A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
0answers
28 views

CustomLog responds but there are no output on client

So my friend had a server that responds incorrectly, for example this request: time curl -vv 'http://x.x.x.x/~a/fsocial/json_eod_per_code/PTBA-2014-2-c.json' * Hostname was NOT found in DNS cache * ...
0
votes
2answers
230 views

Explaining postfix entries in syslog

My syslog is absolutely crammed with postfix messages like : Jun 28 10:27:07 myserver postfix/smtpd[28830]: connect from unknown[180.215.170.141] Jun 28 10:27:07 myserver postfix/smtpd[28830]: ...
1
vote
0answers
207 views

RFC 5424 Syslog Viewer

I've been looking for a log viewer that understands syslog messages, specifically in RFC 5424 format (including structured data elements), and ideally allows live monitoring (tail like) and ...
0
votes
1answer
336 views

Tomcat localhost_access_log.txt encoding

I run my web-app in Tomcat 7 and in the localhost_access_log.txt file I have the following lines 0:0:0:0:0:0:0:1 - - [25/Jun/2014:10:22:26 +0300] " Ì Èc£Ï!#ò2Tç¡$EI «àµ«]ëñʯ¯Ù (ÌÌÀ+À/ À " 400 - ...
0
votes
3answers
2k views

Tool to analyze postfix maillog [closed]

I have a mailserver running on iRedMail. Recently we have some issues that people reporting they would receive phisihing emails from us, which haven't been sent by the users they are saying the are ...
-1
votes
2answers
410 views

Parse Apache logs for specific verbiage within the last hour

I'm looking to parse my /var/log/httpd folder which contains a lot of Apache log files. I'm looking for specific events within the last hour. I've tried the below, but I didn't have any luck. grep ...
0
votes
2answers
129 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
-1
votes
3answers
130 views

Why a sed command stop my log file to be written to?

I launch on a Gnu/Linux server an application myApp: ./myApp &>myApp.log & Of course, the log file will soon become huge. I would like to use sed to reduce it (I'm aware of logrotate ...
1
vote
2answers
95 views

Revover original email from Sendmail log

I have a website the contact form has been failing silently for two weeks (Wordpress + Contact form 7). Apparently updating to Contact Form 7 made the assigned email to fail ...
1
vote
1answer
690 views

Apache log - file does not exist

I have quite a few of these in Apache logs piling up every day: [Mon Jun 09 20:42:58 2014] [error] [client 180.153.214.181] File does not exist: /home/user/public_html/ajax.googleapis.com, referer: ...
1
vote
1answer
511 views

Deleting log files from an AWS RDS Postgres instance

How can I delete logs from an RDS Postgres instance? I just noticed that my instance is displaying the message, storage-full. I can find any descriptions of how to deleted the log files, which I think ...
0
votes
1answer
5k views

SCCM 2012 R2 - OSD Task Sequence failure on physical computers

I'm trying to deploy windows 7 with SCCM 2012 R2 to physical desktops and laptops. But the task sequence keeps failing, no matter what I try. When I try it on a VM it works fine. However, when I try ...
0
votes
1answer
66 views

What would be the best way to correlate logs and events on several hosts?

I'm trying to build a log correlation system on multiple hosts. SEC seems interesting but I don't know if it will cover my needs. How could I correlate system events, logs, network events, etc. on ...
0
votes
0answers
121 views

GET /wpad.dat entries flooding my access_log

I have a small LAN of some 30 users in it with proxy auto configuration enabled and working. Two of them are requesting wpad.dat file too rapidly at a pace of 30 times per second. 10.1.14.246 - - ...
0
votes
1answer
94 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
0
votes
2answers
607 views

Zabbix doesn't update value from file neither with log[] nor with vfs.file.regexp[] item

I am using Zabbix 2.2. I have a very specific environment, where I have to generate desired data to file via script, then upload that file to ftp from host and download it to Zabbix server from ftp. ...
0
votes
1answer
52 views

How to copy traffic from old server to new server?

We are moving our server farm to AWS - and I want to fully test the new servers before sending them live traffic. Question is: How would I trap all incoming traffic and copy it to the new servers? ...
0
votes
1answer
952 views

Zabbix: Trying to monitor run time of a script, how is it done?

I'm a total noob to Zabbix and this is my first assignment... I need to build a monitor using Zabbix and monitor how long one script runs. The script looks like that: ...
1
vote
1answer
47 views

Server Log Format

I'm trying to understand this server log line from cache_access.log. What does each field represent, specifically why are there three IPs listed and what does each represent? [HIT - - - -] ...
0
votes
2answers
174 views

How can I send access.log files automatically to a specific email address after rotation?

I am running apache 2.4.9 on ubuntu 14.04. Apache rotates log files and archives them, so I end up with something like: access.log.2.gz, ... access.log.N.gz. The problem with this is that it is hard ...
2
votes
1answer
1k views

Hide get parameters from access logs on nginx

I would like to enable access log in order to see statistics about our service, the problem I'm having is that the $request on the access logs format, saves all the GET parameters (which makes sense ...
1
vote
2answers
2k views

IBM DB2 9.7, cannot increase LOGFILSIZ or LOGPRIMARY values

I am using IBM DB2 9.7 LUW database. My current database configuration values for Circular logging is as follows: LOGFILSIZ: 1024 LOGPRIMARY: 13 LOGSECONDARY: 15 I get error that transaction logs ...
0
votes
3answers
219 views

store log files in the cloud, when servers are not in the cloud

We're looking at a long-term migration towards the cloud. The plan is to start small, and gradually move less essential parts of the infrastructure into the cloud. All good so far. Part of this ...
-1
votes
1answer
258 views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
0
votes
1answer
49 views

use do,while to make loop for each network adapter

I want to get RX and TX from each network adapter, so to get RX and TX from one network adapter, i used this commands : cat /proc/net/dev | grep 'wlan0' |awk '{if ($2) print $2}' | awk -v ...
0
votes
1answer
81 views

How to log mail client with Dovecot / Postfix

Does anyone know if it's possible to have Dovecot or Postfix output the mail client of a user? In Dovecot's variables list, I cannot find anything in that direction.
0
votes
1answer
139 views

Security Log eating RAM

I've been troubleshooting some hellacious memory issues on a lot of servers in my domain as of late. I recently found this program called RAMMap from Sysinternals and it showed that my entire ...
1
vote
1answer
323 views

unable to start zabbix_server on OSX 10.9

I followed the zabbix docs available on https://www.zabbix.com/documentation/doku.php?id=2.0/manual/installation/install Installation from source I have the web part up and running and I get Zabbix ...
4
votes
1answer
2k views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
1
vote
2answers
337 views

Decode all records from wtmp

The Linux log /var/log/wtmp according to the man page http://linux.die.net/man/5/wtmp stores "utmp" events for many system events, like logging into it (LOGIN_PROCESS ut_type), changing runlevel ...
1
vote
2answers
192 views

nginx access.log only kept for a day

I'm using goaccess on Ubuntu Server 12.04 to view my analytics on my web server. I just run the following utility: goaccess -f /var/log/nginx/access.log However I'm only seeing one days worth of ...
0
votes
0answers
126 views

Which Log file to check for strange Ubuntu server behaviour (offline for 5minutes at random times)

I am having problems with my Ubuntu 10.04.4 LTS server. My monitor application claims it goes off every morning at about 4 AM for 5 to 10 minutes. I am not sure where to start the troubleshooting ...
0
votes
2answers
437 views

How to collect remote windows logs as a non-admin

I am trying to collect logs from remote windows machines (Windows Server 2008R2 and Windows 7) and I can't figure out a way to do so in such a way that I should still be able to accomplish this ...
1
vote
1answer
168 views

Strange notice in apache error log

Today I found a strange notice in apache error.logs. The log tells me the following: [Mon Mar 24 06:26:34.872366 2014] [mpm_prefork:notice] [pid 32214] AH00163: Apache/2.4.7 (Ubuntu) configured -- ...
1
vote
2answers
2k views

Zabbix 2.0 reads logs correctly, but trigger status is “UNKNOWN”

I'm trying to monitor a log file for the word "error", and if the word appears, fire a trigger for each new occurence of "error." I'm starting simply, with a file (/var/log/test.log) that is ...
3
votes
1answer
3k views

Can not truncate / clear error.log on apache, but can do it manually with nano

I tried to clear the content of error.log file on my apache server with commands sudo >error.log sudo truncate -s0 error.log But in both cases I got -bash: error.log: Permission denied. I ...
0
votes
0answers
29 views

Exchange 2010 logs

Exchange 2010 sometimes doesn't delete its logs after full backup completion! Usually, we we just delete these logs (and we didn't face any problem because of that) However; is there another way to ...
0
votes
1answer
35 views

Get Used Binding in IIS log

I've around 300 domain name in same iis site, when I'm looking the log I cannot determinate which binding is used for each request. Is there a way to do this?
0
votes
2answers
114 views

DNS log on Windows Server 2008

In a Windows Server 2008 R2 machine, with DNS Server Role installed in a local network, can I read in some log which queries the network hosts have made? To obtain some list of the visited sites. If ...
1
vote
1answer
100 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
23 views

What is “iscraped” in Apache LOG (/var/log/messages)

For example this is all I see in the log. Log is now several GB big :S I've tryed to google for a solution, but I've found none :( Feb 10 09:41:53 vps2 iscraped[12861]: #SCRAPED# INFO: child started ...
2
votes
1answer
158 views

Clearing a log file owned by root

I need to clear a log file with: cat /dev/null > error.log The problem is that the file is owned by root -rw-r--r-- 1 root root 15505 Feb 9 15:08 error.log and this doesn't work $ sudo cat ...
1
vote
1answer
3k views

Cutting down on Exchange 2013 .log Files in Mailbox Database folders [duplicate]

The logs found in: C:\Program Files\Microsoft\Exchange Server\V15\Mailbox\Mailbox Database Are these used to support the indexing or something important? I only ask because they take up a chunk of ...
0
votes
2answers
288 views

How can I decipher this HTTP PHP-request?

On my server I have serious HTTP an SSH attacks running. Most of them are brute force password checks or attemps of /etc/passwd retrievals. But some of them are trying to start the bash via plugin ...
6
votes
3answers
23k views

What is the source of thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext)?

I have a Windows Server 2008 R2 system that's showing thousands of 4625 Logon Failure errors with Logon Type 8 (NetworkCleartext) in the Security section of the Windows Logs every single day. There ...
1
vote
1answer
174 views

How can I list the Source Network Address for failed FTP attempts in the Security Windows Log on Windows Server 2008 R2?

I manage a server running Windows Server 2008 R2 that constantly gets bombarded with brute force attacks via FTP. These failed login attempts show up in the Security section of the Windows Logs as ...
1
vote
1answer
206 views

How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) to send log files from several servers to a central server?

Summary How can I use a remote admin tool (puppet or chef) combined with a sync tool (e.g. rsync) and scheduler (cron) to send log files from several servers to a central server? Context Our ...
0
votes
1answer
62 views

Parse requests per OS type apache log

I'm trying to return a sorted list of requests per OS type, parsed from an Apache access_log file (not combined format as I need the user-agent info). Here's an example of the output I'm looking for: ...
1
vote
0answers
74 views

Directories converted to files

Our development team went to start HTTPD and got this: Starting httpd: (20)Not a directory: httpd: could not open error log file /etc/httpd/logs/error_log. Unable to open logs ...
0
votes
0answers
236 views

Apache error log not showing full path of 404 failures

If I have a working path like /gallery/landscapes and I try to access this inexistent url: /gallery/landscapes/whatever I see the 404 error in my browser but the apache log says that I had an ...