A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

1
vote
1answer
271 views

What does READ_CONTROL mean in the Security event log?

I have been asked to create audit record of file accesses. By the log is simply overwhelming. A single double click of a text file opening in notepad creates more than 10 log entries with Event Id ...
0
votes
0answers
143 views

Baidu trying to access .ftpquota in Nginx access.log

When I look at the Nginx access.log there are always several attempts from Baidu to access the file .ftpquota. When I do a ls -a I can see that the file even doesn't exist. I don't use FTP. Here are ...
-3
votes
1answer
106 views

Why same request for hundreds times in access log

I don't know what comes to this, and how to prevent it. Look at the time, it keep on with the same request for hundreds times. Not just those particular IPs but some others too. How do I prevent this. ...
0
votes
1answer
351 views

Do DFS logs contain folder permission changes?

I have a DFS server sharing files and want to see when an admin gave read/write/full control to a user in a DFS share. Is there any way I can view this? I have checked in C:\Windows\Debug but the log ...
-1
votes
2answers
592 views

Exim log file errors

1- What is the meaning of these lines in /var/log/exim/main.log? I have these lines repeated more than 700 times in main.log 2015-03-16 21:30:57 TLS error on connection from [192.0.2.1] (SSL_accept):...
1
vote
2answers
292 views

Deleting phpMyAdmin setup.php

My website log files show many requests looking for: /phpmyadmin/scripts/setup.php I have phpmyadmin on my website. Am I supposed to delete that setup.php file or just let them keep on requesting ...
0
votes
1answer
143 views

Apache2 client ip and port

Do anyone know if Apache by default is logging the port number of a client and were to find it. I know that it log the ip, but for mobile users there can be several devices with the same ip which uses ...
0
votes
1answer
45 views

Scraping log to identify emails sent to another MTA

I have a Courier MTA that seems to be sending spam. I want to scrape courier's mail.log to identify, for each mail that was sent to another MTA: The from address Where Courier got the email from ...
1
vote
2answers
413 views

Unable to get Rsyslog structured data in syslog message

I am new to syslog module. I am trying to log messages with structured data by using this parameter in template. But it is showing null value for structured data. I am working with rsyslogd 5.8.11 ...
0
votes
1answer
1k views

Centos - /var/log/secure records nothing

I have accidentally remove /var/log/secure, I try to recreate it but it still stays blank after several connections. On a server where everything works, with ls -l I have: -rw-------. root:root /var/...
0
votes
1answer
47 views

What user must own apache log directory

If I define apache log directory for a vhost, what is the user that I should make the owner? Should be apache user, or can be root?
0
votes
2answers
6k views

Exchange 2010 mailbox database logs

We recently discovered that an Exchange Server could not accept any (external) messages anymore due to low disk space. It is the Exchange "Back Pressure" feature that caused the Exchange Server to ...
1
vote
2answers
308 views

How to use tshark or tcpdump to calculate bytes transmitted

I am using this command with tshark: tshark -r pcapfile "tcp and ip.src==192.168.1.1" -T text -V -x | grep 'Total Length' This essentially parses the pcap for only connections from the source ip ...
3
votes
1answer
376 views

Azure, Log4Net log file, FTP transfer, Response: 550

I have an ASP.NET MVC website on Azure using log4net file appender. I cannot download the log files with FileZilla because of the following error: Response: 550 The process cannot access the file ...
2
votes
1answer
1k views

Postfix/Dovecot: SASL LOGIN authentication aborted

I use Postfix together with Dovecot (auth/LMTP) on my mailserver. Everything is working fine, but I notice several warnings in the log-files each day: postfix/smtpd[4169]: warning: unknown[MY.HOME.IP]...
3
votes
1answer
661 views

Rotate log files with timestamp in file name

I have a log directory that my app writes into. It creates a log file like this: 2015-01-22-10-full-activity.log 2015-01-22-11-full-activity.log 2015-01-22-12-full-activity.log 2015-01-22-13-full-...
1
vote
2answers
84 views

File Changelog Generation Windows Server 2012

I am wondering if anyone might know a way I could set up the automatic generation of a file changelog in a directory in windows server 2012. We have a collection of word, excell, and pdf files that I ...
0
votes
1answer
127 views

Previous Log Deleted /var/log/secure

When I checked /var/log/secure, only logs for current date was present. Why logs for previous date is not present? Any reason on this? thanks
10
votes
2answers
4k views

Strange Bittorrent Log On My Server

I don't know if the following log has something to do with my site being down sometime. I have lot of websites on my server and they don't have any logs like the following: 117.169.1.85 - - [03/Jan/...
0
votes
1answer
54 views

GET 6C6CCDBA-AFF1-E54F-A6A6-0D7A76E35801 in NGINX log [closed]

Fitrst I got notification from Nagios that NGINX down. When I checked server - there was lot full swap and memory. I found odd entries in log: 65.49.14.146 - - [04/Jan/2015:16:06:11 +0200] "GET /...
0
votes
2answers
335 views

How to pipe all log files entries to a database on linux?

I am thinking about building an application that would read my different server log files, save the parsed data to a database, and then remove the line from the log file. This is my programer side ...
3
votes
1answer
4k views

Linux: How to enforce specific permissions on newly created logs which are created by log rotate?

I've noticed that the mail logs which are being created in /var/log are being created and owned by root (user and group). I've wrote a Nagios check which monitors the log and in order to allow Nagios ...
0
votes
1answer
178 views

APACHE2: How to write log for a specific directory requested?

I have this line in the virtual host: CustomLog /var/log/access.log combined But I want a specific log to write each request of a specific directory e.g. I have this sub directories in my public: ...
2
votes
0answers
42 views

How can one get a UDE report from Microsoft Fixit Center Pro?

As per this video anybody is supposed to be able to upload their server's logs to the Microsoft Fixit center Pro and get an Automated diagnostic report called UDE. http://channel9.msdn.com/Shows/...
1
vote
1answer
93 views

Log to file in Asterisk: append with newline

(I am testing on Asterisk 11.7.0~dfsg-1ubuntu1) I am using the following format to append to a logfile, according to the documentation: same => n,Set(FILE(/tmp/mylog.txt,,,a)=my-log-message) ...
0
votes
1answer
100 views

How to config awstats to analyse .php traffics?

By default, awstats group .php traffics into a single Dynamic PHP Script file number. However, the site's pattern lies in route=??? after an index.php?, e.g.: GET /index.php?route=account/login/...
0
votes
1answer
142 views

Parse different lastlog[s]

I have the lastlog from 100 machines that I need to parse. Since I have them all centrally located, is there a way to parse these? Or do I need to go back to each machine and type the "lastlog" ...
-1
votes
1answer
35 views

linux server still recognizes the old domain after changing it to new one

I have some Linux servers (RHEL 6.3 and 5.4) under one domain (MS Windows server 2008R2) and every thing was working fine, but we decided to change the domain from olddomain.com to newdomain.com, now ...
0
votes
1answer
49 views

Configure logrotate to shrink file in user's folder?

All my users in /home/{user}/ have a specific error_log file in it that may grow overtime. So I was thinking about using logrotate to implement some kind of file reducing on it : when the file ...
1
vote
1answer
129 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
0
votes
1answer
578 views

How to run putty with -m command line *and* get log?

I'd like to launch putty and run my script automatically, it works, but I can't save the logs (I need them to debug)! The way I call putty: "D:\Some-Path\putty\PUTTY.EXE" -t -load "Server - 111.22....
3
votes
3answers
1k views

tail all log files in a directory | exclude zipped files

Im trying to find the right command to tail a bunch of log files whilst excluding the zipped files in a set directory. The log files are being zipped as they become oversized. At the moment Im using: ...
0
votes
1answer
374 views

OpenVPN “rwRW” logging

When an openvpn client is configured to have a debugging level of verb 5 or higher, one will find text similar to "rWrWRwRwRwRwrWrWrWRw" in their OpenVPN log, appearing when packets transit the VPN ...
-3
votes
1answer
35 views

I have a IP address with some open services. How could I contact the owner? [closed]

After having serious problems (DNS incident) I found out an IP address of a machine. Is it in any way possible to contact the owner without knowing anything else like email, domain name or website? I ...
0
votes
1answer
104 views

Working with multi line log entries (log parsing)

Say you have logs like these Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101 Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143] Thu 2014-10-09 23:...
1
vote
1answer
968 views

Apache access.log filled with GET requests for wpad.dat [closed]

I'm running a small web-server on a Raspberry Pi Model B+ system running Rasbian from the NOOBS install image. I have apache2 running and a DDNS service providing a URL (from duckdns.org). I'm ...
0
votes
1answer
32 views

what does JYADXW mean as a HTTP verb?

Some jerk attacked my server, and I was reading the logs, when I saw "JYADXW" where the HTTP verb GET/POST/OPTIONS normally reside. What is this request? what does it mean? malicious IP Here - - [26/...
-1
votes
1answer
292 views

Is rsync more robust than scp for connection reset?

On a big corporate firewall-ridden network, we have traditionally used scp to copy a few brand new files over from one machine to another, as part of the log-file rotation and analysis routine. ...
0
votes
1answer
195 views

Delete Apache log files once Awstats is updated

in my /var/lib/awstats, awstats creates monthly .txt files (its database). Once these files are created and I have my graphics created in Awstats, can I delete the old log files created by Apache? ...
1
vote
1answer
950 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
1answer
57 views

What do repeating '^@' symbols in a logfile mean?

A few times I have come across this in a log file: Sep 17 09:35:57 00187d378926 ovpn-00187d378926[1701]: /sbin/ifconfig tun0 0.0.0.0 Sep 17 09:35:57 00187d378926 kernel: Kernel logging (proc) stopped....
0
votes
1answer
41 views

Unable to read some files on hard disk

Our server has two independent hard disks without RAID. One hard drive just for storing junk/temporary data where we generally delete temporary data using LRU algorithm. We have a 10k file in that ...
0
votes
0answers
83 views

Server log shows Visitors asking for “408” with blank referrers and user agents,

I've created a website in a similar pattern to another website I already have, and hosted it on a similar server (only on a different IP). I've noticed that about 70% of my visitors (of no certain ...
0
votes
0answers
937 views

Apache error logs are empty httpd.conf defines the error log file in /var/log/httpd/error_log

I am relatively new to server administration and log files, so I am not sure what's wrong here. But here is what's going on. I am a PHP developer and I often navigate to /var/log/httpd/error_log.{date}...
14
votes
1answer
44k views

Managing CBS.log files on Windows 2008R2?

Whilst auditing disk space on our Windows 2008R2 farm we noticed that some servers had quite large C:\Windows\Logs\CBS\CBS.log files (~1.5GB). I was under the impression that this particular log file ...
1
vote
2answers
178 views

Difference Between Netstat and Access Log

When I was checking stats in SSH terminal for my VPS, I noticed that netstat and access log gives different results. When I used: netstat -anp I saw that one attacker having 32 concurrent ...
0
votes
0answers
70 views

Apache2 access.log interpretation

I'm pretty new to apache in general. It's a LAMP installation on Ubuntu server 14.04 and all is up to date. I'm also running a squid proxy on the same box(not transparent) with success in my LAN(...
-2
votes
1answer
2k views

Bash Script to Compress / Transfer / Remove Log Files [closed]

I am currently using chronolog to set log file names for Apache with date. They are in the following format: /WEB/LOGS/APACHE_ACCESS_YYYY-MM-DD.log /WEB/LOGS/APACHE_ERROR_YYYY-MM-DD.log I would ...
2
votes
2answers
6k views

How to get rid of network broadcasting of port 17500

I get the following in my VPS logs Aug 11 11:29:22 sv1254 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f6:f3:49:7e:0a:54:08:00 SRC=178.162.203.19 DST=255.255.255.255 LEN=131 ...
0
votes
1answer
49 views

unknown client in my error.log

I have recently reinstalled my VPS OS and at present do not have any websites in my public_folder. In order to investigate a dovecot error which of course is not my question here, I issued tail -n 20 ...