A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
0answers
36 views

Web Server Log analyzer from a security perspective

Web Server Log analyzers are really meant to just show trends, statistics and are more geared towards an SEO/Marketing standpoint. How can I do the following in regards to HTTP(s) traffic from a ...
-2
votes
1answer
21 views

Rotate Old Files

I have a cron to backup 3 files every Hour, they are SQL backups - in the format name-name-bak-2015-12-1919:30:01.sql I need a way to rotate and delete the older ones say every 7 days? Thought of ...
-1
votes
1answer
556 views

Ubuntu + Postfix: Mail Log Missing [duplicate]

I've just installed postfix on my ubuntu server and am trying to debug why outgoing mails are not being sent. This led me to notice that the /var/log/mail.log file is missing. For that matter, there's ...
1
vote
1answer
75 views

How to parse s3 logs?

I've been trying to parse AWS S3 logs following the documentation, but I've been running into some problems. Specifically, I keep running into new, rare log lines that break my regex. Every time this ...
0
votes
1answer
3k views

How to view mariadb log?

I am using new relic to monitor the performance of my server. Recently I noticed a very strange problem where for every 3 hours, the server will be down for 1 minute. And in the new relic report, ...
0
votes
0answers
54 views

Apache error logs: Client sent RST_STREAM with INVALID_STREAM for stream

Looking through my Apache error logs, they seem to consist of megabytes worth of the following message, over and over again: [Day Mon xx xx:xx:xx 20xx] [warn] [client x.x.x.x] [mod_spdy/0.9.4.3-420] [...
0
votes
0answers
33 views

Odd entries in Debian Linux /var/log/auth.log

I have found some odd entries all of the sudden in my /var/log/auth.log files. They are showing up every 10-20 seconds or so. There isn't anything in cron that would do this, and I am at a loss of ...
4
votes
2answers
161 views

How do I programmatically convert putty logs to human-readable, searchable files?

Background: I have a Windows 7 workstation and use PuTTY for SSH connectivity to Linux servers with session logging enabled. I previously used the Printable output option but that has the benefit of ...
0
votes
1answer
34 views

What are the pair of IPs or “unknown” in the Apache server logs?

The last "column" in my Apache server logs lists either a pair of IPs, one single IP, or is empty (i.e. "-"). Sometimes the first in a pair of IPs is "unknown". It looks something like this: "unknown,...
2
votes
1answer
457 views

nginx not logging errors to log files

I recently moved my CentOS 7 machine from Apache to nginx, and I am still working out the differences. One issue I have noticed for only one of my server blocks is that access and error log files are ...
2
votes
2answers
108 views

500,000 GET requests to a random jpeg per day (Apache)

So I'm getting this on my Apache log on a small server for a local company: 1.2.3.4 - - [09/Nov/2015:17:00:16 +0000] "GET /wp-content/uploads/2012/08/gold-coins.jpeg HTTP/1.1" 301 342 about 500,000 ...
0
votes
0answers
63 views

maillog files not in chronological date order

I am running centos 7 LAMP server with webmin and recently disabled mailman from the bootup and shutdown module of webmin and then rebooted the system. I am positive my log files(such as maillog, cron,...
2
votes
1answer
76 views

Does rsyslogd send new information or the entire log file upon restart

I'm trying to use rsyslog on a Debian machine to send log data to an external server. The log files that I'm interested in have around 10GB of historical data. When I started on configuring rsyslog ...
2
votes
2answers
86 views

apache logs - requests are listed with a long delay

I am using Apache/2.2.15 (Unix). On a specific project (using php 5.3) the logs display a request (POST from a complicated form) long time after the request was performed (40-50 minutes). Sometimes ...
1
vote
0answers
180 views

rsyslog filter on authpriv facility in rsyslog.conf

This has been addressed in other post(s), but I still can't get this to work properly. I am trying to OMIT (discard) certain entries from being written to my " /var/log/secure ". Namely, any line ...
0
votes
1answer
134 views

Determining e-mail server blacklisting from log files

I have my self-hosted e-mail server. There is no current problem of being blacklisted but I want to be proactive about it and I want to start with the log files. There have been some entries in my ...
-1
votes
1answer
1k views

java.io.IOException: Too many open files on tomcat server

I have web application which is based on JAVA (GWT Framework). I hosted my web application on Redhat Linux Server 6.0 using Tomcat 8.0.9 in front of apache http server connected using AJP connector ...
3
votes
1answer
261 views

overriding nginx access_log directive - duplicate log entries

I'm using the default nginx package on Ubuntu 14.04 server. It is using /etc/nginx/nginx.conf as the main config, and then includes configs from /etc/nginx/conf.d/*.conf and /etc/nginx/sites-enabled/*....
-1
votes
1answer
38 views

Apache 2.4 custom logs exception

i am trying to clean my apache log, so i try to seprate trafic / bot / stats in 3 differents files i used the doc : http://httpd.apache.org/docs/2.4/en/logs.html # [ Logs Exeptions ] # - Exeption ...
2
votes
2answers
89 views

Split large Logfile with Suffix like from logrotate

after I've seen that I forgot to add a logrotate-conf for php5-fpm.log on one Server, and now seeing that it has grown REALLY big, I'm asking myself how to split this Logfile into separate ones, with ...
1
vote
0answers
43 views

Easily create a logcheck rule from a log message?

I’d like to more easily create logcheck rules from log messages. Ideally I’d like to have something set up such that I just take a logcheck message I receive, and pipe it to some tool, and it spits ...
0
votes
0answers
17 views

IIS logs - how to clear them without stopping the server [duplicate]

During development of a web site I sometimes find it useful, when debugging, to be able to clear the web server logs prior to making a request whilst running a tool like tail -f (under Linux). This ...
2
votes
1answer
26 views

Can Apache Access Logs be kept separated & also combined as well too?

My question may be a bit confusing, and sorry for that. Here is what i need: Well, i have (let's say) 3 Websites hosted on one Apache (which are defined inside each VirtualHost settings. Then i ...
0
votes
0answers
11 views

Which `Log group` do I select when in AWS `CloudWatch Management Console`?

I am trying to view my logs from aws command line interface, but I am unable to discover what is a log group. I followed the documentation for CloudWatch. However, nowhere in those instructions ...
1
vote
3answers
210 views

No log file output (or email with output) running Python script via cron job

I have the following cron job running a Python script which seems to install okay with no issues after creating it in Crontab and saving (this is on a server running Centos7). I'm not seeing either a ...
3
votes
2answers
264 views

Nginx, log referrers from certain domain to separate log file

I have my nginx setup to block certain referers like so: if ($http_referer ~* (site_name) ) { return 403; } This works fine, however I'd like to also log the blocked referrer to a separate file. ...
-2
votes
1answer
211 views

Linux Server: Too Many Open Files

I have an application running on Linux Server. But server suddenly stopped responding but when I ping from other machine to server it allowed to ping but was not allowing to login into the server. Not ...
1
vote
3answers
634 views

Apache daily logrotate

I want to create daily logs, but there's a small problem. Logs aren't being created for each day, rather they contain the previous log files. Here's my current setup, how can I change it so it only ...
1
vote
0answers
19 views

When is a pid needed in log rotation?

I've read that providing pid in the newsyslog.conf is to ensure that the process writes in the new log file. However, I've tried log rotation without providing a pid because I couldn't find one for ...
0
votes
1answer
1k views

trigger alarms based on strings in log file

I've installed zabbix 2.4.5 on my ubuntu linux server. I have 2 remote servers configured, lets called the relevant one foo. i want to monitor a log file for a specific text, and if it finds it to ...
0
votes
1answer
128 views

Strange symbols in /var/log/auth.log

I just installed fail2ban after realizing that there were tenthousands of attempts to log into one of our servers over SSH. After installing fail2ban, the log bloat stopped, but I still wanted to ...
0
votes
2answers
38 views

Is this a user/pass connection or an email communication connection?

I have lines like these in /var/log/messages: Jul 12 01:26:00 h2 xinetd[1596]: START: smtp pid=11253 from=::ffff:221.219.213.54 I need to know if that is an email connection like the ones being made ...
0
votes
1answer
325 views

Sed - extract only parts of file with certain timestamps

I work with log files on a daily basis. I have been using sed to accomplish my goal of extracting certain lines of data between to time stamps. For example, I use: sed '/20150720 15:06:00/,/20150720 ...
0
votes
0answers
70 views

Solaris run rsync after logadm

I'm trying to get this logadm configuration running. '/dir1/*/*/alert*.log' -C 8 -c -s 10m -t '$file_%Y-%m-%d' -z 0 -a '/usr/bin/rsync -qp /dir1/*/*/alert*.gz root@192.168.0.10::alert_logs/$(...
1
vote
1answer
324 views

Access Glassfish server logs via REST

I am using Glassfish 3.1.2.2. I have deployed Glassfish to localhost. I have enabled the monitoring service and set the log level to HIGH for all components. I should be able to use the view the ...
-1
votes
1answer
43 views

Server Blocked by Provider Sending UDP Packages to certain IP - what does that mean?

My webserver got blocked by my provider recently for the reason that it was performing an attack to another server. The email contained the following log: 08:26:39.219940 68:05:ca:07:02:01 > 78:fe:...
0
votes
2answers
1k views

enable binlog in MySQL on Ubuntu

How can I enable binlog in mysql? The documents say to start the server with --log-bin but when I do: service mysql start --log-bin=/binlog I get: start: invalid option: --log-bin=/binlog And ...
0
votes
1answer
358 views

Is there log4net pattern format logs viewer?

Do you know a good free log viewer for existing log4net log files that were written using PatternLayout format? I've found: LegitLogViewer (probably it is possible to configure that one) YALV!(xml) ...
1
vote
1answer
103 views

NGINX and log rotation: is missing log entries possible?

In it's simplest realization, one can implement NGINX log rotation as following: mv access.log access.log.0 kill -USR1 `cat master.nginx.pid` My question. Do we have a concurrency issue here? I ...
-3
votes
1answer
73 views

How do you restart logging after deleting an NGINX log? [closed]

I deleted my NGINX log because it was very large, thinking that NGINX would automatically create a new one in its place. It didn't, and now I don't have logs. The file was previously located at /opt/...
1
vote
2answers
318 views

How to retrieve previous IP/DNS information from Domain Controller logs?

I unfortunately have DNS scavenging on; information I need to retrieve could have been in Event Viewer DNS logs, but that's not there anymore, or maybe I am not looking for it properly. Story: I ...
0
votes
2answers
185 views

CentOS Server - Available disk space constantly drops

The result of the df command : Filesystem 1K-blocks Used Available Use% Mounted on /dev/sda2 864000688 809338092 10773908 99% / tmpfs 32965940 0 32965940 0% /dev/...
0
votes
2answers
678 views

rsyslog (local) and remote logging

I have several linux servers that I want to monitor the log files. I thought it would be great to setup a central log server that can capture incoming rsyslog packets. Each hostname would have its own ...
1
vote
0answers
78 views

logger not logging to remote rsyslogd instance

I am running CentOS 7.0.1406 with rsyslogd 7.4.7 and logger from util-linux 2.23.2. I have two machines connected via a switch. When I try to use logger to log from one machine to the other, nothing ...
0
votes
1answer
74 views

Redirecting syslog facility to other facility

I have a syslog server, which separates logging informations according to hostnames. It can separate messages if it's in the 'local1' facility. I have a mail server, which sends messages to the 'mail'...
1
vote
1answer
1k views

Redmine 500 Internal Server Error on My account page

I used this method to install redmine I installed redmine in /opt/redmine, and i checked my log in /opt/redmine/current/log/production.log I recently upgraded from 2.5.2.stable.13345 to 2.5.3....
1
vote
1answer
158 views

Change the logs directory for CentOS

The default directory in which the OS writes its logs is '/var/log/', I want to change that directory to another one that I create. How can I do that? Note: I tried changing the paths (/var/log/.) ...
11
votes
3answers
18k views

What is the difference between syslog, rsyslog and syslog-ng?

I am a bit confused in syslog, rsyslog and syslog-ng. From where can I get the source code for syslog()? Is there any difference between rsyslog and rsyslogd?
0
votes
1answer
744 views

FreeNAS is getting Uncorrectable parity/CRC errors

In my FreeNAS 9.3 installation I am getting more and more Uncorrectable parity/CRC errors (like these here: May 15 13:39:41 freenas (ada1:ahcich1:0:0:0): READ_FPDMA_QUEUED. ACB: 60 00 b8 0e 18 40 91 ...
0
votes
1answer
46 views

How can I avoid non-existent file -systematically- requests?

This is my apache httpd log: [Wed May 13 18:29:48 2015] [error] [client 108.162.213.59] File does not exist: /www/html/ui/core.min.js [Wed May 13 18:29:48 2015] [error] [client 108.162.210....