Re: rsyslog, syslog-ng and journald all at the same time?

2018-11-08 Thread Robert P. J. Day
On Thu, 8 Nov 2018, Tom Horsley wrote: > On Thu, 8 Nov 2018 19:02:29 -0500 (EST) > Robert P. J. Day wrote: > > > in any event, does that configuration even make sense? can all > > three of those logging services co-exist? or must i have done > > something weird and illogical at some point to get

Re: rsyslog, syslog-ng and journald all at the same time?

2018-11-08 Thread Tom Horsley
On Thu, 8 Nov 2018 19:02:29 -0500 (EST) Robert P. J. Day wrote: > in any event, does that configuration even make sense? can all three > of those logging services co-exist? or must i have done something > weird and illogical at some point to get into this situation? I know nothing of syslog-ng,

Re: rsyslog, syslog-ng and journald all at the same time?

2018-11-08 Thread Ed Greshko
On 11/9/18 8:31 AM, Robert P. J. Day wrote: > On Fri, 9 Nov 2018, Ed Greshko wrote: > >> On 11/9/18 8:02 AM, Robert P. J. Day wrote: >>> was poking around logging and just now noticed that, on my fedora 29 >>> system, both of rsyslog and syslog-ng (and, i'm assuming systemd >>> journalling) are r

Re: rsyslog, syslog-ng and journald all at the same time?

2018-11-08 Thread Robert P. J. Day
On Fri, 9 Nov 2018, Ed Greshko wrote: > On 11/9/18 8:02 AM, Robert P. J. Day wrote: > > was poking around logging and just now noticed that, on my fedora 29 > > system, both of rsyslog and syslog-ng (and, i'm assuming systemd > > journalling) are running at the same time. is that normal? i don't

Re: rsyslog, syslog-ng and journald all at the same time?

2018-11-08 Thread Ed Greshko
On 11/9/18 8:02 AM, Robert P. J. Day wrote: > was poking around logging and just now noticed that, on my fedora 29 > system, both of rsyslog and syslog-ng (and, i'm assuming systemd > journalling) are running at the same time. is that normal? i don't > recall ever messing with installing addition

Re: rsyslog problem

2015-11-25 Thread Timothy Murphy
Andrew R Paterson wrote: > On Wednesday 25 November 2015 13:57:49 Timothy Murphy wrote: >> I'm running Fedora-23/KDE, and am trying to activate /var/log/messages, >> but when I run "sudo systemctl restart rsyslog" I get the entry >> imjournal: fscanf on state file `/var/lib/rsyslog/imjournal.stat

Re: rsyslog problem

2015-11-25 Thread Andrew R Paterson
On Wednesday 25 November 2015 13:57:49 Timothy Murphy wrote: > imjournal: fscanf on state file `/var/lib/rsyslog/imjournal.state' failed A quick google gives something that may be relevent https://bugzilla.redhat.com/show_bug.cgi?id=1095784 -- users mailing list users@lists.fedoraproject.org

Re: rsyslog problem

2015-11-25 Thread Timothy Murphy
Timothy Murphy wrote: >>> Has anyone managed to get information in /var/log/messages >>> as in pre-systemd days? >> >> From my notes on restoring sanity in fedora 22: >> >> edit /etc/systemd/journald.conf set Storage=none, ForwardToSyslog=yes > > Thanks very much for your response, > I've made

Re: rsyslog problem

2015-11-25 Thread Timothy Murphy
Tom Horsley wrote: >> Has anyone managed to get information in /var/log/messages >> as in pre-systemd days? > > From my notes on restoring sanity in fedora 22: > > edit /etc/systemd/journald.conf set Storage=none, ForwardToSyslog=yes Thanks very much for your response, I've made the two changes

Re: rsyslog problem

2015-11-25 Thread Tom Horsley
On Wed, 25 Nov 2015 11:59:43 + Timothy Murphy wrote: > Has anyone managed to get information in /var/log/messages > as in pre-systemd days? From my notes on restoring sanity in fedora 22: edit /etc/systemd/journald.conf set Storage=none, ForwardToSyslog=yes install rsyslog if it isn't there

Re: rsyslog "stop" syntax

2015-08-16 Thread Andy Blanchard
Depends on what you are trying to achieve: :msg, contains, "some string" stop (on one line) will discard any message containing "some string". :msg, contains, "some other string" /var/log/messages & stop (across two lines) will cause any message containing "some other string" to be logged in me

Re: rsyslog "stop" syntax

2015-08-16 Thread Pál , László
Or use syslog-ng :) Rainer's ideas about the syntax and documentation is quite interesting :) L I have a bunch of lines like this in /etc/rsyslog.d/systemd-drivel.conf: :msg, contains, "Activating via systemd" ~ :msg, contains, "Activation via systemd failed" ~ Every time I boot, rsyslogd compla

Re: rsyslog "stop" syntax

2015-08-11 Thread Tom H
On Sun, Aug 9, 2015 at 7:11 PM, Tom Horsley wrote: > > I have a bunch of lines like this in > /etc/rsyslog.d/systemd-drivel.conf: > > :msg, contains, "Activating via systemd" ~ > :msg, contains, "Activation via systemd failed" ~ > > Every time I boot, rsyslogd complains about > the deprecated synt

Re: rsyslog "stop" syntax

2015-08-09 Thread Tom Horsley
On Sun, 09 Aug 2015 16:44:51 -0700 Doug H. wrote: > > So basically I replace the ~ with & stop ? > > I don't remember why I put it on the second line but I suspect I found > something via google. Well, when I try it, rsyslogd won't start, so it hates something about my file. I guess I'll stic

Re: rsyslog "stop" syntax

2015-08-09 Thread Doug H.
On Sun, 2015-08-09 at 19:36 -0400, Tom Horsley wrote: > On Sun, 09 Aug 2015 16:28:16 -0700 > Doug H. wrote: > > > :fromhost-ip, isequal, "192.168.10.1" /var/log/pace.log > > & stop > > So basically I replace the ~ with & stop ? I don't remember why I put it on the second line but I suspect I fo

Re: rsyslog "stop" syntax

2015-08-09 Thread Tom Horsley
On Sun, 09 Aug 2015 16:28:16 -0700 Doug H. wrote: > :fromhost-ip, isequal, "192.168.10.1" /var/log/pace.log > & stop So basically I replace the ~ with & stop ? Is it really on the 2nd line or did the email line wrap? :-). -- users mailing list users@lists.fedoraproject.org To unsubscribe or ch

Re: rsyslog "stop" syntax

2015-08-09 Thread Doug H.
On Sun, 2015-08-09 at 19:11 -0400, Tom Horsley wrote: > I have a bunch of lines like this in > /etc/rsyslog.d/systemd-drivel.conf: > > :msg, contains, "Activating via systemd" ~ > :msg, contains, "Activation via systemd failed" ~ > > Every time I boot, rsyslogd complains about > the deprecated sy

Re: rsyslog

2015-03-08 Thread Tom H
On Fri, Mar 6, 2015 at 11:42 AM, Glenn Holmer wrote: > On 03/05/2015 07:28 PM, Dan Irwin wrote: >> >> Honestly, most people (as in net/sys admins) don't even use Linux >> anymore. They use Windows 7 or Macs. > > Huh? Perhaps he means something like http://mjg59.dreamwidth.org/31714.html -- user

Re: rsyslog

2015-03-07 Thread Joonas Sarajärvi
2015-03-07 11:04 GMT+02:00 Tim : > On Fri, 2015-03-06 at 08:28 -0700, Pete Travis wrote: >> No, the journalctl man page does not tell you about ntp logs, nor do >> the rsyslog pages explain grep :) > > ;-) > > The man page suggested that the search parameter was a service name > (that I wouldn't kn

Re: rsyslog

2015-03-07 Thread Tim
On Fri, 2015-03-06 at 08:28 -0700, Pete Travis wrote: > No, the journalctl man page does not tell you about ntp logs, nor do > the rsyslog pages explain grep :) ;-) The man page suggested that the search parameter was a service name (that I wouldn't know, at the time), as opposed to just being a

Re: rsyslog

2015-03-06 Thread Rahul Sundaram
HI On Fri, Mar 6, 2015 at 11:42 AM, Glenn Holmer wrote: > On 03/05/2015 07:28 PM, Dan Irwin wrote: > > Honestly, most people (as in net/sys admins) don't even use Linux > > anymore. They use Windows 7 or Macs. > He probably means that they are using Mac or Windows to manage Linux servers remote

Re: rsyslog

2015-03-06 Thread Glenn Holmer
On 03/05/2015 07:28 PM, Dan Irwin wrote: > Honestly, most people (as in net/sys admins) don't even use Linux > anymore. They use Windows 7 or Macs. Huh? -- Glenn Holmer (Linux registered user #16682) "After the vintage season came the aftermath -- and Cenbe." -- users mailing list users@lists.f

Re: rsyslog

2015-03-06 Thread Pete Travis
On Mar 6, 2015 8:09 AM, "Tim" wrote: > > > On Wed, 2015-03-04 at 12:04 -0700, Pete Travis wrote: > > If you're open to typing a different command to access logs, here are > > a few you might find interesting: > > Only the other day, I wanted to see what the NTP client, or whatever it > is called n

Re: rsyslog

2015-03-06 Thread Tim
On Wed, 2015-03-04 at 12:04 -0700, Pete Travis wrote: > If you're open to typing a different command to access logs, here are > a few you might find interesting: Only the other day, I wanted to see what the NTP client, or whatever it is called now, was up to. I couldn't find an easy way to do wh

Re: rsyslog

2015-03-05 Thread Dan Irwin
On Thu, Mar 5, 2015 at 10:39 AM, Bill Oliver wrote: > > What I care about as a *user* is turning on my computer and being able to > get my work done without making futzing with the box my primary focus. I > want my *work* to be my primary focus. I prefer to admin my own machines > for a number

Re: rsyslog

2015-03-05 Thread Dan Irwin
Thank you Tom, you are helpful as always. On Tue, Mar 3, 2015 at 9:19 PM, Tom Horsley wrote: > On Tue, 3 Mar 2015 13:46:43 +1000 > Dan Irwin wrote: > > > Hi all, > > > > What kind of secret voodoo does one need to use rsyslog on a systemd > > system? Is it even possible? > > From my notes on mak

Re: rsyslog

2015-03-05 Thread Chris Murphy
On Thu, Mar 5, 2015 at 9:06 AM, Will Yonker wrote: > Are you one of the > developers that made this change? Did you take into account all the history > we have had with that file? http://fedoraproject.org/wiki/Changes/NoDefaultSyslog Fedora is a community project. The people who decide are nec

Re: rsyslog

2015-03-05 Thread Will Yonker
> I demonstrated several simple and practical commands that have real-life > use cases, where similar filtering would not be as simple or direct with > bare rsyslog. The addition of journald was not arbitrary, and I was > offering genuinely helpful advice, not trolling. > > If my tone at the be

Re: rsyslog

2015-03-04 Thread James Hogarth
On Mar 5, 2015 1:03 AM, "Chris Murphy" wrote: > > logrotate-3.8.7-4.fc21.x86_64 is already installed by default with > Fedora 21 Workstation. I don't know why, seems unnecessary. But it's > there. > Don't forget this covers more than just syslog messages... Httpd logs for instance need logrotate

Re: rsyslog

2015-03-04 Thread Chris Murphy
On Wed, Mar 4, 2015 at 6:05 PM, Tom Horsley wrote: > On Wed, 4 Mar 2015 19:50:11 -0500 > Tom H wrote: > >> I just did a clean install of F21 with rsyslog and it's logging to >> "/var/log/messages" and co without any edits. > > I get about 1/10th of the log messages in /var/log/messages > with a "s

Re: rsyslog

2015-03-04 Thread Tom Horsley
On Wed, 4 Mar 2015 19:50:11 -0500 Tom H wrote: > I just did a clean install of F21 with rsyslog and it's logging to > "/var/log/messages" and co without any edits. I get about 1/10th of the log messages in /var/log/messages with a "standard" install, there is something there, but nothing like all

Re: rsyslog

2015-03-04 Thread Chris Murphy
logrotate-3.8.7-4.fc21.x86_64 is already installed by default with Fedora 21 Workstation. I don't know why, seems unnecessary. But it's there. Chris Murphy -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/l

Re: rsyslog

2015-03-04 Thread Chris Murphy
On Wed, Mar 4, 2015 at 5:39 PM, Bill Oliver wrote: > So... the statement "Hey, this fedora-as-a-developer's-playground stuff is > getting in the way of me doing my thing" is not "overtly negative" and it's > not just an "opinion rant." It's a *user* talking about *user* issues. > And the respons

Re: rsyslog

2015-03-04 Thread Tom H
On Wed, Mar 4, 2015 at 5:20 PM, Tom Horsley wrote: > On Wed, 4 Mar 2015 15:53:15 Tom H wrote: >> >> The reason that you have to make these changes to rsyslog.conf and >> journal.conf is that rsyslog is set up to get journal logs by default >> via its imjournal module. So your changes aren't necess

Re: rsyslog

2015-03-04 Thread Bill Oliver
On Wed, 4 Mar 2015, Pete Travis wrote: If my tone at the beginning suggested otherwise, it was because I've seen threads like this turn into "I like the old thing fine so Fedora should not use the new thing" many, many times.  The discussion is never productive and rarely based on any techn

Re: rsyslog

2015-03-04 Thread Pete Travis
On Mar 4, 2015 3:17 PM, "Will Yonker" wrote: > > >> Doesn't this depend on what version you install? I think the > >> workstation > > version does not include rsyslog whereas the server version does. > >> > >> I too found it more than a little concerning when I was trying to help > > troubleshoot

Re: rsyslog

2015-03-04 Thread Tom Horsley
On Wed, 4 Mar 2015 15:53:15 -0500 Tom H wrote: > The reason that you have to make these changes to rsyslog.conf and > journal.conf is that rsyslog is set up to get journal logs by default > via its imjournal module. So your changes aren't necessary; unless > there's a bug. Depends on which releas

Re: rsyslog

2015-03-04 Thread Will Yonker
>> Doesn't this depend on what version you install? I think the >> workstation > version does not include rsyslog whereas the server version does. >> >> I too found it more than a little concerning when I was trying to help > troubleshoot an issue on one of our admin's systems. I logged in, did

Re: rsyslog

2015-03-04 Thread Tom H
On Tue, Mar 3, 2015 at 6:19 AM, Tom Horsley wrote: > On Tue, 3 Mar 2015 13:46:43, Dan Irwin wrote: >> >> What kind of secret voodoo does one need to use rsyslog on a systemd >> system? Is it even possible? > > From my notes on making fedora usable: > > rsyslog isn't installed by default, so you ge

Re: rsyslog

2015-03-04 Thread Joe Zeff
On 03/04/2015 11:04 AM, Pete Travis wrote: If you're open to typing a different command to access logs, here are a few you might find interesting: And, of course, if you use any of them frequently, you can always use alias to make things simpler. -- users mailing list users@lists.fedoraprojec

Re: rsyslog

2015-03-04 Thread Pete Travis
On Mar 4, 2015 8:41 AM, wrote: > > > On Tue, 3 Mar 2015 13:46:43 +1000 > > Dan Irwin wrote: > > > >> Hi all, > >> > >> What kind of secret voodoo does one need to use rsyslog on a systemd > >> system? Is it even possible? > > > > From my notes on making fedora usable: > > > > rsyslog isn't install

Re: rsyslog

2015-03-04 Thread Tom Horsley
On Wed, 4 Mar 2015 15:40:39 - arag...@dcsnow.com wrote: > Is there really a good reason to > not use the messages file anymore? If you are trying to use the system, no, there is no good reason. If you are tying to sell more maintenance contracts, then yes, changing things for no good reason

Re: rsyslog

2015-03-04 Thread aragonx
> On Tue, 3 Mar 2015 13:46:43 +1000 > Dan Irwin wrote: > >> Hi all, >> >> What kind of secret voodoo does one need to use rsyslog on a systemd >> system? Is it even possible? > > From my notes on making fedora usable: > > rsyslog isn't installed by default, so you get no log files > you can lo

Re: rsyslog

2015-03-03 Thread Tom Horsley
On Tue, 3 Mar 2015 13:46:43 +1000 Dan Irwin wrote: > Hi all, > > What kind of secret voodoo does one need to use rsyslog on a systemd > system? Is it even possible? From my notes on making fedora usable: rsyslog isn't installed by default, so you get no log files you can look at with normal too

Re: rsyslog

2015-03-02 Thread Chris Murphy
On Mon, Mar 2, 2015 at 8:46 PM, Dan Irwin wrote: > Hi all, > > What kind of secret voodoo does one need to use rsyslog on a systemd system? > Is it even possible? Yes it happens to be default on Fedora 21 Server and CentOS 7, works there. systemctl status systemd-journald.socket systemctl status