A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.
0
votes
2answers
18 views
Analysing user behaviour using IIS log
Recently I've decided to try to analyse user behavior on my site by using the information in the IIS log files in order to think of improvements to the site.
I've tried some free tools to analyse logs ...
0
votes
2answers
21 views
How to control error_log file size
I can see multiple error_log files on my Apache Server.
Example: error_log, error_log.1, error_log.2, error_log.3, error_log.4 ..
I think initially single file is created with name error_log. Then ...
0
votes
2answers
29 views
Cleaning log files on Solaris for a service manifest
I have a service manifest on Solaris (Smart OS actually) and I would like to periodically clean its log files either automatically or manually without shutting down the server.
My log is here:
...
-1
votes
0answers
24 views
Best Pratices for Error and Access Log Files [closed]
I got a server which has at the moment a lot of access and error logs. I'm using Ubuntu 12.04 and Nginx.
My question is what would be the best pratices to keep this files under control but not loose ...
1
vote
2answers
43 views
PowerShell filter files by date in name
I have many files with different names per day. How can I filter them by the date in their name?
For example:
app_20130505.log
app_20130506.log
app_20130507.log
app_20130508.log
app_20130509.log
...
1
vote
2answers
44 views
Strange java user agent in access.log
I recently noticed a huge load on my main production server, after some log parsing i stumbled upon a large number of those user agents originate from about 20 different IPs:
173.244.182.194 - - ...
0
votes
1answer
27 views
Why is the fpcgisock= socket found in apache logs folder?
The listing of apache logs folder in my hosting server is as follows:
someuser@machine [~]# ls -al /usr/local/apache/logs
total 86980
drwxr-xr-x 2 root root 4096 Apr 30 09:18 ./
drwxr-xr-x ...
0
votes
1answer
39 views
GoAccess analytics and HTTP Referer
This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own ...
3
votes
3answers
32 views
Reopen a truncated file while following a file with less
Sometimes I am running a less +F on a log file, which I then truncate. I would like less to realize that the file has been truncated and start following the file as it is now. Currently, I am forced ...
1
vote
1answer
60 views
I just found odd URLs in my Apache logs
I was using Tail on an Apache log file and noticed these:
/cie/insxp5/update.ins
/rpam/homepage-e.asp
/rpam/Training-e.asp
From a short session of googling, I think the rpam URLs refer to either ...
1
vote
1answer
41 views
Append date to domain logs with logrotate in Plesk 11
I am using plesk with a Media Temple DV 4.0 Account. It has a GUI to set up log rotation for my domains. However I need to append a date/time stamp to the logs so our stats software importer can ...
0
votes
2answers
24 views
Strange HTTP logs
in my apache log i have very lot lines like this :
IP_ADRESS - - [21/Apr/2013:23:05:27 +0200] "\xc8j\xe8_\x8b\xad*x\x98\x0f\xbe\x1a\xf5\xfd\xe3*8\xa3H\x0f\x80\r)o\xe7\xc9\x8b\b ...
2
votes
1answer
37 views
How to tell cold boot from warm by /var/log/messages
Say I have a log which captures something really interesting as happening during boot. I want to know, was it just a reboot, or complete power off-and-on. What are the definite signs of cold reboot?
0
votes
0answers
18 views
Where are the httpd access log entries for the ISPConfig browsing?
Well that's pretty much the question.
Where are the httpd access log entries for the ISPConfig browsing ?
I cannot find it in any of the log files.
2
votes
1answer
39 views
Wildcard support for InputFileName in rsyslog?
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: ...
0
votes
1answer
34 views
syslog-ng stopped and don't want to start
I noticed lately that my syslog is empty.
I tried restarting it but i get this error:
$ /etc/init.d/syslog-ng reload
Reload system logging: syslog-ngsyntax error in /etc/syslog-ng/syslog-ng.conf at ...
0
votes
0answers
23 views
Files beginning with log being deleted [duplicate]
Im have a huge, and bizarre problem, this has occured twice no this month, on the 1st and the 13th.
I run a small shared server for my clients, maybe 30 active domains, most run on the same real ...
0
votes
1answer
43 views
How can I automatically delete old apache error log files?
My /var/log/apache2 folder is getting out of hand. It has loads of old compressed error.log files that I want to get rid of before my server runs out of space and explodes.
Firstly - Is it safe to ...
0
votes
1answer
28 views
How to split access and error logs in Parallels Plesk?
I have a site in PHP on Apache. Is there a way I can define settings in Parallels Plesk Panel for logging for e.g. it should create log file for each day?
Currently my access_log file size is more ...
0
votes
1answer
54 views
How to check web server logs for SQL injection?
If I have a PHP site hosted on Apache and someone hacks it using SQL injection, is there a way I can find out exactly which script caused this by looking at my web server logs?
Or using some other ...
0
votes
0answers
46 views
funneling apache logs to syslog server
We are in an AWS environment and want to have all our web servers log to one logserver (also in the same AWS VPC). We want to stream all the Access Log data to the logserver I setup. The logserver ...
0
votes
0answers
24 views
Merging multiple log files by date including multilines
I have several logs containing lines all starting with a timestamp, so that the following works as expected to merge them:
cat myLog1.txt myLog2.txt | sort -n > combined.txt
Problem is, that ...
0
votes
1answer
58 views
security_error_ring_buffer_recorded in system health log - what does it mean?
Our company is running a few servers for a couple of websites. The server are running Windows Server 2012 and for databases we have MS SQL Server 2012.
Today I was checking the log files located in:
...
0
votes
1answer
20 views
Getting Webalizer to show URL stats for all time, not by month
The conf file has this section:
AllSites yes
AllURLs yes
AllReferrers yes
AllAgents yes
AllSearchStr yes
AllUsers yes
...which is great, but I don't see any way to show the same ...
0
votes
1answer
25 views
Webalizer shows only PART of the very first day in a log
I'm using webalizer-2.23-04-cygwin, the latest binary I could find, and it's doing the same thing an older version was also doing on a certain 900MB logfile I have. It only shows the first 411 hits, ...
-1
votes
1answer
43 views
HTTP request logs needed for anaylsis [closed]
I'm looking for detailed server logs of HTTP requests, so that I can find the most common HTTP request header values for fields such as User-Agent, Accept, Accept-Charset, etc.. I found a resource ...
0
votes
1answer
20 views
Large Number of 206 codes in Access Log
I'm finding a lot of 206 access codes in my Apache access log. After looking at the access log it seems that a number of IPs would hit the server multiple time for partial content on a number of large ...
2
votes
1answer
86 views
Is it possible to log additional HTTP headers in IIS logs?
I need to analyze logs for Exchange and would like to get additional headers saved such as MS-ASProtocolVersion
Is is possible to configure IIS to log these additional headers?
POST ...
0
votes
0answers
14 views
Securing Windows 2008, moving logs ocation to other system [duplicate]
Our company want to put out VM with Windows Server 2008 to the Internet.
The thing is, we need to provide maximum security of this system. How to do that?
I know the password should be very long and ...
0
votes
1answer
54 views
pptpd: log of unsuccessful authentication
I am using pptpd on Debian 6.
I know that last shows the list of connections as well as the source IP.
I am looking for the log of unsuccessful authentication, or any form of alert/ban for a source ...
0
votes
1answer
87 views
Trying to Setup Log Monitoring with Sentry
I am trying to setup a log monitoring application for monitoring Jboss Application logs. We have more than 50 Jboss Application servers in all our environments. My Requirement is below.
The log ...
0
votes
1answer
76 views
the network dropped on ubuntu 12.04 server but came back
I have a ubuntu server, type 12.04 that serves as a mysql box and intranet server. Without notice it dropped all packets (www, ping and mysql). What logs should i check - the messages log is not in ...
1
vote
1answer
211 views
How to set up fail2ban to read multi log in a jail?
How can I configure multiple logpaths for the same rule?
I'm trying to write a syntax like this:
[apache-w00tw00t]
enabled = true
filter = apache-w00tw00t
action = iptables-allports
logpath = ...
0
votes
0answers
57 views
Monit check log file content
I am having a issue with Monits content check. I know I can check the log file like this
check file test.log with path logs/test.log
if not match "something" for 5 cycles then alert
But the log ...
0
votes
1answer
227 views
Delete IIS log files
I do not find a way to disable and delete log file at C:\inetpub\logs\LogFiles\W3SVC2\u_extend1.log
The file is extremely large about 50gb, I have tried to delete it as administrator, but got an ...
0
votes
1answer
50 views
Opening Windows NT evt files
Does anyone know of a tool which allows me to open Windows NT logs. I managed to get some results by using Window's 7 Event Viewer, but for some sources, it does not have the event's description. One ...
0
votes
0answers
12 views
What is the meaning of ResponseStatusWin32 in IIS's log?
I need to figure out what the error codes mean in IIS's Web log... specifically, I need the meaning of the final column for Win32.
This is different the the code that IIS logs for HTTP responses ...
0
votes
3answers
241 views
Why is logrotate not rotating logs Tomcat access logs on aws centos 6.3?
I have the following file in /etc/logrotate.d:
/usr/share/apache-tomcat/logs/*.access {
nodateext
copytruncate
daily
rotate 7
notifempty
postrotate
EXT=`date --date='-1 day' +%Y-%m-%d`
/bin/gzip $1.1
...
0
votes
1answer
55 views
Monitoring auth.log
Say you want to be able to easily see who's logged in to a system recently.
auth.log has this information, but it's very cluttered with crontab entries and you have to use sudo to read it.
...
0
votes
0answers
59 views
Exchange IIS error 503.1907 in logfiles by “/rpc/rpcproxy.dll”
I'm analyzing Exchange 2010 log files in depth and see "/rpc/rpcproxy.dll" generating login errors in either one of these ways
HTTP Response 401.1 with a detailed Win32 Response code meaning the ...
2
votes
1answer
59 views
I need to monitor a log file with monit if the file does not change monit will alert
I need help. I was looking in to Monit documentation and I need help. I could not find my answer there. I need to monitor a log file of a service, if that log file stops to increase in size or even ...
0
votes
1answer
149 views
Ubuntu EC2 Apache 2 : Access Log only shows Internal Dummy Connection
I'm running a micro instance on Amazon Cloud Services, and a recent spike made our web server unresponsive, I'm trying to do a little research to determine if this was a DOS attack, or which process ...
0
votes
2answers
30 views
Is there a free solution to count the number of context roots in an apache file?
I have an apache log file. I need to report how many rows (request) are from a specific context root. The apache logs already start with a slash and context root is to the second slash.
Example ...
0
votes
0answers
32 views
How to Set Up SimpleDB-Appender for Apache HTTPD?
I have some EC2 servers in a cluster and I need to combine the logging of the web access logs. It looks like SimpleDB is a good solution. I found SimpleDB-Appender. I have that set up, but cannot ...
1
vote
1answer
66 views
Why are these requests in my Apache logs?
I've found the following lines in my Apache 2.2 logs (using the standard "combined" log format):
92.240.68.152 - - [10/Feb/2013:20:47:38 +0000] "GET http://8stepschools.com/images/8stances_tiger.jpg ...
3
votes
2answers
141 views
Tool to collect and read all linux logs in one place [duplicate]
I have two linux servers. I'm an administrator, and part of my daily routine is to check all the logs for errors or strange messages. So, every morning I check:
On server #1:
/var/log/syslog
...
0
votes
0answers
69 views
Robocopy Log Size Too Big
I am running a robocopy script that mirrors 1 drive to another computer, and is using the /MOT flag to stay in memory and every few hours maintain the mirror. The script is also set to create a log ...
0
votes
1answer
116 views
httpd error log : [client 127.0.0.1] Attempt to serve directory: /var/www/html/
I was looking through my server's error logs, because it has been crashing lately, and I noticed this error occuring constantly:
[Mon Feb 04 17:26:09 2013] [error] [client 127.0.0.1] Attempt to ...
0
votes
1answer
102 views
What is the exmon equivalent in Exchange 2010? (to get detailed per user information)
Exmon was an Exchange 2003 utility that exposed the quantity of RPC calls and IO that each user consumed.
I suspect that several users are downloading OSTs or manually importing other data into the ...
0
votes
2answers
105 views
How do I funnel all my EC2 apache logs to one server
Is the best way to get all my EC2 Web Server Instance Apache Logs in one place, to create a "LogServer" EC2 Micro instance and point all the Apache Configs to it? Not sure how to do this and ...
