<div dir="ltr"><div class="gmail_extra">2013/7/13 Andrew Stadt <span dir="ltr"><<a href="mailto:acstadt@stadt.ca" target="_blank">acstadt@stadt.ca</a>></span><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
On 08/07/2013 8:46 AM, Andréas Kühne wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
2013/7/8 Michael T. Dean <<a href="mailto:mtdean@thirdcontact.com" target="_blank">mtdean@thirdcontact.com</a> <mailto:<a href="mailto:mtdean@thirdcontact.com" target="_blank">mtdean@thirdcontact.<u></u>com</a>>><div class="im">
<br>
<br>
On 07/04/2013 03:53 PM, Andréas Kühne wrote:<br>
<br>
I have a problem with my mythtv server crashing every now and<br>
then. As a troubleshooting help, I got the tip to setup remote<br>
logging. I have now setup my remote logging server. However<br>
the logging from mythlogserver doesn't get forwarded to the<br>
server?<br>
<br>
I have removed all of the configuration for all of the<br>
separate logfiles, so everything is only logged in the syslog<br>
on the server. I have tried to add ALL logging to the remote<br>
server, but only log message from mythlogserver itself gets<br>
forwarded. Has anyone had a similar problem?<br>
<br>
<br>
Post the syslog configuration file you're using and we can tell<br>
you what you need to change.<br>
<br>
Mike<br>
______________________________<u></u>_________________<br>
mythtv-users mailing list<br></div>
<a href="mailto:mythtv-users@mythtv.org" target="_blank">mythtv-users@mythtv.org</a> <mailto:<a href="mailto:mythtv-users@mythtv.org" target="_blank">mythtv-users@mythtv.<u></u>org</a>><div class="im"><br>
<a href="http://www.mythtv.org/mailman/listinfo/mythtv-users" target="_blank">http://www.mythtv.org/mailman/<u></u>listinfo/mythtv-users</a><br>
<br>
<br>
This is the log on the mythtv server. I have added separate lines for local* because I got more logging on the remote server that way. Other than this file I also have the same configuration on the server as the one on <a href="http://www.mythtv.org/wiki/Simple_rsyslog_Configuration" target="_blank">http://www.mythtv.org/wiki/<u></u>Simple_rsyslog_Configuration</a>. The logs in /var/log/mythtv/ get written to with that configuration.<br>
<br>
Regards,<br>
<br>
Andréas<br>
<br>
# /etc/rsyslog.confConfiguration file for rsyslog.<br>
#<br>
#For more information see<br>
#/usr/share/doc/rsyslog-doc/<u></u>html/rsyslog_conf.html<br>
#<br>
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf<br>
<br></div>
local0.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local1.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local2.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local3.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local4.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local5.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local6.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
local7.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><br>
<br>
*.* @<a href="http://10.0.27.44" target="_blank">10.0.27.44</a> <<a href="http://10.0.27.44" target="_blank">http://10.0.27.44</a>><div><div class="h5"><br>
#################<br>
#### MODULES ####<br>
#################<br>
<br>
$ModLoad imuxsock # provides support for local system logging<br>
$ModLoad imklog # provides kernel logging support (previously done by rklogd)<br>
#$ModLoad immark # provides --MARK-- message capability<br>
<br>
# provides UDP syslog reception<br>
#$ModLoad imudp<br>
#$UDPServerRun 514<br>
<br>
# provides TCP syslog reception<br>
#$ModLoad imtcp<br>
#$InputTCPServerRun 514<br>
<br>
<br>
###########################<br>
#### GLOBAL DIRECTIVES ####<br>
###########################<br>
<br>
#<br>
# Use traditional timestamp format.<br>
# To enable high precision timestamps, comment out the following line.<br>
#<br>
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat<br>
<br>
# Filter duplicated messages<br>
$RepeatedMsgReduction on<br>
<br>
#<br>
# Set the default permissions for all log files.<br>
#<br>
$FileOwner syslog<br>
$FileGroup adm<br>
$FileCreateMode 0640<br>
$DirCreateMode 0755<br>
$Umask 0022<br>
$PrivDropToUser syslog<br>
$PrivDropToGroup syslog<br>
<br>
#<br>
# Where to place spool files<br>
#<br>
$WorkDirectory /var/spool/rsyslog<br>
<br>
#<br>
# Include all config files in /etc/rsyslog.d/<br>
#<br>
$IncludeConfig /etc/rsyslog.d/*.conf<br>
<br>
</div></div></blockquote>
<br>
Not sure you ever got this working, just catching up after spending a couple weeks on the road.<br>
<br>
Are you trying to do remote logging by itself, or remote and local logging? For the machines that I want to just send everything, I use a very simple configuration file, shamelessly borrowed from:<br>
<a href="http://www.rsyslog.com/doc/rsyslog_reliable_forwarding.html" target="_blank">http://www.rsyslog.com/doc/<u></u>rsyslog_reliable_forwarding.<u></u>html</a><br>
<br>
andrew@alice:~$ cat /etc/rsyslog.conf<br>
$ModLoad imuxsock<br>
$WorkDirectory /var/spool/rsyslog<br>
$ActionQueueType LinkedList<br>
$ActionQueueFileName srvrfwd<br>
$ActionResumeRetryCount -1<br>
$ActionQueueSaveOnShutdown on<br>
<br>
*.* @@<a href="http://192.168.12.5:514" target="_blank">192.168.12.5:514</a><br>
<br>
If you're going to try this, please note the @@[ipaddress]:514, means that I'm using TCP not UDP, so the rsyslog server needs to be configured to receive tcp. So, on the machine receiving the logs you need to make sure you have at least these two lines there/uncommented:<br>
<br>
andrew@snoopy:/etc$ cat rsyslog.conf | grep -i TCP<div class="im"><br>
# provides TCP syslog reception<br></div>
$ModLoad imtcp<br>
$InputTCPServerRun 514<br>
<br>
and as others have commented ensure that port 514 is open in whatever firewall(s) you are running on both machines.<br>
<br>
HTH,<br>
<br>
Andrew.<div class=""><div class="h5"><br>
<br>
______________________________<u></u>_________________<br>
mythtv-users mailing list<br>
<a href="mailto:mythtv-users@mythtv.org" target="_blank">mythtv-users@mythtv.org</a><br>
<a href="http://www.mythtv.org/mailman/listinfo/mythtv-users" target="_blank">http://www.mythtv.org/mailman/<u></u>listinfo/mythtv-users</a><br>
</div></div></blockquote></div><div class="gmail_extra"><br></div>Hi Andrew,<div><br></div><div>Thanks for taking time to answer. I have not got it working yet. I get all syslog messages EXCEPT for the ones from mythlogserver that I want. I can't really understand why?</div>
<div><br></div><div>I have now tried the configuration you suggested and don't really know if it is working or not. I'll keep it running and see if it works.</div><div><br></div><div>Regards,</div><div><br></div><div>
Andréas</div><div><br></div><div class="gmail_extra"><div></div></div></div></div>