Adding year in the syslog message (linux)

linux logging syslog
Possa picture Possa · Feb 21, 2011 · Viewed 9.8k times · Source


I need to log the year in the log message generated by syslog daemon. In particular in the /var/log/secure file. Is it possible?

Here an example of normal syslog message:

Feb 16 04:06:58 HOST sshd[28573]: Accepted password for USER from SOURCE port 7269 ssh2

And I need something similar to:

Feb 16 2011 04:06:58 HOST sshd[28573]: Accepted password for USER from SOURCE port 7269 ssh2

Thanks in advance.

Answer

Chance Hsu picture Chance Hsu · Oct 27, 2011

If you use rsyslog, it is easy. Refer to following:

  1. Modify /etc/rsyslog.conf to following:

    ...
authpriv.*     /var/log/secure;RSYSLOG_FileFormat
...

  2. And then asking rsyslog daemon to reload configuration:

    $ kill -HUP <pid of rsyslog daemon>

More reference :

Related questions

Can syslog Performance Be Improved?

We have an application on Linux that used the syslog mechanism. After a week spent trying to figure out why this application was running slower than expected, we discovered that if we eliminated syslog, and just wrote directly to a …

Read More
Retrieve last 100 lines logs

I need to retrieve last 100 lines of logs from the log file. I tried the sed command sed -n -e '100,$p' logfilename Please let me know how can I change this command to specifically retrieve the last 100 lines.

Read More
Attach to a processes output for viewing

How would I 'attach' a console/terminal-view to an applications output so I can see what it may be saying? How would I detach from an applications output without killing the application? Normally if you fire up a talkative application …

Read More