<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Thanks for the info!<br>
<br>
It looks good, messages should be seen on ssh and on serial console too.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<span style="background-color:rgb(255, 255, 255);display:inline !important">Can you try out if you can write in the /dev/ttyS0 file (and/or the ssh login console, in your example /dev/pts/1) with a simple "echo test" command and see if it appears on the console,
please?</span><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Alexandre Santos <alexandre.rosas.santos@gmail.com><br>
<b>Sent:</b> Tuesday, October 27, 2020 10:20<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> Re: [syslog-ng] Using usertty</font>
<div> </div>
</div>
<div>
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:#9C6500; font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div dir="ltr">
<div><span style="color:rgb(0,0,255)">Hi Gabor,</span></div>
<div><span style="color:rgb(0,0,255)"><br>
</span></div>
<div><span style="color:rgb(0,0,255)">I am running a Debian buster in a VBox guest.</span></div>
<div><br>
</div>
<div><span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt">Can you check which terminals are the user 'thanos' logged in?</span></div>
<div><span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt"><b><font size="2"><span style="font-family:monospace">root@debian10st:/home/thanos# w thanos<br>
09:15:47 up 22:00, 4 users, load average: 0.00, 0.02, 0.00<br>
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT<br>
thanos ttyS0 - Mon20 8:27 0.05s 0.04s -bash<br>
thanos pts/0 10.0.2.2 Mon20 12:54m 0.03s 0.03s -bash<br>
thanos pts/1 10.0.2.2 Mon20 12:50m 0.12s 0.18s sshd: thanos [priv]<br>
thanos pts/2 10.0.2.2 Mon20 1.00s 0.04s 0.20s sshd: thanos [priv]</span></font></b><br>
</span></div>
<div><span style="color:rgb(0,0,255)"><br>
</span></div>
<div><span style="color:rgb(0,0,255)">Here are the serial configurations:</span></div>
<div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/ttyS0 -a<br>
speed 9600 baud; rows 24; columns 80; line = 0;<br>
intr = ^C; quit = ^\; erase = ^?; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = <undef>;<br>
discard = <undef>; min = 1; time = 0;<br>
-parenb -parodd -cmspar cs8 hupcl -cstopb cread clocal -crtscts<br>
-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr -icrnl ixon ixoff -iuclc -ixany -imaxbel iutf8<br>
opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>
isig -icanon -iexten -echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br>
<br>
root@debian10st:/home/thanos# stty -F /dev/pts/0 -a<br>
speed 38400 baud; rows 50; columns 184; line = 0;<br>
intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = <undef>;<br>
discard = <undef>; min = 1; time = 0;<br>
-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>
-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr -icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>
opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>
isig -icanon iexten -echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br>
</span></span></span></b></div>
<div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace"><br>
</span></span></span></b></div>
<div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/pts/1 -a<br>
speed 38400 baud; rows 50; columns 184; line = 0;<br>
intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = ^V;<br>
discard = ^O; min = 1; time = 0;<br>
-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>
-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>
opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>
isig icanon iexten echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc<br>
</span></span></span></b></div>
<div><b><span style="color:rgb(0,0,255)"><span style="color:rgb(0,0,0)"><span style="font-family:monospace"><br>
</span></span></span></b></div>
<div><span style="color:rgb(0,0,255)"><b><span style="color:rgb(0,0,0)"><span style="font-family:monospace">root@debian10st:/home/thanos# stty -F /dev/pts/2 -a<br>
speed 38400 baud; rows 50; columns 184; line = 0;<br>
intr = ^C; quit = ^\; erase = ^H; kill = ^U; eof = ^D; eol = <undef>; eol2 = <undef>; swtch = <undef>; start = ^Q; stop = ^S; susp = ^Z; rprnt = ^R; werase = ^W; lnext = ^V;<br>
discard = ^O; min = 1; time = 0;<br>
-parenb -parodd -cmspar cs8 -hupcl -cstopb cread -clocal -crtscts<br>
-ignbrk -brkint -ignpar -parmrk -inpck -istrip -inlcr -igncr icrnl ixon -ixoff -iuclc ixany -imaxbel iutf8<br>
opost -olcuc -ocrnl onlcr -onocr -onlret -ofill -ofdel nl0 cr0 tab0 bs0 vt0 ff0<br>
isig icanon iexten echo echoe echok -echonl -noflsh -xcase -tostop -echoprt echoctl echoke -flusho -extproc</span></span><br>
</b></span></div>
<div><br>
</div>
<div><span style="color:rgb(0,0,255)">Thanks,</span></div>
<div><span style="color:rgb(0,0,255)">Alex</span><br>
</div>
</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr" class="x_gmail_attr">On Mon, Oct 26, 2020 at 10:59 AM Gabor Nagy (gnagy) <<a href="mailto:Gabor.Nagy@oneidentity.com">Gabor.Nagy@oneidentity.com</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Hi Alex!<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
I've checked your attachments and I see that the messages are sent to pseudo-terminals and the serial port too:<br>
[2020-10-23T16:40:20.647481] Posting message to user terminal; user='thanos', line='/dev/ttyS0'
<div>[2020-10-23T16:40:20.647518] Posting message to user terminal; user='thanos', line='/dev/pts/0'</div>
<div>[2020-10-23T16:40:20.647530] Posting message to user terminal; user='thanos', line='/dev/pts/1'</div>
[2020-10-23T16:40:20.647541] Posting message to user terminal; user='thanos', line='/dev/pts/2'<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt">Can you check which terminals are the user 'thanos' logged in?</span><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
E.g. use the following command on the command line:<br>
$w thanos<br>
<br>
<span style="background-color:rgb(255,255,255); display:inline">If you don't see a tty with ssh login, that can explain it.</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
About the serial port, maybe it's misconfigured.<br>
Syslog-ng uses simple open/write calls on the device files , e.g. /dev/ttyS0. Can you try out if you can write in the /dev/ttyS0 file with a simple "echo test" command, please?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<span style="background-color:rgb(255,255,255); display:inline">Can you tell us a bit more about your host and how did you set up the serial port?</span><br>
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Regards,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Gabor</div>
<div id="x_gmail-m_4206308395796789584appendonsend"></div>
<hr style="display:inline-block; width:98%">
<div id="x_gmail-m_4206308395796789584divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> syslog-ng <<a href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>>
on behalf of Alexandre Santos <<a href="mailto:alexandre.rosas.santos@gmail.com" target="_blank">alexandre.rosas.santos@gmail.com</a>><br>
<b>Sent:</b> Friday, October 23, 2020 17:46<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <<a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a>><br>
<b>Subject:</b> [syslog-ng] Using usertty</font>
<div> </div>
</div>
<div>
<div style="background-color:rgb(255,235,156); width:100%; border-style:solid; border-color:rgb(156,101,0); border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:"Calibri"; color:black; text-align:left">
<span style="color:rgb(156,101,0); font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div dir="ltr">
<div>Hi,</div>
<div>I am trying to use usertty(*) to send log all messages with severity equal or higher than critical to every user logged.</div>
<div><br>
</div>
<div>But I am not getting any messages in serial port or ssh.<br>
</div>
<div><br>
</div>
<div>I am sending the configurations and the debug log in attachment.</div>
<div><br>
</div>
<div>Can you help me to understand what is happening?</div>
<div><br>
</div>
<div>Thanks in advance,</div>
<div>Alex<br>
</div>
</div>
</div>
</div>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C2dfa988e5c4d440b226008d87a598751%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637393872243552549%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=uLzSrjVRpdHdUeYGd5oKCyalC9zt9EPR8%2F7rc%2BrmG8Y%3D&reserved=0" originalsrc="https://lists.balabit.hu/mailman/listinfo/syslog-ng" shash="zmauPCArTi+uo8BNMgvfE3UVAvFjHdRKz/9wNbRD0gWA7PI7f/pB9E5nHOA0uvPyxj7p/Usnr128eFrbUpDQiksGEu/g5bG3xFQFkynXxcvJIUH+F1PdkFHW4zyEWZPqrTjf9dX4jsxeAjp32Gj/CnmediS34weu8qTwgVPkGf4=" rel="noreferrer" target="_blank">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C2dfa988e5c4d440b226008d87a598751%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637393872243552549%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=x0ploVfgWoWXdwd14XpF46Rtb1VZJ7KNNZL5RjBE%2BIY%3D&reserved=0" originalsrc="http://www.balabit.com/support/documentation/?product=syslog-ng" shash="MawHnZxxd5V9+hdsDY1svcF/2Xr4zqvhoBmZfIzSQYwnUXBf5kDg2kNn4/pSvO52rli7LuG35nG13Dl8LZRbCVM/SYb8K1D3KS8nORF1CR+M51T9APzxVM/ndR6oepkVUe/jSSAcZc8A4tSda2EdLQE11hbGxJnwu0ehNgp3GcY=" rel="noreferrer" target="_blank">
http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C2dfa988e5c4d440b226008d87a598751%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637393872243562552%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=D%2FTy0bCNhsysvG7HWYtJGquzYyjWCCFC5lPaUVhXtdM%3D&reserved=0" originalsrc="http://www.balabit.com/wiki/syslog-ng-faq" shash="EnTYlsIlgTSEQVc/ujun8XiNtYc0W6YT57+0yJvUBzf432ETUZik75hpw5pjvHiRXkeVgnJmpHt3JNlXw8q18oPNCHzfQDl2uzYY9TdRMkMsJLNpHdclRoKPC1H81qRltsg4cuxa2zmjSRgDxQMnGnmbZ4OfajgbxQM/gDJAuCE=" rel="noreferrer" target="_blank">
http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote>
</div>
</div>
</div>
</body>
</html>