A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
0answers
60 views

Windows Journal files $UsnJrnl too big

I have a server, windows 2008, running Raid 10 on 4 600GB hard drives. Server has been running for over a year and it is used for a database. Database size is around 780GB. We have been noticing that ...
0
votes
2answers
95 views

How can I decipher this HTTP PHP-request?

On my server I have serious HTTP an SSH attacks running. Most of them are brute force password checks or attemps of /etc/passwd retrievals. But some of them are trying to start the bash via plugin ...
3
votes
2answers
2k views

What is the source of thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext)?

I have a Windows Server 2008 R2 system that's showing thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext) in the Security section of the Windows Logs every single day. There ...
1
vote
1answer
58 views

How can I list the Source Network Address for failed FTP attempts in the Security Windows Log on Windows Server 2008 R2?

I manage a server running Windows Server 2008 R2 that constantly gets bombarded with brute force attacks via FTP. These failed login attempts show up in the Security section of the Windows Logs as ...
1
vote
1answer
104 views

How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) to send log files from several servers to a central server?

Summary How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) and scheduler (cron) to send log files from several servers to a central server? Context Our ...
0
votes
1answer
21 views

Parse requests per OS type apache log

I'm trying to return a sorted list of requests per OS type, parsed from an Apache access_log file (not combined format as I need the user-agent info). Here's an example of the output I'm looking for: ...
1
vote
0answers
57 views

Directories converted to files

Our development team went to start HTTPD and got this: Starting httpd: (20)Not a directory: httpd: could not open error log file /etc/httpd/logs/error_log. Unable to open logs ...
0
votes
0answers
91 views

Apache error log not showing full path of 404 failures

If I have a working path like /gallery/landscapes and I try to access this inexistent url: /gallery/landscapes/whatever I see the 404 error in my browser but the apache log says that I had an ...
1
vote
0answers
39 views

mysql server initialization error if I add 'log = “testfile_log.log” '

Guys I'm just trying to set my general log file set up like here http://stackoverflow.com/questions/5441972/how-to-see-log-files-in-mysql. so I added log = "testfile_log.log" as below to my.ini # ...
0
votes
0answers
36 views

HTTP 403 on the client (randomly); HTTP 200 in the IIS 6 log

The title pretty much explains it... what can cause a web browser to show a 403 forbidden error but the IIS log shows a status code of 200 OK? It is random and not consistent. The client, in this ...
1
vote
0answers
19 views

Is it possible to have multiple log files for one rsnapshot?

the company im working for use rsnapshot for its backup. I know where to put the log path in the conf file, but i was wondering if it was possible to have something like : /var/log/rsnapshot --> ...
1
vote
1answer
48 views

“GET /assets/)!==t&&(e.html(e.data( HTTP/1.1” 200 3538 “-” “Java/1.7.0_25”

I'm seeing GET requests like: "GET /assets/)!==t&&(e.html(e.data( HTTP/1.1" 200 3538 "-" "Java/1.7.0_25" in my logs for a box hosting a Rails app. Looks suspiciously like someone probing ...
1
vote
0answers
20 views

How to properly look for an info about auditd being turned off from init?

I have a mystery on my hands. One day /etc/rc5.d/S11auditd became /etc/rc5.d/K88auditd and no one takes responsibility for it. It looks like it just happened by itself, which is hardly plausible and ...
2
votes
2answers
308 views

Fail2ban log filled with entries saying “fail2ban.filter : WARNING Determined IP using DNS Lookup:..”

My fail2ban log at /var/log/fail2ban.log is completely filled with entries saying: fail2ban.filter : WARNING Determined IP using DNS Lookup: [IP address] I think this may have begun after I changed ...
1
vote
0answers
62 views

What are recommended permissions for files in /var/log?

I am working on tightening the security for various servers (mainly Debian Linux), and one of the tasks is to tighten permissions on files in /var/log so that files are not world readable. But there ...
0
votes
1answer
113 views

Log files too large and can not login to plesk

I am on a vps platform at Media Temple. Yesterday when i tried to log in via pleask, the message below appeared .... ERROR: Zend_Db_Statement_Exception: SQLSTATE[HY000]: General error: 1030 Got error ...
0
votes
1answer
30 views

Webserver Log Files and Server Speed

We have a windows 2008 server with Plesk as the Control panel. We have noticed a site has a 83GB log file as the hosting provider never attended to setting up the log file rotations. We have also ...
0
votes
2answers
53 views

How to find out previous start-up time, so one can read `/var/log/dmesg.0` log?

That should be a quick one: I'm running a small server, and one day discovered, that one of the LXC containers inside is down. I started it again, but I want to find out, for how long it was down. I ...
1
vote
0answers
151 views

Zabbix 2.0 log monitoring - deactivating trigger

I am using Zabbix for monitoring log files. I've got trigger, which is activated when errors are written to the log: {Test:log["/opt/test/log.out","^ERROR.*$","UTF-8",100].diff(0)}>0 So, now I ...
0
votes
0answers
64 views

Apache2 on Windows - Log Files don't rotate

I've got an Apache 2.4.6 (64 Bit) running on a Windows Server 2012 (64 Bit) machine. I want to achieve a log file rotation every day or if a size of 29MB is reached. As documented on ...
3
votes
3answers
279 views

Filter the output of a log file

Question I've a log-File which display all console-logs of my website in the range of 10.Oct to 1.Nov, start with the logs of 10.Oct. I need all logs from the range of 25.Oct until today. The problem ...
0
votes
4answers
498 views

remote server log viewer/analyzer

I have an rsyslog server running Ubuntu 12.04 which stores logs from different clients also running Ubuntu 12.04. Now I want to view those logs from my machine which also runs Ubuntu 12.04. One way ...
0
votes
1answer
65 views

Create Logfile for all fired commands on server

I want to maintain logfile for all fired command on server. We have more than 3 admins and I want to monitor all commands which are fired by these. Is it possible ?
0
votes
0answers
48 views

Elastic Beanstalk and IIS logs

I have an ELB app and when logging into an instance and looking at the IIS logs I see something like the following: 2013-10-18 17:14:25 10.240.27.2 GET /FSViewer/Img.aspx ...
1
vote
1answer
331 views

Getting logs from remote clients via rsyslog

I have freshly installed Debian 6. I am trying to get syslog server for a reason, I used to follow manual for this task. I configured /etc/rsyslog.conf on remote client server to send data via udp ...
0
votes
1answer
136 views

A good tool for parsing Nginx logs for Django app [closed]

Can anyone recommend a good tool to parse and analyze Nginx access logs which will group the urls based on the regex in my django urls.py files (or a config file generated from them)? It does not ...
1
vote
1answer
36 views

Fail2ban still adding to log after uninstall

I am running a CentOS6 VM and I have been playing with Fail2ban, upon removing the service from my server I can see that it appears to be still posting logs to the /var/log/maillog Here is a link a ...
1
vote
1answer
58 views

Apache logs just “plesklog”

I just discovered that my Apache 2.2.8 just logs in his access_log the string plesklog since a few weeks. Normally it looks like that www.xxx.yyy.zzz - - [19/Jul/2013:04:37:32 +0600] "GET ...
0
votes
2answers
348 views

Log Analysis Tools for Apache & Tomcat [closed]

I'm looking for a log analysis tool to monitor & analyse the logs from an Apache & Tomcat webfarm. It would need to have agents that run on the servers, and ship logs back to a central ...
0
votes
1answer
69 views

Statistics from huge IIS logs

We have a web site which produce roughly 100GB of IIS Web log files every month. We would like to get statistics from these logs, for instance the most visited URL's, authenticated users with most ...
1
vote
2answers
77 views

Apache logs accesses on an already rotated log file

I usually create my access and error logs in a domain-name folder under /var/log, and these files are rotated with logrotate using this conf : /var/log/mydomain.org/access.log { weekly missingok ...
2
votes
1answer
272 views

mysql on freebsd makes 1GB binary log files every 20 minutes filling free disk space very fast

I have a problem with MySQL on FreeBSD. It makes a lot of 1GB binary files every 20 minutes and it's filling free disk space rapidly. -rw-rw---- 1 mysql mysql 1073741982 2013-09-14 18:26 ...
0
votes
0answers
88 views

Nginx bytes sent larger then acutal file size

I am using Nginx 1.4.1 and when I looked at the log file and added up the total bytes sent for different files it was larger then the file size. Here is part of the log file 127.0.0.1 - User1 ...
1
vote
1answer
159 views

Snort, Portscans and Scanned IP Range field

According to manual.snort.org, TCP Portscans goes from one computer to other one, but when you take a look to an tcp portscan alert in snort/snorby you can see this: In one hand: Source: ...
2
votes
1answer
612 views

How to install auditd on CentOS?

How to install auditd on CentOS 6.4 x64 ? I want to Log all commands run by admins Log all commands run by admins on production servers Edit: I can't run aduditd service I did with this tut enter ...
0
votes
1answer
160 views

How to disable MySQL logging?

MySQL in RHEL 5.5 logs it errors in /var/log/mysqld.log Which grows to mammoth size frequently. I need to disable it, but I failed to find any reference to do it. Finally I added below in my.cnf ...
0
votes
0answers
49 views

Who to exclude specific domain from nginx log file

There are a lot of API-Requests to a non existing service. Is there a way to tell nginx that it shouldn't log the request errors for this sub-domain?
-2
votes
2answers
346 views

Apache Error Log what does mean for “File doest not exist / undifined”

I can not understand following error from my VPS (LAMP) 175.101.XX.XX - - [27/Aug/2013:17:41:48 +0530] "GET /undefined HTTP/1.1" 404 694 "http://mydomain.com/memberpage.php" "Mozilla/5.0 (Windows NT ...
0
votes
1answer
70 views

Delete log files on Virtual Host

I have a few virtualhosts set up on my machine, and the server keeps crashing because of the disk space being too full. I've checked out and it seems that one of my virtual host log folder is 2Gb. In ...
1
vote
1answer
133 views

How to make comments in logcheck files?

how can I add comments to logcheck ignore-rules? Things I tried so far: # seems to match single # characters instead of starting a comment empty lines matches against everything $ matches against ...
1
vote
1answer
44 views

How can I get ONLY the IP adresses from my Apache AWStats server logs?

I am having trouble getting my IP addresses from my site's server log out from amidst the mess of other data in a server log. Before I crack open Excel I know there's a way to do it because I found ...
2
votes
2answers
137 views

Gitolite3 not writing

I am a bit at world's end here. I want to install gitolite3 smart http over apache. I can successfully pull, but not push (doesn't even give me any errors or notices, not even in any known log). I ...
0
votes
1answer
183 views

CentOS dedicated server hangs and discovers new hardware every 3 to 10 hours

I have a dedicated server since March 2013 with CentOS release 6.4 (Final) and CPanel 11.38.1 (build 15) with [Apache/2.2.24 (Unix) PHP/5.2.17]. The server has only one website with traffic about 2000 ...
0
votes
1answer
101 views

SSH to track hacker [duplicate]

I'm very new to using SSH and my server has been hacked, someone has gone onto a website of mine and made modifications. I have the time which they did it (29/07/2013 18:14:30), but cannot see how ...
3
votes
1answer
86 views

Finding out which log line triggered a logcheckd notification?

We are using the logcheck package in Debian for log-monitoring. If I understand it correctly, logcheck monitors the logs, filters out known (normal & unimportant) messages and triggers a mail if ...
0
votes
1answer
294 views

Cron job does not generate expected log file

I'm trying to execute a shell with crontab. The cron job executes the shell but doesn't generate the log file i need. This is what i'm using for my cron: 10 * * * * /home/user/3nvo.sh This is a ...
0
votes
1answer
92 views

How can i have various configuration in nagios config file

I am using nagios check_logfiles plugin from here http://labs.consol.de/lang/en/nagios/check_logfiles/ I have the config file like this @searches = ( { tag => 'san', logfile => ...
0
votes
3answers
47 views

Need Explanation of User Agent

I'm analyzing user agent field of different types of web server logs. Ex. Apache Access Log/W3C/iplant etc. I found some lines in the log files have following type of user agents. I'm confused since ...
2
votes
3answers
202 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
-1
votes
1answer
215 views

EDAC error messages at boot each time, is it a hardware issue?

I noticed I have EDAC error messages in the logs while I was doing a dmesg. Then I found out I am getting the same EDAC error message each time at boot. This is on CentOS 6.4 x86_64. I suspect a ...