<div dir="ltr"><div><span style="color:rgb(0,0,255)">Hi Gabor,</span></div><div><span style="color:rgb(0,0,255)"><br></span></div><div><span style="color:rgb(0,0,255)">I am running a Debian buster in a VBox guest.</span></div><div><br></div><div>
<span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt">Can you check which terminals are the user 'thanos' logged in?</span></div><div><span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt"><b><font size="2"><span style="font-family:monospace">root@debian10st:/home/thanos# w thanos<br> 09:15:47 up 22:00, 4 users, load average: 0.00, 0.02, 0.00<br>USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT<br>thanos ttyS0 - Mon20 8:27 0.05s 0.04s -bash<br>thanos pts/0 10.0.2.2 Mon20 12:54m 0.03s 0.03s -bash<br>thanos pts/1 10.0.2.2 Mon20 12:50m 0.12s 0.18s sshd: thanos [priv]<br>thanos pts/2 10.0.2.2 Mon20 1.00s 0.04s 0.20s sshd: thanos [priv]</span></font></b><br></span>
</div><div><span style="color:rgb(0,0,255)"><br></span></div><div><span style="color:rgb(0,0,255)">Here are the serial configurations:</span></div><div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/ttyS0 -a<br>speed 9600 baud; rows 24; columns 80; line = 0;<br>intr = ^C; quit = ^\; erase = ^?; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = <undef>;<br>discard = <undef>; min = 1; time = 0;<br>-parenb -parodd -cmspar cs8 hupcl -cstopb cread clocal -crtscts<br>-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr -icrnl ixon ixoff -iuclc -ixany -imaxbel iutf8<br>opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>isig -icanon -iexten -echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br><br>root@debian10st:/home/thanos# stty -F /dev/pts/0 -a<br>speed 38400 baud; rows 50; columns 184; line = 0;<br>intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = <undef>;<br>discard = <undef>; min = 1; time = 0;<br>-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr -icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>isig -icanon iexten -echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br></span></span></span></b></div><div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace"><br></span></span></span></b></div><div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/pts/1 -a<br>speed 38400 baud; rows 50; columns 184; line = 0;<br>intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = ^V;<br>discard = ^O; min = 1; time = 0;<br>-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>isig icanon iexten echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br></span></span></span></b></div><div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace"><br></span></span></span></b></div><div><span style="color:rgb(0,0,255)"><b><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/pts/2 -a<br>speed 38400 baud; rows 50; columns 184; line = 0;<br>intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = ^V;<br>discard = ^O; min = 1; time = 0;<br>-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>isig icanon iexten echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc</span></span><br></b></span></div><div><br></div><div><span style="color:rgb(0,0,255)">Thanks,</span></div><div><span style="color:rgb(0,0,255)">Alex</span><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Oct 26, 2020 at 10:59 AM Gabor Nagy (gnagy) <<a href="mailto:Gabor.Nagy@oneidentity.com">Gabor.Nagy@oneidentity.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Hi Alex!<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
I've checked your attachments and I see that the messages are sent to pseudo-terminals and the serial port too:<br>
[2020-10-23T16:40:20.647481] Posting message to user terminal; user='thanos', line='/dev/ttyS0'
<div>[2020-10-23T16:40:20.647518] Posting message to user terminal; user='thanos', line='/dev/pts/0'</div>
<div>[2020-10-23T16:40:20.647530] Posting message to user terminal; user='thanos', line='/dev/pts/1'</div>
[2020-10-23T16:40:20.647541] Posting message to user terminal; user='thanos', line='/dev/pts/2'<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt">Can you check which terminals are the user 'thanos' logged in?</span><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
E.g. use the following command on the command line:<br>
$w thanos<br>
<br>
<span style="background-color:rgb(255,255,255);display:inline">If you don't see a tty with ssh login, that can explain it.</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
About the serial port, maybe it's misconfigured.<br>
Syslog-ng uses simple open/write calls on the device files , e.g. /dev/ttyS0. Can you try out if you can write in the /dev/ttyS0 file with a simple "echo test" command, please?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<span style="background-color:rgb(255,255,255);display:inline">Can you tell us a bit more about your host and how did you set up the serial port?</span><br>
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Regards,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Gabor</div>
<div id="gmail-m_4206308395796789584appendonsend"></div>
<hr style="display:inline-block;width:98%">
<div id="gmail-m_4206308395796789584divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> syslog-ng <<a href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>> on behalf of Alexandre Santos <<a href="mailto:alexandre.rosas.santos@gmail.com" target="_blank">alexandre.rosas.santos@gmail.com</a>><br>
<b>Sent:</b> Friday, October 23, 2020 17:46<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <<a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a>><br>
<b>Subject:</b> [syslog-ng] Using usertty</font>
<div> </div>
</div>
<div>
<div style="background-color:rgb(255,235,156);width:100%;border-style:solid;border-color:rgb(156,101,0);border-width:1pt;padding:2pt;font-size:10pt;line-height:12pt;font-family:"Calibri";color:black;text-align:left">
<span style="color:rgb(156,101,0);font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div dir="ltr">
<div>Hi,</div>
<div>I am trying to use usertty(*) to send log all messages with severity equal or higher than critical to every user logged.</div>
<div><br>
</div>
<div>But I am not getting any messages in serial port or ssh.<br>
</div>
<div><br>
</div>
<div>I am sending the configurations and the debug log in attachment.</div>
<div><br>
</div>
<div>Can you help me to understand what is happening?</div>
<div><br>
</div>
<div>Thanks in advance,</div>
<div>Alex<br>
</div>
</div>
</div>
</div>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>