A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

1
vote
1answer
49 views

“GET /assets/)!==t&&(e.html(e.data( HTTP/1.1” 200 3538 “-” “Java/1.7.0_25”

I'm seeing GET requests like: "GET /assets/)!==t&&(e.html(e.data( HTTP/1.1" 200 3538 "-" "Java/1.7.0_25" in my logs for a box hosting a Rails app. Looks suspiciously like someone probing ...
1
vote
1answer
32 views

How to properly look for an info about auditd being turned off from init?

I have a mystery on my hands. One day /etc/rc5.d/S11auditd became /etc/rc5.d/K88auditd and no one takes responsibility for it. It looks like it just happened by itself, which is hardly plausible and ...
2
votes
2answers
960 views

Fail2ban log filled with entries saying “fail2ban.filter : WARNING Determined IP using DNS Lookup:..”

My fail2ban log at /var/log/fail2ban.log is completely filled with entries saying: fail2ban.filter : WARNING Determined IP using DNS Lookup: [IP address] I think this may have begun after I changed ...
1
vote
0answers
103 views

What are recommended permissions for files in /var/log?

I am working on tightening the security for various servers (mainly Debian Linux), and one of the tasks is to tighten permissions on files in /var/log so that files are not world readable. But there ...
0
votes
1answer
297 views

Log files too large and can not login to plesk

I am on a vps platform at Media Temple. Yesterday when i tried to log in via pleask, the message below appeared .... ERROR: Zend_Db_Statement_Exception: SQLSTATE[HY000]: General error: 1030 Got error ...
0
votes
1answer
31 views

Webserver Log Files and Server Speed

We have a windows 2008 server with Plesk as the Control panel. We have noticed a site has a 83GB log file as the hosting provider never attended to setting up the log file rotations. We have also ...
0
votes
2answers
68 views

How to find out previous start-up time, so one can read `/var/log/dmesg.0` log?

That should be a quick one: I'm running a small server, and one day discovered, that one of the LXC containers inside is down. I started it again, but I want to find out, for how long it was down. I ...
1
vote
0answers
253 views

Zabbix 2.0 log monitoring - deactivating trigger

I am using Zabbix for monitoring log files. I've got trigger, which is activated when errors are written to the log: {Test:log["/opt/test/log.out","^ERROR.*$","UTF-8",100].diff(0)}>0 So, now I ...
3
votes
3answers
640 views

Filter the output of a log file

Question I've a log-File which display all console-logs of my website in the range of 10.Oct to 1.Nov, start with the logs of 10.Oct. I need all logs from the range of 25.Oct until today. The problem ...
0
votes
4answers
1k views

remote server log viewer/analyzer

I have an rsyslog server running Ubuntu 12.04 which stores logs from different clients also running Ubuntu 12.04. Now I want to view those logs from my machine which also runs Ubuntu 12.04. One way ...
0
votes
1answer
98 views

Create Logfile for all fired commands on server

I want to maintain logfile for all fired command on server. We have more than 3 admins and I want to monitor all commands which are fired by these. Is it possible ?
1
vote
1answer
1k views

Getting logs from remote clients via rsyslog

I have freshly installed Debian 6. I am trying to get syslog server for a reason, I used to follow manual for this task. I configured /etc/rsyslog.conf on remote client server to send data via udp ...
0
votes
1answer
177 views

A good tool for parsing Nginx logs for Django app [closed]

Can anyone recommend a good tool to parse and analyze Nginx access logs which will group the urls based on the regex in my django urls.py files (or a config file generated from them)? It does not ...
1
vote
1answer
43 views

Fail2ban still adding to log after uninstall

I am running a CentOS6 VM and I have been playing with Fail2ban, upon removing the service from my server I can see that it appears to be still posting logs to the /var/log/maillog Here is a link a ...
1
vote
1answer
100 views

Apache logs just “plesklog”

I just discovered that my Apache 2.2.8 just logs in his access_log the string plesklog since a few weeks. Normally it looks like that www.xxx.yyy.zzz - - [19/Jul/2013:04:37:32 +0600] "GET ...
0
votes
2answers
660 views

Log Analysis Tools for Apache & Tomcat [closed]

I'm looking for a log analysis tool to monitor & analyse the logs from an Apache & Tomcat webfarm. It would need to have agents that run on the servers, and ship logs back to a central ...
0
votes
1answer
89 views

Statistics from huge IIS logs

We have a web site which produce roughly 100GB of IIS Web log files every month. We would like to get statistics from these logs, for instance the most visited URL's, authenticated users with most ...
1
vote
2answers
78 views

Apache logs accesses on an already rotated log file

I usually create my access and error logs in a domain-name folder under /var/log, and these files are rotated with logrotate using this conf : /var/log/mydomain.org/access.log { weekly missingok ...
2
votes
1answer
388 views

mysql on freebsd makes 1GB binary log files every 20 minutes filling free disk space very fast

I have a problem with MySQL on FreeBSD. It makes a lot of 1GB binary files every 20 minutes and it's filling free disk space rapidly. -rw-rw---- 1 mysql mysql 1073741982 2013-09-14 18:26 ...
0
votes
0answers
110 views

Nginx bytes sent larger then acutal file size

I am using Nginx 1.4.1 and when I looked at the log file and added up the total bytes sent for different files it was larger then the file size. Here is part of the log file 127.0.0.1 - User1 ...
1
vote
1answer
265 views

Snort, Portscans and Scanned IP Range field

According to manual.snort.org, TCP Portscans goes from one computer to other one, but when you take a look to an tcp portscan alert in snort/snorby you can see this: In one hand: Source: ...
2
votes
1answer
2k views

How to install auditd on CentOS?

How to install auditd on CentOS 6.4 x64 ? I want to Log all commands run by admins Log all commands run by admins on production servers Edit: I can't run aduditd service I did with this tut enter ...
0
votes
1answer
175 views

How to disable MySQL logging?

MySQL in RHEL 5.5 logs it errors in /var/log/mysqld.log Which grows to mammoth size frequently. I need to disable it, but I failed to find any reference to do it. Finally I added below in my.cnf ...
-2
votes
2answers
431 views

Apache Error Log what does mean for “File doest not exist / undifined”

I can not understand following error from my VPS (LAMP) 175.101.XX.XX - - [27/Aug/2013:17:41:48 +0530] "GET /undefined HTTP/1.1" 404 694 "http://mydomain.com/memberpage.php" "Mozilla/5.0 (Windows NT ...
0
votes
1answer
85 views

Delete log files on Virtual Host

I have a few virtualhosts set up on my machine, and the server keeps crashing because of the disk space being too full. I've checked out and it seems that one of my virtual host log folder is 2Gb. In ...
1
vote
1answer
230 views

How to make comments in logcheck files?

how can I add comments to logcheck ignore-rules? Things I tried so far: # seems to match single # characters instead of starting a comment empty lines matches against everything $ matches against ...
1
vote
1answer
55 views

How can I get ONLY the IP adresses from my Apache AWStats server logs?

I am having trouble getting my IP addresses from my site's server log out from amidst the mess of other data in a server log. Before I crack open Excel I know there's a way to do it because I found ...
2
votes
2answers
181 views

Gitolite3 not writing

I am a bit at world's end here. I want to install gitolite3 smart http over apache. I can successfully pull, but not push (doesn't even give me any errors or notices, not even in any known log). I ...
0
votes
1answer
301 views

CentOS dedicated server hangs and discovers new hardware every 3 to 10 hours

I have a dedicated server since March 2013 with CentOS release 6.4 (Final) and CPanel 11.38.1 (build 15) with [Apache/2.2.24 (Unix) PHP/5.2.17]. The server has only one website with traffic about 2000 ...
0
votes
1answer
128 views

SSH to track hacker [duplicate]

I'm very new to using SSH and my server has been hacked, someone has gone onto a website of mine and made modifications. I have the time which they did it (29/07/2013 18:14:30), but cannot see how ...
3
votes
1answer
92 views

Finding out which log line triggered a logcheckd notification?

We are using the logcheck package in Debian for log-monitoring. If I understand it correctly, logcheck monitors the logs, filters out known (normal & unimportant) messages and triggers a mail if ...
0
votes
1answer
316 views

Cron job does not generate expected log file

I'm trying to execute a shell with crontab. The cron job executes the shell but doesn't generate the log file i need. This is what i'm using for my cron: 10 * * * * /home/user/3nvo.sh This is a ...
0
votes
1answer
143 views

How can i have various configuration in nagios config file

I am using nagios check_logfiles plugin from here http://labs.consol.de/lang/en/nagios/check_logfiles/ I have the config file like this @searches = ( { tag => 'san', logfile => ...
0
votes
3answers
52 views

Need Explanation of User Agent

I'm analyzing user agent field of different types of web server logs. Ex. Apache Access Log/W3C/iplant etc. I found some lines in the log files have following type of user agents. I'm confused since ...
2
votes
3answers
317 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
-1
votes
1answer
290 views

EDAC error messages at boot each time, is it a hardware issue?

I noticed I have EDAC error messages in the logs while I was doing a dmesg. Then I found out I am getting the same EDAC error message each time at boot. This is on CentOS 6.4 x86_64. I suspect a ...
1
vote
2answers
103 views

how can i get list of created and deleted files on the server?

i have a image sharing website , users log and upload image last night i've lost about 30 newly-consecutive uploaded images ... i mean they have been uploaded ... apparently ... they are in the ...
0
votes
1answer
261 views

How does nginx handle log file growth by default?

I'm a bit worried because its been a couple of days and my access log file is up to 250MB+. Does it roll log files over and delete them? I'd like for there only to be 1GB or less of log files total.
0
votes
1answer
58 views

Yesterday-access.log is pointing to a different directory

Under /var/log/ispconfig/httpd/quotednews.com/ folder, the yesterday-access.log is pointing to a wrong directory. yesterday-access.log is just a symlink to: ...
0
votes
1answer
209 views

How to understand these lines in apache.log

I just get 19000 lines like these in the apache.log file for my site example.com. My hosting provider shut down the hosting and notified me that I need to avoid to activate my hosting again. I ...
1
vote
1answer
73 views

Search log files newer than a time

I have a log file which has entries like below. I want to find only the log entries newer than a given time. What would be a suitable shell script for it? [2013-06-23 21:31:19,972] INFO [2013-06-23 ...
0
votes
1answer
99 views

Iptables LOG rules — what are they good for?

The arch wiki reads, The LOG target can be used to log packets that hit a rule. Unlike other targets like ACCEPT or DROP, the packet will continue moving through the chain after hitting a LOG ...
2
votes
2answers
132 views

Postfix log file grows too fast

I've configure postfix for just sending emails. (I need it just for PHP mail() function). However, after one day running, And just a couple of sent emails, the log file is about 20 MB. Checking the ...
1
vote
1answer
41 views

Coherent logs from multiple identical nodes

I have multiple web heads running a stack containing Apache/mod_php/Magento/MySQL and more. Every time I need to view logs I find myself jumping on multiple servers to view logs in different files ...
1
vote
1answer
108 views

Do I have to restart my server every time I clear my nginx log file?

On nginx: if I open the error log, select all (in emacs) and cut, save, php errors stop logging to that file completely. If I restart nginx, they begin logging again. If I delete the files ...
0
votes
1answer
81 views

Are Apache logs needed when Piwik is being used

Do I need to keep Apache access logs if I'm using Piwik for analytics (or Google Analytics)? True, these could serve as a backup. However, rotation would remove a certain history from the logs ...
0
votes
1answer
2k views

Newbie, need help deciphering firewall log files (Cisco ASA 5520)

I'm not very familiar with firewall log files, or many of the terms involved in server connections. The lines in question involve a foreign, unauthorized IP interacting with a firewall (Cisco ASA ...
2
votes
1answer
253 views

unix logrotate specify chunk size

How can I specify output file size which I want after rotation? For example lets say I want to run logrotate when log file reaches 10MB and I want to split this log into chunks which are 1MB max. I ...
-1
votes
1answer
39 views

What can cause drastic traffic jump on server?

In the last couple of days, between 3AM and 4AM my server traffic jumps tenfold, from 20MB to 200MB. I've checked the access log, and while there is significant googlebot activity, the difference ...
1
vote
1answer
3k views

rsyslog filtering based on message content

I have an application which is writing to syslog. The messages written to the syslog are for various buckets which need to be filtered out. Every message starts with a bucket number, so the messages ...