A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
3answers
768 views

Tool to analyze postfix maillog [closed]

I have a mailserver running on iRedMail. Recently we have some issues that people reporting they would receive phisihing emails from us, which haven't been sent by the users they are saying the are ...
-1
votes
2answers
171 views

Parse Apache logs for specific verbiage within the last hour

I'm looking to parse my /var/log/httpd folder which contains a lot of Apache log files. I'm looking for specific events within the last hour. I've tried the below, but I didn't have any luck. grep ...
0
votes
2answers
102 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
-1
votes
3answers
70 views

Why a sed command stop my log file to be written to?

I launch on a Gnu/Linux server an application myApp: ./myApp &>myApp.log & Of course, the log file will soon become huge. I would like to use sed to reduce it (I'm aware of logrotate ...
1
vote
2answers
72 views

Revover original email from Sendmail log

I have a website the contact form has been failing silently for two weeks (Wordpress + Contact form 7). Apparently updating to Contact Form 7 made the assigned email to fail ...
1
vote
1answer
534 views

Apache log - file does not exist

I have quite a few of these in Apache logs piling up every day: [Mon Jun 09 20:42:58 2014] [error] [client 180.153.214.181] File does not exist: /home/user/public_html/ajax.googleapis.com, referer: ...
0
votes
1answer
156 views

Deleting log files from an AWS RDS Postgres instance

How can I delete logs from an RDS Postgres instance? I just noticed that my instance is displaying the message, storage-full. I can find any descriptions of how to deleted the log files, which I think ...
0
votes
1answer
1k views

SCCM 2012 R2 - OSD Task Sequence failure on physical computers

I'm trying to deploy windows 7 with SCCM 2012 R2 to physical desktops and laptops. But the task sequence keeps failing, no matter what I try. When I try it on a VM it works fine. However, when I try ...
0
votes
1answer
53 views

What would be the best way to correlate logs and events on several hosts?

I'm trying to build a log correlation system on multiple hosts. SEC seems interesting but I don't know if it will cover my needs. How could I correlate system events, logs, network events, etc. on ...
0
votes
0answers
79 views

GET /wpad.dat entries flooding my access_log

I have a small LAN of some 30 users in it with proxy auto configuration enabled and working. Two of them are requesting wpad.dat file too rapidly at a pace of 30 times per second. 10.1.14.246 - - ...
0
votes
1answer
53 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
0
votes
2answers
339 views

Zabbix doesn't update value from file neither with log[] nor with vfs.file.regexp[] item

I am using Zabbix 2.2. I have a very specific environment, where I have to generate desired data to file via script, then upload that file to ftp from host and download it to Zabbix server from ftp. ...
0
votes
1answer
51 views

How to copy traffic from old server to new server?

We are moving our server farm to AWS - and I want to fully test the new servers before sending them live traffic. Question is: How would I trap all incoming traffic and copy it to the new servers? ...
0
votes
1answer
515 views

Zabbix: Trying to monitor run time of a script, how is it done?

I'm a total noob to Zabbix and this is my first assignment... I need to build a monitor using Zabbix and monitor how long one script runs. The script looks like that: ...
1
vote
1answer
41 views

Server Log Format

I'm trying to understand this server log line from cache_access.log. What does each field represent, specifically why are there three IPs listed and what does each represent? [HIT - - - -] ...
0
votes
2answers
133 views

How can I send access.log files automatically to a specific email address after rotation?

I am running apache 2.4.9 on ubuntu 14.04. Apache rotates log files and archives them, so I end up with something like: access.log.2.gz, ... access.log.N.gz. The problem with this is that it is hard ...
2
votes
1answer
542 views

Hide get parameters from access logs on nginx

I would like to enable access log in order to see statistics about our service, the problem I'm having is that the $request on the access logs format, saves all the GET parameters (which makes sense ...
1
vote
2answers
711 views

IBM DB2 9.7, cannot increase LOGFILSIZ or LOGPRIMARY values

I am using IBM DB2 9.7 LUW database. My current database configuration values for Circular logging is as follows: LOGFILSIZ: 1024 LOGPRIMARY: 13 LOGSECONDARY: 15 I get error that transaction logs ...
0
votes
3answers
159 views

store log files in the cloud, when servers are not in the cloud

We're looking at a long-term migration towards the cloud. The plan is to start small, and gradually move less essential parts of the infrastructure into the cloud. All good so far. Part of this ...
-1
votes
1answer
167 views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
0
votes
1answer
46 views

use do,while to make loop for each network adapter

I want to get RX and TX from each network adapter, so to get RX and TX from one network adapter, i used this commands : cat /proc/net/dev | grep 'wlan0' |awk '{if ($2) print $2}' | awk -v ...
0
votes
1answer
55 views

How to log mail client with Dovecot / Postfix

Does anyone know if it's possible to have Dovecot or Postfix output the mail client of a user? In Dovecot's variables list, I cannot find anything in that direction.
0
votes
0answers
162 views

Logparser - Getting average response time from microseconds

I have one month's worth of web server log files in the following format: #Fields: date time cs-uri-stem cs-uri-query c-ip cs(Referer) sc-status sc-bytes time-taken 2014-03-12 17:34:02 ...
0
votes
1answer
71 views

Security Log eating RAM

I've been troubleshooting some hellacious memory issues on a lot of servers in my domain as of late. I recently found this program called RAMMap from Sysinternals and it showed that my entire ...
1
vote
1answer
130 views

unable to start zabbix_server on OSX 10.9

I followed the zabbix docs available on https://www.zabbix.com/documentation/doku.php?id=2.0/manual/installation/install Installation from source I have the web part up and running and I get Zabbix ...
3
votes
1answer
844 views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
1
vote
2answers
157 views

Decode all records from wtmp

The Linux log /var/log/wtmp according to the man page http://linux.die.net/man/5/wtmp stores "utmp" events for many system events, like logging into it (LOGIN_PROCESS ut_type), changing runlevel ...
0
votes
2answers
137 views

nginx access.log only kept for a day

I'm using goaccess on Ubuntu Server 12.04 to view my analytics on my web server. I just run the following utility: goaccess -f /var/log/nginx/access.log However I'm only seeing one days worth of ...
0
votes
0answers
64 views

Which Log file to check for strange Ubuntu server behaviour (offline for 5minutes at random times)

I am having problems with my Ubuntu 10.04.4 LTS server. My monitor application claims it goes off every morning at about 4 AM for 5 to 10 minutes. I am not sure where to start the troubleshooting ...
0
votes
2answers
267 views

How to collect remote windows logs as a non-admin

I am trying to collect logs from remote windows machines (Windows Server 2008R2 and Windows 7) and I can't figure out a way to do so in such a way that I should still be able to accomplish this ...
1
vote
1answer
122 views

Strange notice in apache error log

Today I found a strange notice in apache error.logs. The log tells me the following: [Mon Mar 24 06:26:34.872366 2014] [mpm_prefork:notice] [pid 32214] AH00163: Apache/2.4.7 (Ubuntu) configured -- ...
1
vote
2answers
1k views

Zabbix 2.0 reads logs correctly, but trigger status is “UNKNOWN”

I'm trying to monitor a log file for the word "error", and if the word appears, fire a trigger for each new occurence of "error." I'm starting simply, with a file (/var/log/test.log) that is ...
1
vote
1answer
387 views

Can not truncate / clear error.log on apache, but can do it manually with nano

I tried to clear the content of error.log file on my apache server with commands sudo >error.log sudo truncate -s0 error.log But in both cases I got -bash: error.log: Permission denied. I ...
0
votes
0answers
23 views

Exchange 2010 logs

Exchange 2010 sometimes doesn't delete its logs after full backup completion! Usually, we we just delete these logs (and we didn't face any problem because of that) However; is there another way to ...
0
votes
1answer
18 views

Get Used Binding in IIS log

I've around 300 domain name in same iis site, when I'm looking the log I cannot determinate which binding is used for each request. Is there a way to do this?
0
votes
2answers
66 views

DNS log on Windows Server 2008

In a Windows Server 2008 R2 machine, with DNS Server Role installed in a local network, can I read in some log which queries the network hosts have made? To obtain some list of the visited sites. If ...
1
vote
1answer
75 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
22 views

What is “iscraped” in Apache LOG (/var/log/messages)

For example this is all I see in the log. Log is now several GB big :S I've tryed to google for a solution, but I've found none :( Feb 10 09:41:53 vps2 iscraped[12861]: #SCRAPED# INFO: child started ...
2
votes
1answer
74 views

Clearing a log file owned by root

I need to clear a log file with: cat /dev/null > error.log The problem is that the file is owned by root -rw-r--r-- 1 root root 15505 Feb 9 15:08 error.log and this doesn't work $ sudo cat ...
1
vote
1answer
1k views

Cutting down on Exchange 2013 .log Files in Mailbox Database folders [duplicate]

The logs found in: C:\Program Files\Microsoft\Exchange Server\V15\Mailbox\Mailbox Database Are these used to support the indexing or something important? I only ask because they take up a chunk of ...
0
votes
0answers
119 views

Windows Journal files $UsnJrnl too big

I have a server, windows 2008, running Raid 10 on 4 600GB hard drives. Server has been running for over a year and it is used for a database. Database size is around 780GB. We have been noticing that ...
0
votes
2answers
173 views

How can I decipher this HTTP PHP-request?

On my server I have serious HTTP an SSH attacks running. Most of them are brute force password checks or attemps of /etc/passwd retrievals. But some of them are trying to start the bash via plugin ...
3
votes
3answers
8k views

What is the source of thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext)?

I have a Windows Server 2008 R2 system that's showing thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext) in the Security section of the Windows Logs every single day. There ...
1
vote
1answer
99 views

How can I list the Source Network Address for failed FTP attempts in the Security Windows Log on Windows Server 2008 R2?

I manage a server running Windows Server 2008 R2 that constantly gets bombarded with brute force attacks via FTP. These failed login attempts show up in the Security section of the Windows Logs as ...
1
vote
1answer
159 views

How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) to send log files from several servers to a central server?

Summary How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) and scheduler (cron) to send log files from several servers to a central server? Context Our ...
0
votes
1answer
33 views

Parse requests per OS type apache log

I'm trying to return a sorted list of requests per OS type, parsed from an Apache access_log file (not combined format as I need the user-agent info). Here's an example of the output I'm looking for: ...
1
vote
0answers
65 views

Directories converted to files

Our development team went to start HTTPD and got this: Starting httpd: (20)Not a directory: httpd: could not open error log file /etc/httpd/logs/error_log. Unable to open logs ...
0
votes
0answers
165 views

Apache error log not showing full path of 404 failures

If I have a working path like /gallery/landscapes and I try to access this inexistent url: /gallery/landscapes/whatever I see the 404 error in my browser but the apache log says that I had an ...
1
vote
0answers
60 views

mysql server initialization error if I add 'log = “testfile_log.log” '

Guys I'm just trying to set my general log file set up like here http://stackoverflow.com/questions/5441972/how-to-see-log-files-in-mysql. so I added log = "testfile_log.log" as below to my.ini # ...
1
vote
0answers
25 views

Is it possible to have multiple log files for one rsnapshot?

the company im working for use rsnapshot for its backup. I know where to put the log path in the conf file, but i was wondering if it was possible to have something like : /var/log/rsnapshot --> ...