Directing syslog messages to a particular file

Hi Guys,
I have successfully been able to direct my Airport Extreme Syslog files to my macmini which is acting as a syslog server.
I uncommented the networking listening section of the /System/Library/LaunchDaemons/com.apple.syslogd.plist in order to achieve the above.
I am having trouble however directing the feed to a file specific to the airport extreme in the console.
I have created a file using:
sudo touch /private/var/log/AirportRouter.log (and it successfully appears in the console)
I added the line
local0.* /private/var/log/AirportRouter.log
to the com.apple.syslogd.plist and restarted the computer but it does not receive the log data from the airport extreme.
The airport extreme syslog info simply appears in the 'All Messages" part of the console.
Any ideas on what I have done wrong?
Thanks in advance!

Try adding your line to the /etc/syslog.conf file instead.
Message was edited by: mabaeyens

Similar Messages

Directing syslog messages to a particular file in console

Hi Guys,
I have successfully been able to direct my Airport Extreme Syslog files to my macmini which is acting as a syslog server.
I uncommented the networking listening section of the /System/Library/LaunchDaemons/com.apple.syslogd.plist in order to achieve the above.
I am having trouble however directing the feed to a file specific to the airport extreme in the console.
I have created a file using:
sudo touch /private/var/log/AirportRouter.log (and it successfully appears in the console)
I added the line
local0.* /private/var/log/AirportRouter.log
to the com.apple.syslogd.plist and restarted the computer but it does not receive the log data from the airport extreme.
The airport extreme syslog info simply appears in the 'All Messages" part of the console.
Any ideas on what I have done wrong?
Thanks in advance!

Hi M,
You should manage these log settings editing /private/etc/syslog.conf and asl.conf
Backup original files before changes.
Read the related manual pages and UNIX logger related articles in order to know better how these settings will produce expected reports.
Remember that log messages are produced by the process to the logger, and settings in those files are about how to handle received messages. Some "applications" accept setting for log level they should produce to logger.
I like this article http://www.softpanorama.org/Logs/syslog.shtml and you can search this site for Syslog Configuration and reach other top two related articles. This should give you a good handle.
Do not forget asl.conf.
And for the record, test settings for local0 to local7.
Good luck.

Directing Log4J messages into OC4J log file

Hi,
We currently have a web application that is running on Tomcat. We want to migrate that application over to OC4J. The application currently uses Log4J for messages. What do I have to do to have the application still write to the log4j logs.
Thanks,
J

Try this:
http://buttso.blogspot.com/2007/09/directing-log4j-logs-into-oc4j-logging.html
The application still issues log messages via log4j, but you as an administrator can configure OC4J so that the log4j messages get captured in the OC4J log system so they can be viewed using the log viewer mechanism of OC4J.
-steve-

CSS-Directing request to particular file on webserver

Hi ,
I am trying to direct user request to particular file on webserver.
We have many customer using same portal through different url(DNS Alias).
Is it possible that CSS can direct request to a file (e.g xxx.html) on webserver instead of direction on specified port?
Thanks in Advance
Aniruddha

you can have the CSS intercept the HTTP traffic and have a redirect generated.
The redirect could point to your specific file.
redirect configuration are explained @
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_tech_note09186a0080093ff6.shtml
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_tech_note09186a00801c65b5.shtml
Gilles.

ACS appliance1120 ACS 4.2.1.15 syslog message to syslog server

Hi All ,
I am using ACS 1120 appliance running ACS version 4.2.1.15 , I am pointing out all syslog message to my external syslog server (passed authentication , failed authentication , database replication , administration aduit ,tacacs accounting ) , but i could recieve only passed authentication log message to my external log server , no other log message except passed authentication is pushed to my external log server , But i could see failed attempts , database replication,administrtation audit log message locally on my acs appliance as CSV file ,
Syslog server configuration is configured under all logging (passed , failed , administration , tacacs accounting ) , but i am surprise to see only passed authentication logg is sent out from acs appliance , Is there any patch to be installed for logg message scripting ?? , please advise ..

Refer the link : https://supportforums.cisco.com/discussion/11513026/migrating-acs-420-421
you can directly upgrade from 4.2.0.124 to 5.6 : http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/user/guide/acsuserguide/migrate.html#98379

I have sent a file to the trash bin. When I come to empty the trash bin everything goes out except this one particular file and I get a note saying the file is 'in use' but it is not. How can I delete this file from trash?

I have a Macbook Pro with OS X Lion 10.7.2. I have sent a work file to the trash bin along with many other files. When I empty the trash this one particular file remains and I get a message that this file is still in use. I have tried returning the file to my documents, opening it, closing it and then sending it to trash and again I try to empty trash but the same message comes up - Q - How can I trash this file permanently?

First just try logging out and back in. Whatever is holding on to it may not be running after the logout thus freeing it so you can trash it after logging back in.
You might also try Trash It!
Lastly, look at the following for suggestions:
The X Lab: Solving Trash Problems

TFS Build Error - Exception Message: The specified path, file name, or both are too long. The fully qualified file name must be less than 260 characters

I am trying to set-up CI of Orchard CMS and deploy it on Azure using TF service. I am stuck at following error for path being
longer than 260 characters. However, when counted the total characters in path are 235. Please see the below error :
Other Errors and Warnings
1 error(s), 1 warning(s)
Exception Message: TF400889: The following path contains more than the allowed 259 characters: drop/_PublishedWebsites/Orchard.Web_Package/Archive/Content/C_C/a/src/projects/Orchard/dev/DevAltaf/Orchard/src/Orchard.Web/obj/Debug/Package/PackageTmp/Modules/BrentApart.BannerManager/Scripts/controllers/bannerAssignmentController.js. Specify a shorter path. (type VssServiceException)
Exception Stack Trace: at Microsoft.TeamFoundation.Build.Workflow.Activities.FileContainerDropProvider.EndCopyDirectory(IAsyncResult result)
at Microsoft.TeamFoundation.Build.Workflow.Activities.CopyDirectory.EndExecute(AsyncCodeActivityContext context, IAsyncResult result)
at System.Activities.AsyncCodeActivity.CompleteAsyncCodeActivityData.CompleteAsyncCodeActivityWorkItem.Execute(ActivityExecutor executor, BookmarkManager bookmarkManager)
Inner Exception Details:
Exception Message: The specified path, file name, or both are too long. The fully qualified file name must be less than 260 characters, and the directory name must be less than 248 characters. (type PathTooLongException)
Did anyone came across such issue while deploying Orchard on Azure with TF service? If yes, how did you sort this freaking error?
Thanks,
Altaf B.

Hi AltafB,
For your situation, you can short the path for the source code. Or use a short path for build agent folder in your build definition. You can refer to the links below to solve your problem:
http://blogs.msdn.com/b/aaronhallberg/archive/2007/06/20/team-build-and-260-character-paths.aspx
https://social.msdn.microsoft.com/Forums/vstudio/en-US/1638a5f0-9321-4ff9-9ee7-6d347badb972/please-some-solution-to-the-specified-path-file-name-or-both-are-too-long?forum=tfsbuild
Besides, since you deploy Orchard to Azure, you can also publish it directly using publish profile in Visual Stduio or WebMatrix directly.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Introduce delay of 7 Days for each message of a particular type.

I have a requirment that after receiving a message of a particular type, PI will hold the message for 7 days before processing, originally I thought a wait step in BPM maybe the appropriate solution but it isnt. (Memory usage/BPM blocking)....
Im not sure what the best approach is to meet this requirment, other than a completely custom solution (custom table to store the message - with a background task that continues to process after 7 days).
Ideally the solution will use the PI standard fucntionalty/tools to implement the solution, even using the file adapter to write the messages to the file system and then coming back and reporocessing in 7 days ....
Im not sure ...
Any input ?

Ive had a bit of a think about this ... here is what Im thinking, given there is no defintative way of doing this correctly...
1. Inbound File adapter reads inbound files.
2. Transform and write the file to an outbound directory with a specific fileName mask "Day1_name.xml" based on a UDF.
3. Create 7 File Adapters each running on seperate days 1 -> 7 picking up Files of a specific mask "Day1_*" (Day1 == monday and so on)
4. Write the file to its ultimate destination and archieve the message when the correct file adapter is triggered.
Advantages;
1. No OS involvment - whilst writing a CRON job (shell script) to do this would be relatively simple it does add another point of failure.
2. No excessive wait times/resource usage on PI
3. In the event of a PI crash the file system will be intact where as thread.sleep(?????) will not be.
Disadvantages;
1. Given the possible downfalls of other solutions this seems to be best.
Am I missing anything ...

Empty Message Handling with Receiver File adapter

Hi,
We were using the "Empty-Message-Handling" (status set to Ignore) of Receiver file adapter to stop a 0 KB file from being written to the specified directory.
However, inspite of this, a 0KB file continues to be written.
The specifications are given below-
File Construction Mode - Add Time Stamp
Put File - Directly
Empty Message Handling - Ignore
Maximum Concurrency - 1
File Type - Binary
Can anyone please help with this.
Thanks and Regards,
Shiladitya

HI,
In one of thread the same problem was coming. Just look at the thread.
Receiver file adapter creates empty files, Empty-Message Handling SP19
Or
Follow the weblog for the same requirement.
/people/gowtham.kuchipudi2/blog/2006/01/13/stop-creation-of-an-empty-file-from-file-adapter-using-module
Thnx
Chirag
Reward points if it helps.

LMS 4.2 not processing syslog messages

I have a new install of LMS 4.2 on a virtual appliance. No syslog messages are getting into LMS. They are being received by the server, but are showing up in /var/adm/CSCOpx/log/dmgtd.log, and aren't getting processed by SyslogAnalyser.
Here's the syslog.conf file:
     local6.info                                                                     /var/log/ade/ADE.log
     *.info;mail.none;news.none;authpriv.none;cron.none;local0.none;local1.none      /var/log/messages
     authpriv.*                                                                      /var/log/secure
     mail.*                                                                          -/var/log/maillog
     cron.*                                                                          /var/log/cron
     *.emerg                                                                         *
     uucp,news.crit                                                                  /var/log/spooler
     local7.*                                                                        /var/log/boot.log
     #Application LMS Generated config
     #BEGIN CSCOmd - DO NOT EDIT THESE COMMENTS OR CONTENTS CONTAINED WITHIN - local0 1
     local0.emerg;local0.alert;local0.crit;local0.err;local0.warning;local0.notice;local0.info;local0.debug /var/adm/CSCOpx/log/dmgtd.log
     #END CSCOmd DO NOT EDIT BEFORE THIS LINE 1
     local7.info /var/log/syslog_info
My guess is that the incoming messages are getting written to the wrong file. What do I need to change to correct this?

I found that all of my syslog messages were being captured under /var/log/messages. This was due to my Cisco devices being configured with "logging facility local5". Instead of reconfiguring all of my devices to log to facility local7, I just changed the following line in syslog.conf and restarted (/etc/init.d/syslog restart)
Before:
local7.info /var/log/syslog_info
After:
local5.* /var/log/syslog_info
Probably not the best way to do it, but it worked for me.
-Rick

Syslog messages not showing

Hello,
I have a newly installed LMS 4.1 that had the Syslog feature working for a while.
Recently, the Syslog is no longer displaying any records (neither new or old messages).
Below are the steps I have tried to troubleshoot the problem:
- Installed wireshark : Syslog messages are being received by the LMS server on time
- In the Syslog.log file, I can see that all the Syslog messages are being logged properly
- I tried to disable all the "Syslog Message Filters" but nothing changed
In the SyslogCollector.log, I can find the below logs:
NMSROOT is C:/PROGRA~2/CSCOpx
propFileC:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\C:\PROGRA~2\CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
Unable to find the file C:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\C:\PROGRA~2\CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
NMSROOT is C:/PROGRA~2/CSCOpx
propFileC:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,673, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,674, System Initialized.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,684, Queue Cap 100000
SyslogCollector - [Thread: main] WARN , 04 Mar 2013 14:54:45,468, Unable to resurrect connection to a subscriber.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:45,491, Service started...
I am not sure what to check now. Kindly your suggestions.
Thanks,
Justine.

Hello,
I have a newly installed LMS 4.1 that had the Syslog feature working for a while.
Recently, the Syslog is no longer displaying any records (neither new or old messages).
Below are the steps I have tried to troubleshoot the problem:
- Installed wireshark : Syslog messages are being received by the LMS server on time
- In the Syslog.log file, I can see that all the Syslog messages are being logged properly
- I tried to disable all the "Syslog Message Filters" but nothing changed
In the SyslogCollector.log, I can find the below logs:
NMSROOT is C:/PROGRA~2/CSCOpx
propFileC:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\C:\PROGRA~2\CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
Unable to find the file C:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\C:\PROGRA~2\CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
NMSROOT is C:/PROGRA~2/CSCOpx
propFileC:/PROGRA~2/CSCOpx\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,673, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,674, System Initialized.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:38,684, Queue Cap 100000
SyslogCollector - [Thread: main] WARN , 04 Mar 2013 14:54:45,468, Unable to resurrect connection to a subscriber.
SyslogCollector - [Thread: main] INFO , 04 Mar 2013 14:54:45,491, Service started...
I am not sure what to check now. Kindly your suggestions.
Thanks,
Justine.

Solaris 9 syslog messages are IP not hostname

I am trying to setup Solaris 9 to forward its syslog messages to a central server, and its working fine except the logs being sent have the IP address and not the hostname. Is there a way to change this? Thanks

no, i mean you will need to put entries for the remote hosts on your central server, or set up IN NS records in your nameserver for reverse mappings from IP -> host (not host -> IP).
Shouldn't need any switches or config changes to syslogd for it to work.
Also, check your /etc/nsswitch.conf file has at least "files dns" set for hosts.

Had to wipe and reload my computer, am trying to download web premium 5.5 but when i try to open and install gives me an error message of trouble extracting file try downloading again. How can i download?

Had to wipe and reload my computer, am trying to download web premium 5.5 but when i try to open and install gives me an error message of trouble extracting file try downloading again. How can i download?

You can also download the trial version of the software thru the page linked below and then use your current serial number to activate it.
Be sure to follow the steps outlined in the Note: Very Important Instructions section on the download pages at this site and have cookies enabled in your browser or else the download will not work properly.
CS5.5: http://prodesigntools.com/adobe-cs5-5-direct-download-links.html

Recivining and analyzing syslog messages from facility local3 on LMS4.2 soft appliance.

                   HI,
all of our enterprise switches are sert to send syslog messages from facility local3. this is partly because our linux syslog server loggs its boot syslog messages from facility local7 an we could't use the default facility of local7 on our cisco switches. LMS4.2s syslog daemon is set to recieve syslog messages from facility local7. how can i change it so that it can listen for facility local3 and also make sure the syloganalyzer and automated action work fine.
thanks,
Kerim

Hi All,
I thought it is a good idea to share the workaround my colleague came up with for this prolem. there is a file called syslog-entries.txt under /opt/CSCOpx/conf. he added all the entries we needed like :
local3.*     /var/log/syslog_info
local5.*   /var/log/syslog_info
the change was automatically reflected on syslog.conf
now we receve alerts from facilities 3 and 5 besides 7. hope this helps anyone who run into the same issue.

No syslog message appear at Ciscoworks syslog report

Hi,
We just installed new Ciscoworks LMS 3.2, and sent all switches syslog message to this Ciscoworks LMS 3.2 and old Ciscoworks LMS 2.5 server.
Old Ciscowork LMS 2.5 server can receive syslog message and syslog appear at old LMS 2.5 syslog report, but no syslog appear at new LMS 3.2 syslog report for some devices. I checked syslog collector, it seems ok, I used WireShark to check the new Ciscoworks LMS 3.2 server have received syslog message sent from device, and only use default syslog filter at new Ciscoworks LMS 3.2 server.
Please help to advice me how to troubleshooting this problem.
Best Regards,
Jackson Ku

Is your collector subscribed? You could verify this under RME -> Tools -> Syslog -> Syslog Collector Status. Please post the screen shoot of this page.
Do you see the syslog messages in syslog.log/syslog_info file on the server?

Directing syslog messages to a particular file

Similar Messages

Maybe you are looking for