1
vote
2answers
70 views

How to log ssh client connection/command?

I would like to know how i could log SSH command lines a user is using on a server. For exemple, if the user Alex on my server is doing the following set of commands : $ cd /tmp $ touch myfile $ ssh ...
0
votes
1answer
32 views

My local MySQL server was temporary down for unknown reasons

My local MySQL server 5.5.38 (on CentOS 6.5) has been temporary down and the mysql log file was filled with this kind of details: This could be because you hit a bug. It is also possible that this ...
2
votes
2answers
70 views

Method to log amount of transmitted data per each IP address in linux

I am looking for a method in linux to log the amount of data transmitted (received and sent separately) for every single IP address to which the data was sent to or received from. These statistics ...
0
votes
1answer
87 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
-2
votes
2answers
40 views

FTP and SFTP logs track in CentOS

How it is possible to track the changes made to a directory using tools like FileZilla or XFTP ? because we found some files suddenly got missed from server, in history also nothing was found so ...
-1
votes
2answers
49 views

Get domains accessed through a specific port [closed]

I'm developing a product and at a certain point I need to get domain names used to access some service on a specific port. Let's suppose I've a computers network with Internet access through a Linux ...
3
votes
3answers
109 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
2
votes
1answer
60 views

How to make “\n” a new line in terminal?

I'm trying to view the HHVM log in a friendly way - currently it just comes out as a giant block of text. I've noticed there are various instances of "\n" in there. How can I get my terminal (gnome ...
2
votes
3answers
83 views

Common login script

Few weeks ago I thought it would be a good idea to write a script which should send me an email whenever some user would log in into my server. So I came to a perfectly working script ...
0
votes
2answers
77 views

View realtime list of connections to Postfix

I am running Postfix on a linux box with a couple hundred local users with mailboxes. Is there a way to monitor all incoming connections (SMTP) to the Postfix service? I.e. a live stream of "IP ...
-1
votes
2answers
48 views

How to monitor and list modified files server wide for brief periods of time?

I would like to, from time to time, enable server-wide file monitoring that will show me all files being modified, updated and created while I have it running and thus simply spewing forth a list of ...
0
votes
2answers
92 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
0
votes
0answers
65 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
3
votes
1answer
266 views

Hiding linux kernel messages from console

I have a machine running a custom build of Linux kernel 3.2.12-rt based on Debian Squeeze. I'm getting kernel messages printed to the console. I don't want it to do that. I know why it's doing ...
-1
votes
1answer
102 views

Application log storage/review tool

My boss is wanting me to wrap applications on a few servers with shell scripts (or inline code for those we develop ourselves) to log basic data (user, date/time, commandline) to a central server so ...
1
vote
1answer
266 views

Shorewall: logging to custom file

I am running an Ubuntu Server 14.04 system with a shorewall firewall. Shorewall is essentially a front end to iptables, and it is iptables that does the logging via Netfilter (my understanding so ...
0
votes
1answer
44 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
0answers
114 views

Ubuntu 12.04 crash analysis - strange binary data on all open files at the moment of crash

A couple of hours ago we got a system crash on Ubuntu 12.04. We checked all the log files and there is nothing suspicious to blame to. Last stuff that was logged was some dovecot activity. There are ...
1
vote
0answers
222 views

How to configure nDPI for iptables

I am new to nDPI, I have installed nDPI but when I add rules like; iptables -I OUTPUT -m ndpi --http -j REJECT it shows error iptables v1.4.7: Couldn't load match ...
0
votes
2answers
79 views

How do I see if user connected to mysql over ssh tunnel?

I imagined command last, would also give me mysql over ssh tunnels list. But I was wrong. Is there a place where this tunnels are logged? Ubuntu server 12.04.
1
vote
1answer
104 views

How do I configure Linux to log when ulimits are hit?

For example, say I'm hitting nproc. I would expect a log message to appear /var/log/messages or similar, but it looks like that needs to be configured. How do I do that? I can't find anything relevant ...
0
votes
0answers
49 views

Rsyslog with Nginx virtual hosts

I have an Nginx server with several virtual hosts, each of them generating log files. I'm sending all these logs to a remote server but don't know how to create one log file per virtual on this ...
2
votes
2answers
70 views

How to log remotely without syslog

I have a bunch of logs which are not created using syslog. I would like to export them to another host. If possible using syslog or rsyslog. A pipe? how can I do that?
0
votes
2answers
143 views

How to Change sysstat/sar logging folder

I have just enabled sysstat on one of my servers (Ubuntu 12.04), I have noticed it is logging all to /var/log/sysstat/sa04 /var/log/sysstat/sa05 /var/log/sysstat/sar04 How can I change the sysstat ...
0
votes
1answer
436 views

Compress and remove logs from jboss on linux with cron

I need to compress and remove log files after some time from serwer. I have never write scripts before. So far i have script logs.sh: #!/bin/bash LOGS=/usr/local/jboss/server/default/log/ ...
0
votes
0answers
33 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
0
votes
1answer
9 views

Get referrer of requests currently listed by status module

Our server has on normal time 20 request/second, which can be seen constantly on server-status (status module) Sometimes we have 800 requests/second, and all these requests are shown on ...
-2
votes
1answer
192 views

Configure Protocols using iptables log file with ndpi [closed]

I am using iptables with ndpi to filter my network and add two rules to my iptables rules they are iptables -I INPUT -m ndpi --http -j LOG iptables -I INPUT -m ndpi --google -j LOG In my log file ...
2
votes
4answers
227 views

Use logger in shell script

How can I use logger in a shell script? If I run ntpd -qnp pool.ntp.org 2> >(logger) in console, it works as expected. If I put it into a shell script #!/bin/sh ntpd -qnp pool.ntp.org ...
1
vote
1answer
76 views

Can I automate emailing of critical errors with systemd journal?

Fedora OS introduces journalctl as the new way to log error messages. I learn about this recently when I performed an upgrade. var/log/messages and many other log files are now combined into a ...
3
votes
0answers
100 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
1
vote
1answer
103 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
0
votes
0answers
64 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
0
votes
2answers
950 views

What is the function of the cimserver daemon?

I noticed in /var/log/messsages a process 'cimserver' was logging some interesting messages: Nov 27 15:33:37 lb-web-standby cimserver[2250]: Failed to deliver an indication: Cannot connect to ...
0
votes
1answer
43 views

syslog, kernel.warning and iptables innerworking

Im tinkering with my iptables logging at the moment. So I got my syslog to use another log file with tips from the web. basically you end up changing some chains and rules plus aan extra line in the ...
0
votes
0answers
63 views

Does OpenSSH server log any connection attempts?

When I logged to my VPS server I noticed an established connection on port 22. The IP address was not mine. The connection lasted about a minute and then was closed. I could not find any logs ...
2
votes
1answer
134 views

log bash command centralized server or any auditd saas [duplicate]

I'm looking for a way to track our sysmin work, in the servers. Lets say sysmin 1 and sysmin 2 have access to any server but we need to make sure and track anything that they do in our server. ...
0
votes
0answers
94 views

Logrotate config for a laravel application

I have a laravel application which writes the log file names like log-apache2handler-2013-11-17.txt In my logrotate script, I am doing *.txt however this filename is going to change everyday, so by ...
5
votes
1answer
137 views

How does logrotate handle concurrency?

In the case that logrotate runs the same time as the log file is being updated, what will happen? Will the new log be rotated into a historical log file? Or it will stay in the current log file? ...
0
votes
1answer
59 views

Logging violations of rules in limits.conf

I am trying to log the details of the programs that where failed due to the limit cap defined in the limits.conf. My initial plan was to do it using the audit system. The idea was to track the system ...
1
vote
1answer
1k views

Apache logs other user read permissions [closed]

We have several developers who maintain the system and I want them to easily read the log files in /var/log/httpd without needing root access. I set the read permission for 'other' users but when I ...
0
votes
1answer
148 views

Centralized logging server failover

I'm planning a centralized log server for 200+ Linux boxes, rsyslog on both the client and server side. Here are my requirements: Do not log anything locally on Linux boxes and send everything to ...
-1
votes
2answers
185 views

How to avoid log files growing too big?

I have a Linux process generating very big log files. Those file could grow infinitely if I didn't do anything. Is there any way to limit a file's size and to make it act like some kind of fifo buffer ...
0
votes
0answers
185 views

Linux audit failure flag ignored? (can't silence printk)

We're using the Linux audit subsystem to monitor process execution. # in audit.rules -a exit,always -F arch=b32 -F subj_user=unconfined_u -S execve -a exit,always -F arch=b64 -F ...
0
votes
0answers
244 views

Getting strange error from elasticsearch backed of LogStash

When i try to run any query from logstash like "httpd" search from url: http://mydomain.domain.com:9292/search , it gives me following error: "No results for query 'httpd'" And in the log ...
0
votes
1answer
52 views

How to know which user killed a process

Is there a way in linux to find out which user or which process killed another process? Maybe a log? I searched through /var/log and specifically on auth.log.* but I didn't find anything ...
1
vote
2answers
267 views

Server timezone changed to PHT but logs still written in MST?

A couple of days ago, I updated the timezone on an Ubuntu 12.04 LTS server using $ sudo dpkg-reconfigure tzdata. Today I noticed while tailing the mail log, that the times were still 15 hours behind. ...
3
votes
3answers
216 views

Logging when limit Exceeds

Is there a log file that logs information when the values set in /etc/security/limits.conf are exceeded? If the values are too tight in the above file the clients using the website hosted on the ...
2
votes
0answers
115 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
1
vote
1answer
359 views

Strange syslog for my server

Today i go on my log with nano /var/log/syslog I have this, and i think it's not very good : Aug 27 06:25:02 ks3309528 rsyslogd: [origin software="rsyslogd" swVersion="4.6.4" x-pid="2235" ...