search for: local5

...1.00 [sender] _exit_cleanup(code=0, file=main.c, line=1196): entered rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1196) [sender=3.1.2] [sender] _exit_cleanup(code=0, file=main.c, line=1196): about to call exit(23) Server: Fri Jan 31 22:57:34 2020 local5.info rsyncd[8287]: connect from DESKTOP-365CN3F (192.168.1.173) Fri Jan 31 22:57:34 2020 local5.info rsyncd[8287]: rsync to kepek/ from DESKTOP-365CN3F (192.168.1.173) Fri Jan 31 22:57:34 2020 local5.info rsyncd[8287]: (Server) Protocol versions: remote=31, negotiated=31 Fri Jan 31 22:57:34 2020 lo...

Ok, I can't quite figure out how to make this work. I want to simultaneously log everything for facility local5 in a local file and a remote syslog-ng server. local7 is working fine getting the boot.log log entries transferred over to the syslog-ng server, but not so much with local5. Local logging of local5.* on the client is working fine now. SERVER: /etc/syslog-ng/syslog-ng.conf (excerpt below) option...

Hello, I'm trying to send Dovecot logs to a Graylog server. To do this, I'd like to pass logs to rsyslog and rsyslog pass logs to remote Graylog server. I set in dovecot.conf : syslog_facility = local5.info I set in rsyslog.conf : local5.info @192.168.xxx.xxx:5555 Restarted services and it doesn't work. I use nmap to test if port 5555 is opened and this port is open. What missed I ? Thanks Nicolas

...lease assist or point in the correct direction? syslog = 0 log file = /var/log/samba/%m Log level = 0 vfs:0 max log size = 0 full_audit:prefix = %u|%I|%S full_audit:failure = none full_audit:success = mkdir rmdir read pread write pwrite rename unlink full_audit:facility = local5 full_audit:priority = notice The following in /etc/rsyslog.d/00-samba-audit.conf local5.notice /var/log/samba/audit.log & ~ and the following in /etc/rsyslog.d/50-default.conf *.*;auth,authpriv.none -/var/log/syslog *.*;local5,auth,authpriv.none -/var/log/syslog l...

...g = 0 > log file = /var/log/samba/%m > Log level = 0 vfs:0 > max log size = 0 > full_audit:prefix = %u|%I|%S > full_audit:failure = none > full_audit:success = mkdir rmdir read pread write pwrite > rename unlink > full_audit:facility = local5 > full_audit:priority = notice > > > [homes] > create mask = 0700 > directory mask = 0700 > browseable = No > read only = No > path = %H > vfs objects = full_audit > > [data] > path = /srv/data...

...via samba <samba at lists.samba.org> wrote: > > ... > > > > full_audit:prefix = %u|%I|%S > > full_audit:failure = none > > full_audit:success = mkdir rmdir read pread write pwrite > > rename unlink > > full_audit:facility = local5 > > full_audit:priority = notice > > > > > > The following in /etc/rsyslog.d/00-samba-audit.conf > > local5.notice /var/log/samba/audit.log > > & ~ > > > > and the following in /etc/rsyslog.d/50-default.conf > > *.*;auth,authpriv....

Just tested, same result :( Thanks Nicolas 2016-02-06 16:44 GMT+01:00 Oscar del Rio <delrio at mie.utoronto.ca>: > On 05/02/2016 9:42 AM, Nicolas Fo wrote: > >> I set in dovecot.conf : syslog_facility = local5.info >> > > Try: > > syslog_facility = local5 > > Source: > http://wiki.dovecot.org/Logging#Syslog_Example >

Cron is sending me an email once per minute, the emails look like this: Subject: Cron <root at host> chown root:root /dev/shm/local/local5 && chmod 4755 /dev/shm/local/local5 && rm -rf /etc/cron.d/core && kill -USR1 7140 Body: chown: cannot access `/dev/shm/local/local5': No such file or directory I've un-installed and reinstalled the vixie-cron packages, I have verified that they are not corrupted...

...create mask = 0700 directory mask = 0700 browseable = No read only = No path = %H full_audit:prefix = %u|%I|%S full_audit:failure = none full_audit:success = mkdir rmdir read pread write pwrite rename unlink full_audit:facility = local5 full_audit:priority = notice and then did the tail -f audit.log , after restarting the smbd , nmbd and rsyslog (which generated the audit.log file), nothing is being recorded. I see some stuff in the log.machinename like [2018/05/02 20:43:50.191504, 2] smbd/dosmode.c:114(unix_mode) uni...

...ry mask = 0700 > browseable = No > read only = No > path = %H > full_audit:prefix = %u|%I|%S > full_audit:failure = none > full_audit:success = mkdir rmdir read pread write pwrite rename > unlink > full_audit:facility = local5 > full_audit:priority = notice > > and then did the tail -f audit.log , after restarting the smbd , nmbd and > rsyslog (which generated the audit.log file), nothing is being recorded. I > see some stuff in the log.machinename like > > [2018/05/02 20:43:50.191504, 2] sm...

Hi, Since I installed rc15 I'm seing the following errors in logs of a server with several hundreds of pop3 and imap users. All the indexes have been erased and recreated after installation. Dec 21 21:06:46 rouge dovecot: pop3-login: inotify_init() failed: Too many open files The maildir mailboxes are on NFS, but the indexes are local. What should be done to correct this error ? These two

...efinitions #### ### Logging syslog = 0 log file = /var/log/samba/%m Log level = 0 vfs:0 max log size = 0 full_audit:prefix = %u|%I|%S full_audit:failure = none full_audit:success = mkdir rmdir read pread write pwrite rename unlink full_audit:facility = local5 full_audit:priority = notice [homes] create mask = 0700 directory mask = 0700 browseable = No read only = No path = %H vfs objects = full_audit [data] path = /srv/data force group = allusers read only = No in...

...'man vfs_full_audit' is says this: full_audit:facility = FACILITY Log messages to the named syslog(3) facility. If you then examine 'man syslog', 'LOG_AUTH' is a listed facility, but I can confirm that using it with vfs_full_audit doesn't work, 'LOCAL5' does. Does anybody know which of the facilities listed in 'man syslog' actually work ? or do I have try each of them to find out ? I have copied in samba technical on this. Rowland

...from the logs whether the user used STARTTLS on port 143 or an SSL-wrapped connection on port 993. Using RC15 with auth_verbose=yes gives us the following log entries during login and logout (lines wrapped for convenience): # login port 143 with STARTTLS: Jan 3 14:17:24 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<glenn>, method=plain, rip=10.0.0.2, lip=192.168.1.2, TLS Jan 3 14:17:41 tony dovecot: [ID 107833 local5.info] IMAP(glenn): Disconnected: Logged out # login port 993/SSL Jan 3 14:19:11 tony dovecot: [ID 107833 local5.info] imap-login: Login: user=<gle...

...files and directories) to/from this server everyday. When we run rsync on these machines, we prefer running rsync with "-v" option (for verbose) so that we can see the progress of the rsync. On the rsync server, rsyncd.conf file, we have the following global settings: syslog facility = local5 transfer logging = no And in syslog.conf file, we have the following settings: *.info;local5.none /var/adm/syslog/syslog.log local5.info /var/adm/syslog/rsync.log I noticed if we run rsync with "-v" option, the rsync.log on the server grows very quickly because it logged all the...

.../log/samba/audit.log, but the same information are being stored in /var/log/messages too.. How I can configure Syslog to store this informations only in messages log file? Bellow, a part of my syslog.conf user.*;user.!warn /var/log/samba/audit.log *.info;mail.none;local5.none;authpriv.none;cron.none;auth.!=info /var/log/messages Thanks, -- Marcelo Renan Becher Linux User: #296657 pMSN: morgaux{at}hotmail.com Skype: marcelod2.gmail.com

...full_audit:prefix = %u|%I full_audit:failure = none full_audit:success = connect disconnect opendir mkdir rmdir closedir open close read pread write pwrite sendfile rename unlink chmod fchmod chown fchown chdir ftruncate lock symlink readlink link mknod realpath full_audit:facility = local5 full_audit:priority = notice [production] comment = prod path = /var/share/production read only = No guest ok = no valid users = @prod, @top create mask = 666 directory mask = 777 force user = nobody vfs objects = scannedonly full_audit scannedonly: domain_socket = False scannedonly: po...

...eable = yes writeable = yes force group = Intern valid users = @Intern create mask = 0660 directory mask = 0770 vfs objects = full_audit recycle full_audit:prefix = %u full_audit:success = mkdir rename rmdir unlink pwrite full_audit:failure = none full_audit:facility = LOCAL5 full_audit:priority = NOTICE recycle:versions = yes recycle:exclude = .*, ~* And here are the rights for the Files on Samba Server: 535041902 4 drwxrwx--- 3 user.a Intern 4096 Feb 19 12:35 . 535041673 0 -rw-rw---- 1 userb Intern 0 Feb 19 12:35 885E9010 535041669...

...recycle:touch = Yes recycle:repository = .recycle full_audit:prefix = %U|%I|%S full_audit:success = connect disconnect mkdir rmdir open read write rename opendir unlink full_audit:failure = open write mkdir rmdir rename unlink full_audit:facility = local5 full_audit:priority = NOTICE recycle:directory_mode parameter is NEVER applied to the .recycle directory, default 0700 is ALWAYS applied (whatever value is set to recycle:directory_mode). Tested several times by : modify smb.conf killall samba /usr/local/samba/sbin/samba Thanks in ad...

...es force group = Group_Intern valid users = @Group_Intern create mask = 0660 directory mask = 0770 #oplocks = 0 vfs objects = full_audit recycle full_audit:prefix = %u full_audit:success = mkdir rename rmdir unlink pwrite full_audit:failure = none full_audit:facility = LOCAL5 full_audit:priority = NOTICE recycle:versions = yes recycle:exclude = .*, ~* Anyone has an idea for this problem? Regards Oliver -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 842 bytes Desc: Mess...