[opensuse-factory] systemd-219 vs. rsyslog: Where do mail* events get logged now?
Hi there, after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity. Does someone of our systemd experts know which knob to tweak to get the old behaviour? TIA, cheers. l8er manfred PS: I'm now on TW 20150329 x86_64
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
Hi there,
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file. TIA, cheers. l8er manfred
PS: I'm now on TW 20150329 x86_64 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, Apr 1, 2015 at 7:25 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
Hi there,
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file.
Are messages present in journalctl output or they are completely lost? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, 01 Apr 2015, 18:30:07 +0200, Andrei Borzenkov wrote:
On Wed, Apr 1, 2015 at 7:25 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
Hi there,
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file.
Are messages present in journalctl output or they are completely lost?
The messages are there in the journalctl output. Thanks to the other posts in this thread (adding an /etc/systemd/journald.conf.d/syslog.conf file) I'm now back to almost normal logging - just need to redirect the new flood of audit messages to somewhere else. Nevertheless, I believe a "drop-in" replacement for init, syslog, whatsnot should have come with this missing glue itself... Thanks for your reply! Cheers. l8er manfred
Am Mittwoch, 1. April 2015, 19:30:07 schrieb Andrei Borzenkov:
On Wed, Apr 1, 2015 at 7:25 PM, Manfred Hollstein
<mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
Hi there,
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file.
Are messages present in journalctl output or they are completely lost? Hello Andrei, Yes they can be seen with journalctl. I followed the advice from Peter Czanik setting ForwardToSyslog=yes. Now i have the messages back in fetchmail, mail* and i hope also the others more seldom used services. Regards, Emil -- Registered Linux User since 19940320
---------------------------------------------------------- Emil Stephan, Albersloher Weg 571A, 48167 Münster, Germany Accelerate Windows: 9.80665 m/sec^2 would be adequate -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
Hi there,
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour? just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file. Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald. You can turn it back again in /etc/systemd/journald.conf by taking the following variable out of comment and setting to yes: ForwardToSyslog=yes Or you can install syslog-ng 3.6 from my home repo, which reads logs
On 04/01/2015 06:25 PM, Manfred Hollstein wrote: directly from the journal: https://build.opensuse.org/project/show/home:czanik:syslog-ng36 Bye, CzP -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, Apr 1, 2015 at 1:42 PM, Peter Czanik <peter@czanik.hu> wrote:
Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald.
Yeah, I thought it was On by default but the documentation says otherwise. #mkdir /etc/systemd/journald.conf.d/ and create a drop in snippet with content [Journal] ForwardToSyslog=true The drop ins are never altered by package upgrades. If yast or some other application modifies the settings it must do so on its own dropins too. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, 01 Apr 2015, 18:50:33 +0200, Cristian Rodríguez wrote:
On Wed, Apr 1, 2015 at 1:42 PM, Peter Czanik <peter@czanik.hu> wrote:
Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald.
Yeah, I thought it was On by default but the documentation says otherwise.
#mkdir /etc/systemd/journald.conf.d/ and create a drop in snippet with content
[Journal] ForwardToSyslog=true
The drop ins are never altered by package upgrades. If yast or some other application modifies the settings it must do so on its own dropins too.
thanks Peter and Christian for this hint. I'm now back to almost normal logging - just need to redirect the new flood of audit messages to somewhere else. Nevertheless, I believe a "drop-in" replacement for init, syslog, whatsnot should have come with this missing glue itself... Thanks for your help anyway! Cheers. l8er manfred
On Wed, Apr 1, 2015 at 2:07 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 18:50:33 +0200, Cristian Rodríguez wrote:
On Wed, Apr 1, 2015 at 1:42 PM, Peter Czanik <peter@czanik.hu> wrote:
Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald.
Yeah, I thought it was On by default but the documentation says otherwise.
#mkdir /etc/systemd/journald.conf.d/ and create a drop in snippet with content
[Journal] ForwardToSyslog=true
The drop ins are never altered by package upgrades. If yast or some other application modifies the settings it must do so on its own dropins too.
thanks Peter and Christian for this hint. I'm now back to almost normal logging - just need to redirect the new flood of audit messages to somewhere else. Nevertheless, I believe a "drop-in" replacement for init, syslog, whatsnot should have come with this missing glue itself...
BTW.. this is off by default now because the most prevalent syslog implementations (rsyslog, syslog-ng) now support reading from journal natively. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Wed, 01 Apr 2015, 19:11:30 +0200, Cristian Rodríguez wrote:
On Wed, Apr 1, 2015 at 2:07 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 18:50:33 +0200, Cristian Rodríguez wrote: [...]
#mkdir /etc/systemd/journald.conf.d/ and create a drop in snippet with content
[Journal] ForwardToSyslog=true
The drop ins are never altered by package upgrades. If yast or some other application modifies the settings it must do so on its own dropins too.
thanks Peter and Christian for this hint. I'm now back to almost normal logging - just need to redirect the new flood of audit messages to somewhere else. Nevertheless, I believe a "drop-in" replacement for init, syslog, whatsnot should have come with this missing glue itself...
BTW.. this is off by default now because the most prevalent syslog implementations (rsyslog, syslog-ng) now support reading from journal natively.
Do they do it by default (both manpages, rsyslog.conf and rsyslogd, do not mention "journal")? If so, why didn't the messages show up in the various log files? If it must be enabled explicitly, I'd suggest that with systemd/journald's default configuration the other sysloggers should be configured to have it enabled, no? Cheers. l8er manfred
On Wed, Apr 1, 2015 at 2:37 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 19:11:30 +0200, Cristian Rodríguez wrote:
On Wed, Apr 1, 2015 at 2:07 PM, Manfred Hollstein <mhollstein@t-online.de> wrote:
On Wed, 01 Apr 2015, 18:50:33 +0200, Cristian Rodríguez wrote: [...]
#mkdir /etc/systemd/journald.conf.d/ and create a drop in snippet with content
[Journal] ForwardToSyslog=true
The drop ins are never altered by package upgrades. If yast or some other application modifies the settings it must do so on its own dropins too.
thanks Peter and Christian for this hint. I'm now back to almost normal logging - just need to redirect the new flood of audit messages to somewhere else. Nevertheless, I believe a "drop-in" replacement for init, syslog, whatsnot should have come with this missing glue itself...
BTW.. this is off by default now because the most prevalent syslog implementations (rsyslog, syslog-ng) now support reading from journal natively.
Do they do it by default (both manpages, rsyslog.conf and rsyslogd, do not mention "journal")?
http://www.rsyslog.com/doc/v8-stable/configuration/modules/imjournal.html http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-gu... -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Peter Czanik schrieb:
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file. Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald. You can turn it back again in /etc/systemd/journald.conf by taking
On 04/01/2015 06:25 PM, Manfred Hollstein wrote: the following variable out of comment and setting to yes: ForwardToSyslog=yes
Would it make sense to have a page in the wiki that documents such changes or pitfalls for each snapshot? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5; 90409 Nürnberg; Germany -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Thursday 2015-04-02 13:35, Ludwig Nussel wrote:
Peter Czanik schrieb:
On Wed, 01 Apr 2015, 17:56:32 +0200, Manfred Hollstein wrote:
after upgrading to several new stuff (including systemd-219) I now realized that there are no messages logged to the /var/log/mail* files. I use rsyslogd as my system logger and I don't have a persistent journal. Up until systemd-210 sending an e-mail using postfix got logged in /var/log/mail, similar to every received e-mail pulled in via fetchmail, but right now the log file doesn't show any activity.
Does someone of our systemd experts know which knob to tweak to get the old behaviour?
just switched to syslog-ng and nothing changed. Also, only audit messages reach /var/log/messages, any other messages normally shown in /var/log/messages don't hit any file. Hi, From somewhere around systemd-212 (or a bit later, I don't remember any more) forwarding to syslog is turned off by default in journald. You can turn it back again in /etc/systemd/journald.conf by taking
On 04/01/2015 06:25 PM, Manfred Hollstein wrote: the following variable out of comment and setting to yes: ForwardToSyslog=yes
Would it make sense to have a page in the wiki that documents such changes or pitfalls for each snapshot?
It's certainly release notes material. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (7)
-
Andrei Borzenkov -
Cristian Rodríguez -
Emil Stephan -
Jan Engelhardt -
Ludwig Nussel -
Manfred Hollstein -
Peter Czanik