-1
votes
0answers
22 views

Recommended FOSS for Linux log monitoring and alarm triggering? [on hold]

We currently have some Asterisk boxes. These boxes generates some WARNING and ERROR messages to log files in /var/log/asterisk. We need some software for active and real-time monitoring on these log ...
2
votes
3answers
73 views

Common login script

Few weeks ago I thought it would be a good idea to write a script which should send me an email whenever some user would log in into my server. So I came to a perfectly working script ...
0
votes
2answers
37 views

View realtime list of connections to Postfix

I am running Postfix on a linux box with a couple hundred local users with mailboxes. Is there a way to monitor all incoming connections (SMTP) to the Postfix service? I.e. a live stream of "IP ...
-3
votes
2answers
33 views

How to monitor and list modified files server wide for brief periods of time?

I would like to, from time to time, enable server-wide file monitoring that will show me all files being modified, updated and created while I have it running and thus simply spewing forth a list of ...
0
votes
2answers
79 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
0
votes
0answers
57 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
3
votes
1answer
121 views

Hiding linux kernel messages from console

I have a machine running a custom build of Linux kernel 3.2.12-rt based on Debian Squeeze. I'm getting kernel messages printed to the console. I don't want it to do that. I know why it's doing ...
-1
votes
1answer
63 views

Application log storage/review tool

My boss is wanting me to wrap applications on a few servers with shell scripts (or inline code for those we develop ourselves) to log basic data (user, date/time, commandline) to a central server so ...
1
vote
1answer
114 views

Shorewall: logging to custom file

I am running an Ubuntu Server 14.04 system with a shorewall firewall. Shorewall is essentially a front end to iptables, and it is iptables that does the logging via Netfilter (my understanding so ...
0
votes
1answer
41 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
0answers
76 views

Ubuntu 12.04 crash analysis - strange binary data on all open files at the moment of crash

A couple of hours ago we got a system crash on Ubuntu 12.04. We checked all the log files and there is nothing suspicious to blame to. Last stuff that was logged was some dovecot activity. There are ...
1
vote
0answers
111 views

How to configure nDPI for iptables

I am new to nDPI, I have installed nDPI but when I add rules like; iptables -I OUTPUT -m ndpi --http -j REJECT it shows error iptables v1.4.7: Couldn't load match ...
0
votes
2answers
68 views

How do I see if user connected to mysql over ssh tunnel?

I imagined command last, would also give me mysql over ssh tunnels list. But I was wrong. Is there a place where this tunnels are logged? Ubuntu server 12.04.
1
vote
1answer
86 views

How do I configure Linux to log when ulimits are hit?

For example, say I'm hitting nproc. I would expect a log message to appear /var/log/messages or similar, but it looks like that needs to be configured. How do I do that? I can't find anything relevant ...
0
votes
0answers
33 views

Rsyslog with Nginx virtual hosts

I have an Nginx server with several virtual hosts, each of them generating log files. I'm sending all these logs to a remote server but don't know how to create one log file per virtual on this ...
2
votes
2answers
53 views

How to log remotely without syslog

I have a bunch of logs which are not created using syslog. I would like to export them to another host. If possible using syslog or rsyslog. A pipe? how can I do that?
0
votes
2answers
84 views

How to Change sysstat/sar logging folder

I have just enabled sysstat on one of my servers (Ubuntu 12.04), I have noticed it is logging all to /var/log/sysstat/sa04 /var/log/sysstat/sa05 /var/log/sysstat/sar04 How can I change the sysstat ...
0
votes
1answer
210 views

Compress and remove logs from jboss on linux with cron

I need to compress and remove log files after some time from serwer. I have never write scripts before. So far i have script logs.sh: #!/bin/bash LOGS=/usr/local/jboss/server/default/log/ ...
0
votes
0answers
27 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
0
votes
1answer
9 views

Get referrer of requests currently listed by status module

Our server has on normal time 20 request/second, which can be seen constantly on server-status (status module) Sometimes we have 800 requests/second, and all these requests are shown on ...
-2
votes
1answer
137 views

Configure Protocols using iptables log file with ndpi [closed]

I am using iptables with ndpi to filter my network and add two rules to my iptables rules they are iptables -I INPUT -m ndpi --http -j LOG iptables -I INPUT -m ndpi --google -j LOG In my log file ...
2
votes
4answers
181 views

Use logger in shell script

How can I use logger in a shell script? If I run ntpd -qnp pool.ntp.org 2> >(logger) in console, it works as expected. If I put it into a shell script #!/bin/sh ntpd -qnp pool.ntp.org ...
1
vote
1answer
65 views

Can I automate emailing of critical errors with systemd journal?

Fedora OS introduces journalctl as the new way to log error messages. I learn about this recently when I performed an upgrade. var/log/messages and many other log files are now combined into a ...
2
votes
0answers
66 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
1
vote
1answer
85 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
0
votes
0answers
51 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
0
votes
1answer
336 views

What is the function of the cimserver daemon?

I noticed in /var/log/messsages a process 'cimserver' was logging some interesting messages: Nov 27 15:33:37 lb-web-standby cimserver[2250]: Failed to deliver an indication: Cannot connect to ...
0
votes
1answer
33 views

syslog, kernel.warning and iptables innerworking

Im tinkering with my iptables logging at the moment. So I got my syslog to use another log file with tips from the web. basically you end up changing some chains and rules plus aan extra line in the ...
0
votes
0answers
61 views

Does OpenSSH server log any connection attempts?

When I logged to my VPS server I noticed an established connection on port 22. The IP address was not mine. The connection lasted about a minute and then was closed. I could not find any logs ...
2
votes
1answer
84 views

log bash command centralized server or any auditd saas [duplicate]

I'm looking for a way to track our sysmin work, in the servers. Lets say sysmin 1 and sysmin 2 have access to any server but we need to make sure and track anything that they do in our server. ...
0
votes
0answers
75 views

Logrotate config for a laravel application

I have a laravel application which writes the log file names like log-apache2handler-2013-11-17.txt In my logrotate script, I am doing *.txt however this filename is going to change everyday, so by ...
5
votes
1answer
118 views

How does logrotate handle concurrency?

In the case that logrotate runs the same time as the log file is being updated, what will happen? Will the new log be rotated into a historical log file? Or it will stay in the current log file? ...
0
votes
1answer
51 views

Logging violations of rules in limits.conf

I am trying to log the details of the programs that where failed due to the limit cap defined in the limits.conf. My initial plan was to do it using the audit system. The idea was to track the system ...
0
votes
1answer
672 views

Apache logs other user read permissions [closed]

We have several developers who maintain the system and I want them to easily read the log files in /var/log/httpd without needing root access. I set the read permission for 'other' users but when I ...
0
votes
1answer
113 views

Centralized logging server failover

I'm planning a centralized log server for 200+ Linux boxes, rsyslog on both the client and server side. Here are my requirements: Do not log anything locally on Linux boxes and send everything to ...
-1
votes
2answers
125 views

How to avoid log files growing too big?

I have a Linux process generating very big log files. Those file could grow infinitely if I didn't do anything. Is there any way to limit a file's size and to make it act like some kind of fifo buffer ...
0
votes
0answers
149 views

Linux audit failure flag ignored? (can't silence printk)

We're using the Linux audit subsystem to monitor process execution. # in audit.rules -a exit,always -F arch=b32 -F subj_user=unconfined_u -S execve -a exit,always -F arch=b64 -F ...
0
votes
0answers
209 views

Getting strange error from elasticsearch backed of LogStash

When i try to run any query from logstash like "httpd" search from url: http://mydomain.domain.com:9292/search , it gives me following error: "No results for query 'httpd'" And in the log ...
0
votes
1answer
49 views

How to know which user killed a process

Is there a way in linux to find out which user or which process killed another process? Maybe a log? I searched through /var/log and specifically on auth.log.* but I didn't find anything ...
1
vote
2answers
166 views

Server timezone changed to PHT but logs still written in MST?

A couple of days ago, I updated the timezone on an Ubuntu 12.04 LTS server using $ sudo dpkg-reconfigure tzdata. Today I noticed while tailing the mail log, that the times were still 15 hours behind. ...
3
votes
3answers
205 views

Logging when limit Exceeds

Is there a log file that logs information when the values set in /etc/security/limits.conf are exceeded? If the values are too tight in the above file the clients using the website hosted on the ...
2
votes
0answers
96 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
1
vote
1answer
255 views

Strange syslog for my server

Today i go on my log with nano /var/log/syslog I have this, and i think it's not very good : Aug 27 06:25:02 ks3309528 rsyslogd: [origin software="rsyslogd" swVersion="4.6.4" x-pid="2235" ...
-1
votes
1answer
71 views

Where is ssh daemon log file

I am facing a strange issue on my Centos 5.5 VMware virutal machine. SSHD service stops responding after working for few days. At the same time cmd>telnet server 22 give me no response. It works ...
0
votes
1answer
85 views

Possible conflict in log rotate files with vhost? (CentOS)

I'm a little new to this, but our previous developers didn't set up the vhost logs to rotate (or Apache was configured wrong) so while the default logs rotate, the vhost ones do not. I was reading ...
1
vote
2answers
319 views

What do these entries in my SSH logs mean? [duplicate]

I recently noticed that I have entries from an unknown IP address in my SSH logs. I performed a grep to extract all entires that didn't contain my own IP address. I was presented with this: Jul 24 ...
0
votes
3answers
550 views

Is there any logs in Linux which tells if some port has been denied

Suppose in i have the firewall active or any other security like SE linux etc. Now suppose user wants to connect to port 21 and Iptables does not allow it. Now when users gets denied is that ...
0
votes
2answers
206 views

Log incoming requests on Ubuntu (ports 80, 443)

We have Tomcat running on Ubuntu server. It runs a web service, open to the internet. Sometimes it has a sudden spike of traffic and goes down. There is nothing unusual in Tomcat access logs. I guess ...
2
votes
0answers
51 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
0
votes
1answer
97 views

Where are filesystem full event logged?

I forced a filesystem to be 100% full. I am able to generate a message to STDOUT: # dd if=/dev/urandom of=reallylargefile count=2097152 dd: writing to `reallylargefile': No space left on device ...