. Somebody, some

syslog-ng

2002-08-31 Thread Phillip Hofmeister
All, For some reason when I upgraded to syslog-ng some time ago (removing sysklogd) my kern.log stopped showing. My syslog-ng.conf file seems to include a kern.log Can anyone think why it would not be showing anything in kern.log? destination kern { file("/var/log/kern.log" o

Re: syslog-ng gets no kernel messages --- SOLVED

2002-06-05 Thread Martin Hermanowski
On Tue, Jun 04, 2002 at 03:51:45PM -0400, Jameson C. Burt wrote: > I installed the package "syslog-ng", replacing the package "sysklogd". > After this, my kernel logs (including my "iptables" logs) no longer > went to /var/log/{kern,debug,messages}, or

syslog-ng gets no kernel messages --- SOLVED

2002-06-04 Thread Jameson C. Burt
I installed the package "syslog-ng", replacing the package "sysklogd". After this, my kernel logs (including my "iptables" logs) no longer went to /var/log/{kern,debug,messages}, or any other file in /var/log. Syslog-ng would log the usual daemon messages. After spen

Re: "syslog-ng[16821]: STATS: dropped 0" ?

2002-02-05 Thread Oleksandr Moskalenko
* Michael A. Miller ([EMAIL PROTECTED]) wrote: > > I've got a system that has started to produce many messages in > the system logs that say "syslog-ng[16821]: STATS: dropped 0". > I've looked over the syslog-ng docs, but I've been unable to > figure o

"syslog-ng[16821]: STATS: dropped 0" ?

2002-02-05 Thread Michael A. Miller
I've got a system that has started to produce many messages in the system logs that say "syslog-ng[16821]: STATS: dropped 0". I've looked over the syslog-ng docs, but I've been unable to figure out what these messages mean. Can anyone explain them to me? Mike

Syslog-ng problem

2002-01-02 Thread Ágics Balázs
Hi all! I have a problem with syslog-ng logging. It writes iptables loggs to my console when I logged in and I can't work. If I use remote login don't writes! Any idea??? Thanks for help! Balázs

Re: syslog-ng

2001-12-10 Thread Henrique de Moraes Holschuh
On Mon, 10 Dec 2001, Imre Vida wrote: > What i wanted to ask is why does this message appears on the active > console now? Bogosity in the klogd package, I think. Try manually giving it -c1 or -c2 on startup, and it should shut up. You could also try restarting it, it may have lost the connection

Re: syslog-ng

2001-12-10 Thread Imre Vida
Hi and thanks for the response, i think i was somewhat sloppy with my question - sorry about that > > since i upgraded syslog-ng (in testing) > > the following message gets logged to the active console > > whenever the netcard module is load/unloaded: > > > > PCI:

Re: syslog-ng

2001-12-10 Thread Sean 'Shaleh' Perry
On 09-Dec-2001 Imre Vida wrote: > Hi, > > since i upgraded syslog-ng (in testing) > the following message gets logged to the active console > whenever the netcard module is load/unloaded: > > > PCI: Found IRQ 10 for device 00:0b.0 > PCI: Sharing IRQ 10 with 00:0a.0

syslog-ng

2001-12-09 Thread Imre Vida
Hi, since i upgraded syslog-ng (in testing) the following message gets logged to the active console whenever the netcard module is load/unloaded: PCI: Found IRQ 10 for device 00:0b.0 PCI: Sharing IRQ 10 with 00:0a.0 PCI: Sharing IRQ 10 with 00:0b.1 3c59x: Donald Becker and others. www.scyld.com

Re: syslog-ng

2001-04-12 Thread Nate Amsden
Andrew D Dixon wrote: > > Has anyone out there had much experience with syslog-ng (Next Generation > Syslog)? I'm looking at it for a project that I'm starting and I was > just trying to get a sense of how stable, reliable, etc . . . it is. i just started using it on one

syslog-ng

2001-04-12 Thread Andrew D Dixon
Has anyone out there had much experience with syslog-ng (Next Generation Syslog)? I'm looking at it for a project that I'm starting and I was just trying to get a sense of how stable, reliable, etc . . . it is. Any comments would be appreciated. Thanks, Andy

Re: Q: syslog-ng remote logging.

2000-10-05 Thread Mike Fedyk
Andreas Rabus wrote: > > Greetings, > > sitting in my box, checking my logs... > and trying to log from Host A to Host B with tcp i always get some strange > "error" Messages when starting my syslog-ng with option "-d": > > "Error Creating AF_

Q: syslog-ng remote logging.

2000-10-05 Thread Andreas Rabus
Greetings, sitting in my box, checking my logs... and trying to log from Host A to Host B with tcp i always get some strange "error" Messages when starting my syslog-ng with option "-d": "Error Creating AF_INET socket (Operation now in progress)" The l

syslog-ng: causes REMOTE machines to lock out logins even!

1999-12-20 Thread Lazarus Long
- From: Lazarus Long <[EMAIL PROTECTED]> Subject: syslog-ng: causes REMOTE machines to lock out logins even! To: [EMAIL PROTECTED] X-Mailer: bug 3.2.7 Date: Mon, 20 Dec 1999 21:08:11 + Package: syslog-ng Version: 1.3.10-1 Severity: critical 4) Critical bug. Makes unrelated softw