10-06-2010
Syslog not having all su logs
Hi gurus and gurettes (?)
Alright, really quickly, VCS-1 is executing some monitoring scripts every minute on local zones and I want to know if there is a way for me to remove the following :
Month X XX:XX:XX RaNdOmSeRvErNaMe su: [ID 366847 auth.notice] 'su root' succeeded for root on /dev/???
A quick and dirty answer would be "not to monitor all your ressources every minute" or "use the built-in tool from VCS-1". My answer is: I can't. Why? This is not the reson why I opened this thread.
So, in syslog.conf, do I have a way of removing the su logs for user root? Not from /vard/adm/sulogs tho ...
Thank you!
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
can i include this command into my crontab file
> /var/adm/wtmp
to clear the contents on a regular basis ?
what about file permissions ? (6 Replies)
Discussion started by: cubicle^dweller
6 Replies
2. Shell Programming and Scripting
Hey Guys,
i am new into shell programming and i have to do one script which have to record all the commands entered by a specific user.
Example of that, i have a system running on unix, several users are using this system, i have to create like a databse which will record every user entered that... (5 Replies)
Discussion started by: charbel
5 Replies
3. UNIX for Advanced & Expert Users
Hy, I have a question
I have a directory in a unix server,
Some of my files have a diffrent access time,
from the time i accessed them last,
I think some one has copied it,it's not an important file,but none the less,it is my file,It mistakenly had a 777 permission( yes ,I know it is a noob's... (1 Reply)
Discussion started by: lordmod
1 Replies
4. Shell Programming and Scripting
Hi,
I am trying to write a script which would go search and get the info from the logs based on yesterday timestamp and write yesterday logs in new file. The log file format is as follows:
""""""""""""""""""""""""""... (3 Replies)
Discussion started by: harish.parker
3 Replies
5. Linux
I have the auditd running and I need to send the audit logs to a remote syslog server.
Anyideas on how to do that? (1 Reply)
Discussion started by: jmathenge
1 Replies
6. Red Hat
Hi All,
I need to send all apache logs to local syslog and then to syslog server (STRM – Security Threat response manager).
I follow these steps:-
vi /etc/httpd/conf/httpd.conf
Added these lines :-
ErrorLog syslog:local1
LogLevel notice
Then in syslog.conf:-
local1.crit... (3 Replies)
Discussion started by: sidhurana
3 Replies
7. UNIX Desktop Questions & Answers
Hi ,
I am running an application on my windows and it logs are generated at /var/logs and for this i have to go this location and then do tail -f , Is there any command you can advise me so that when I execute this command at this location that logs get displayed fully and as the application... (3 Replies)
Discussion started by: KAREENA18
3 Replies
8. Linux
I found a script for automatically push tomcat logs to syslog server which is locate in same server. How do I change it to push logs to remote server?
log4j.rootLogger=INFO, WARN, console, file, SYSLOG
log4j.appender.file=org.apache.log4j.RollingFileAppender
log4j.appender.file.append=true... (2 Replies)
Discussion started by: heshandh
2 Replies
9. Shell Programming and Scripting
Appreciate help for the below issue.
Im using below code.....I dont want to attach the logs when I ran the perl twice...I just want to take backup with today date and generate new logs...What I need to do for the below scirpt..............
1)if logs exist it should move the logs with extention... (1 Reply)
Discussion started by: Sanjeev G
1 Replies
10. UNIX for Advanced & Expert Users
Hi,
I need help on syslog-ng on RHEL 7.2. It is working as expected.
As per configuration, it is supposed to create authlog, messages and xymessages daily in respective folder of date. But I can see only messages file and that is also not updating well.
# ps -ef | grep -i syslog
root 22954... (1 Reply)
Discussion started by: solaris_1977
1 Replies
VCS(4) Linux Programmer's Manual VCS(4)
NAME
vcs, vcsa - virtual console memory
DESCRIPTION
/dev/vcs0 is a character device with major number 7 and minor number 0, usually of mode 0644 and owner root.tty. It refers to the memory
of the currently displayed virtual console terminal.
/dev/vcs[1-63] are character devices for virtual console terminals, they have major number 7 and minor number 1 to 63, usually mode 0644
and owner root.tty. /dev/vcsa[0-63] are the same, but including attributes, and prefixed with four bytes giving the screen dimensions and
cursor position: lines, columns, x, y. (x = y = 0 at the top left corner of the screen.)
These replace the screendump ioctls of console(4), so the system administrator can control access using file system permissions.
The devices for the first eight virtual consoles may be created by:
for x in 0 1 2 3 4 5 6 7 8; do
mknod -m 644 /dev/vcs$x c 7 $x;
mknod -m 644 /dev/vcsa$x c 7 $[$x+128];
done
chown root:tty /dev/vcs*
No ioctl() requests are supported.
EXAMPLES
You may do a screendump on vt3 by switching to vt1 and typing cat /dev/vcs3 >foo. Note that the output does not contain newline characters,
so some processing may be required, like in fold -w 81 /dev/vcs3 | lpr or (horrors) setterm -dump 3 -file /proc/self/fd/1.
The /dev/vcsa0 device is used for Braille support.
This program displays the character and screen attributes under the cursor of the second virtual console, then changes the background color
there:
#include <unistd.h>
#include <stdio.h>
#include <fcntl.h>
int main() {
int fd;
struct {char lines, cols, x, y;} scrn;
char ch, attrib;
fd = open("/dev/vcsa2", O_RDWR);
(void)read(fd, &scrn, 4);
(void)lseek(fd, 4 + 2*(scrn.y*scrn.cols + scrn.x), 0);
(void)read(fd, &ch, 1);
(void)read(fd, &attrib, 1);
printf("ch='%c' attrib=0x%02x
", ch, attrib);
attrib ^= 0x10;
(void)lseek(fd, -1, 1);
(void)write(fd, &attrib, 1);
return 0;
}
FILES
/dev/vcs[0-63]
/dev/vcsa[0-63]
AUTHOR
Andries Brouwer <aeb@cwi.nl>
HISTORY
Introduced with version 1.1.92 of the Linux kernel.
SEE ALSO
console(4), tty(4), ttys(4), selection(1)
Linux 1995-02-19 VCS(4)