A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

9
votes
2answers
4k views

Strange Bittorrent Log On My Server

I don't know if the following log has something to do with my site being down sometime. I have lot of websites on my server and they don't have any logs like the following: 117.169.1.85 - - ...
0
votes
4answers
5k views

error in php not logging or displaying

I can not get any errors to display on screen on write to a log file. When check phpinfo() print out I have same value of master a local for display_errors On display_startup_errors On error_log ...
0
votes
1answer
82 views

Previous Log Deleted /var/log/secure

When I checked /var/log/secure, only logs for current date was present. Why logs for previous date is not present? Any reason on this? thanks
0
votes
1answer
4k views

Rotating Mail Logs on Debian server

Mail Logs on Debian systems do not use the regular /etc/logrotate.d scripts to rotate them. I want to force my mail logs to rotate daily (no matter how small), and compress the results, so that the ...
9
votes
1answer
3k views

iis 7 log file directory

under my log directory I have a list of subdirectories: W3SVC1, W3SVC2, W3SVC3, etc, etc. How do I match those folders with each website on IIS?
0
votes
1answer
54 views

GET 6C6CCDBA-AFF1-E54F-A6A6-0D7A76E35801 in NGINX log [closed]

Fitrst I got notification from Nagios that NGINX down. When I checked server - there was lot full swap and memory. I found odd entries in log: 65.49.14.146 - - [04/Jan/2015:16:06:11 +0200] "GET ...
0
votes
2answers
205 views

How to pipe all log files entries to a database on linux?

I am thinking about building an application that would read my different server log files, save the parsed data to a database, and then remove the line from the log file. This is my programer side ...
0
votes
1answer
775 views

Linux: How to enforce specific permissions on newly created logs which are created by log rotate?

I've noticed that the mail logs which are being created in /var/log are being created and owned by root (user and group). I've wrote a Nagios check which monitors the log and in order to allow Nagios ...
1
vote
2answers
5k views

rsyslog filtering based on message content

I have an application which is writing to syslog. The messages written to the syslog are for various buckets which need to be filtered out. Every message starts with a bucket number, so the messages ...
0
votes
1answer
65 views

APACHE2: How to write log for a specific directory requested?

I have this line in the virtual host: CustomLog /var/log/access.log combined But I want a specific log to write each request of a specific directory e.g. I have this sub directories in my public: ...
6
votes
3answers
23k views

What is the source of thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext)?

I have a Windows Server 2008 R2 system that's showing thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext) in the Security section of the Windows Logs every single day. There ...
1
vote
0answers
28 views

How can one get a UDE report from Microsoft Fixit Center Pro?

As per this video anybody is supposed to be able to upload their server's logs to the Microsoft Fixit center Pro and get an Automated diagnostic report called UDE. ...
1
vote
0answers
51 views

Log to file in Asterisk: append with newline

(I am testing on Asterisk 11.7.0~dfsg-1ubuntu1) I am using the following format to append to a logfile, according to the documentation: same => n,Set(FILE(/tmp/mylog.txt,,,a)=my-log-message) ...
0
votes
1answer
72 views

How to config awstats to analyse .php traffics?

By default, awstats group .php traffics into a single Dynamic PHP Script file number. However, the site's pattern lies in route=??? after an index.php?, e.g.: GET ...
0
votes
1answer
5k views

SCCM 2012 R2 - OSD Task Sequence failure on physical computers

I'm trying to deploy windows 7 with SCCM 2012 R2 to physical desktops and laptops. But the task sequence keeps failing, no matter what I try. When I try it on a VM it works fine. However, when I try ...
4
votes
2answers
2k views

how to collect and aggregate logs from multiple machines in Amazon AWS environment

We have multiple Ec2 servers running and they have a tendency to be started and shut down at unpredictable times (based on load etc). What is the best way to collate and aggregate logs from them in ...
0
votes
1answer
71 views

Parse different lastlog[s]

I have the lastlog from 100 machines that I need to parse. Since I have them all centrally located, is there a way to parse these? Or do I need to go back to each machine and type the "lastlog" ...
0
votes
1answer
145 views

OpenVPN “rwRW” logging

When an openvpn client is configured to have a debugging level of verb 5 or higher, one will find text similar to "rWrWRwRwRwRwrWrWrWRw" in their OpenVPN log, appearing when packets transit the VPN ...
0
votes
0answers
46 views

Analyze logs after hack [duplicate]

I'm really new to log analysis.. And OVH contacted my society because one of our website has been hacked during the weekend. They told us that they used Asprox. So my boss told me to look into the ...
-1
votes
1answer
33 views

linux server still recognizes the old domain after changing it to new one

I have some Linux servers (RHEL 6.3 and 5.4) under one domain (MS Windows server 2008R2) and every thing was working fine, but we decided to change the domain from olddomain.com to newdomain.com, now ...
0
votes
1answer
36 views

Configure logrotate to shrink file in user's folder?

All my users in /home/{user}/ have a specific error_log file in it that may grow overtime. So I was thinking about using logrotate to implement some kind of file reducing on it : when the file ...
4
votes
3answers
2k views

Wildcard support for InputFileName in rsyslog?

We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName? Example: InputFileName: ...
1
vote
3answers
458 views

Monitor log files in realtime, like “top” monitors processes [OS X]

Is there a command/program for OS X that allows me to hook to a file and display its changes in realtime without re-opening it, much like "top" monitors system processes in realtime?
1
vote
1answer
111 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
2
votes
2answers
3k views

Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net" A new line in my access log the other day. As far as i can tell ...
0
votes
1answer
227 views

How to run putty with -m command line *and* get log?

I'd like to launch putty and run my script automatically, it works, but I can't save the logs (I need them to debug)! The way I call putty: "D:\Some-Path\putty\PUTTY.EXE" -t -load "Server - ...
1
vote
1answer
137 views

Do I have to restart my server every time I clear my nginx log file?

On nginx: if I open the error log, select all (in emacs) and cut, save, php errors stop logging to that file completely. If I restart nginx, they begin logging again. If I delete the files ...
3
votes
3answers
689 views

tail all log files in a directory | exclude zipped files

Im trying to find the right command to tail a bunch of log files whilst excluding the zipped files in a set directory. The log files are being zipped as they become oversized. At the moment Im using: ...
-3
votes
1answer
35 views

I have a IP address with some open services. How could I contact the owner? [closed]

After having serious problems (DNS incident) I found out an IP address of a machine. Is it in any way possible to contact the owner without knowing anything else like email, domain name or website? I ...
0
votes
1answer
64 views

Working with multi line log entries (log parsing)

Say you have logs like these Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101 Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143] Thu 2014-10-09 ...
0
votes
0answers
20 views

Awstats exclude Country

I have Awstats + GeoIP and I would like to exclude an entire country. Is there a way to do that? I'm not sure SkipHosts would do it, since it probably has something to do with the GeoIP plugin. ...
1
vote
1answer
521 views

Deleting log files from an AWS RDS Postgres instance

How can I delete logs from an RDS Postgres instance? I just noticed that my instance is displaying the message, storage-full. I can find any descriptions of how to deleted the log files, which I think ...
0
votes
3answers
800 views

Sonicwall Email Security Audit Logs

I have a Sonicwall Email Security appliance from which I would like to extract the audit logs on a daily basis. Currently, I can only see how to get them manually by going to the web interface. Is ...
1
vote
1answer
538 views

Apache access.log filled with GET requests for wpad.dat [closed]

I'm running a small web-server on a Raspberry Pi Model B+ system running Rasbian from the NOOBS install image. I have apache2 running and a DDNS service providing a URL (from duckdns.org). I'm ...
0
votes
1answer
31 views

what does JYADXW mean as a HTTP verb?

Some jerk attacked my server, and I was reading the logs, when I saw "JYADXW" where the HTTP verb GET/POST/OPTIONS normally reside. What is this request? what does it mean? malicious IP Here - - ...
10
votes
5answers
9k views

Proper way to rotate Nginx logs

I would like to achieve rotation of nginx logs that: would work without any extra software (i.e. - best if without "logrotate") would create rotated files with names based on date Best approach is ...
0
votes
0answers
28 views

What is /stop in my server logs?

Why do my server logs show GET requests to /stop? I believe this is due to modsecurity but cannot determine why or the importance.
4
votes
3answers
8k views

Apache Error Log Analyzer — Which is Best? [closed]

I have 3 log analyzer tools pre-installed on my server. In your opinion, which of the 3 analyzer tools do you find best? My Objective: basically to analyze the error log file Software Installed: * ...
0
votes
1answer
104 views

Delete Apache log files once Awstats is updated

in my /var/lib/awstats, awstats creates monthly .txt files (its database). Once these files are created and I have my graphics created in Awstats, can I delete the old log files created by Apache? ...
1
vote
1answer
519 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
1answer
50 views

What do repeating '^@' symbols in a logfile mean?

A few times I have come across this in a log file: Sep 17 09:35:57 00187d378926 ovpn-00187d378926[1701]: /sbin/ifconfig tun0 0.0.0.0 Sep 17 09:35:57 00187d378926 kernel: Kernel logging (proc) ...
7
votes
5answers
21k views

logrotate does not compress /var/log/messages

Over time I noticed some logs in /var/log such as auth, kern and messages were getting huge. I made logrotate entries for them: $ cat /etc/logrotate.d/auth.log /var/log/kern.log { rotate 5 ...
0
votes
1answer
34 views

Unable to read some files on hard disk

Our server has two independent hard disks without RAID. One hard drive just for storing junk/temporary data where we generally delete temporary data using LRU algorithm. We have a 10k file in that ...
6
votes
3answers
5k views

Avoid logging of certain missing files into the Apache2 error log

I'd like to avoid logging some missing files (that gives a 404) into the Apache2 error log. I want to do this on an Eclipse update site for my plugin. Problem is that the Eclipse P2 code tries to ...
0
votes
1answer
2k views

Zimbra 8.0: Warning create file maildrop/XXXXX.XXXXX permissions denied

I have Zimbra 8.0 running over Ubuntu work fine but I have a warning: postfix/postdrop[XXXX]: warning: mail_queue_enter: create file maildrop/XXXXX.XXXXX permissions denied The problem is that ...
0
votes
0answers
67 views

Server log shows Visitors asking for “408” with blank referrers and user agents,

I've created a website in a similar pattern to another website I already have, and hosted it on a similar server (only on a different IP). I've noticed that about 70% of my visitors (of no certain ...
0
votes
0answers
574 views

Apache error logs are empty httpd.conf defines the error log file in /var/log/httpd/error_log

I am relatively new to server administration and log files, so I am not sure what's wrong here. But here is what's going on. I am a PHP developer and I often navigate to ...
6
votes
1answer
19k views

Managing CBS.log files on Windows 2008R2?

Whilst auditing disk space on our Windows 2008R2 farm we noticed that some servers had quite large C:\Windows\Logs\CBS\CBS.log files (~1.5GB). I was under the impression that this particular log file ...
1
vote
2answers
108 views

Difference Between Netstat and Access Log

When I was checking stats in SSH terminal for my VPS, I noticed that netstat and access log gives different results. When I used: netstat -anp I saw that one attacker having 32 concurrent ...
2
votes
1answer
4k views

How to install auditd on CentOS?

How to install auditd on CentOS 6.4 x64 ? I want to Log all commands run by admins Log all commands run by admins on production servers Edit: I can't run aduditd service I did with this tut enter ...