A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
2answers
168 views

Analysing user behaviour using IIS log

Recently I've decided to try to analyse user behavior on my site by using the information in the IIS log files in order to think of improvements to the site. I've tried some free tools to analyse logs ...
0
votes
2answers
130 views

How to control error_log file size

I can see multiple error_log files on my Apache Server. Example: error_log, error_log.1, error_log.2, error_log.3, error_log.4 .. I think initially single file is created with name error_log. Then ...
0
votes
2answers
568 views

Cleaning log files on Solaris for a service manifest

I have a service manifest on Solaris (Smart OS actually) and I would like to periodically clean its log files either automatically or manually without shutting down the server. My log is here: ...
1
vote
2answers
558 views

PowerShell filter files by date in name

I have many files with different names per day. How can I filter them by the date in their name? For example: app_20130505.log app_20130506.log app_20130507.log app_20130508.log app_20130509.log ...
1
vote
2answers
214 views

Strange java user agent in access.log

I recently noticed a huge load on my main production server, after some log parsing i stumbled upon a large number of those user agents originate from about 20 different IPs: 173.244.182.194 - - ...
0
votes
1answer
140 views

Why is the fpcgisock= socket found in apache logs folder?

The listing of apache logs folder in my hosting server is as follows: someuser@machine [~]# ls -al /usr/local/apache/logs total 86980 drwxr-xr-x 2 root root 4096 Apr 30 09:18 ./ drwxr-xr-x ...
0
votes
1answer
265 views

GoAccess analytics and HTTP Referer

This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own ...
3
votes
3answers
104 views

Reopen a truncated file while following a file with less

Sometimes I am running a less +F on a log file, which I then truncate. I would like less to realize that the file has been truncated and start following the file as it is now. Currently, I am forced ...
1
vote
1answer
72 views

I just found odd URLs in my Apache logs

I was using Tail on an Apache log file and noticed these: /cie/insxp5/update.ins /rpam/homepage-e.asp /rpam/Training-e.asp From a short session of googling, I think the rpam URLs refer to either ...
1
vote
1answer
379 views

Append date to domain logs with logrotate in Plesk 11

I am using plesk with a Media Temple DV 4.0 Account. It has a GUI to set up log rotation for my domains. However I need to append a date/time stamp to the logs so our stats software importer can ...
0
votes
2answers
31 views

Strange HTTP logs

in my apache log i have very lot lines like this : IP_ADRESS - - [21/Apr/2013:23:05:27 +0200] "\xc8j\xe8_\x8b\xad*x\x98\x0f\xbe\x1a\xf5\xfd\xe3*8\xa3H\x0f\x80\r)o\xe7\xc9\x8b\b ...
2
votes
1answer
201 views

How to tell cold boot from warm by /var/log/messages

Say I have a log which captures something really interesting as happening during boot. I want to know, was it just a reboot, or complete power off-and-on. What are the definite signs of cold reboot?
4
votes
3answers
969 views

Wildcard support for InputFileName in rsyslog?

We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName? Example: InputFileName: ...
0
votes
1answer
261 views

syslog-ng stopped and don't want to start

I noticed lately that my syslog is empty. I tried restarting it but i get this error: $ /etc/init.d/syslog-ng reload Reload system logging: syslog-ngsyntax error in /etc/syslog-ng/syslog-ng.conf at ...
0
votes
1answer
2k views

How can I automatically delete old apache error log files?

My /var/log/apache2 folder is getting out of hand. It has loads of old compressed error.log files that I want to get rid of before my server runs out of space and explodes. Firstly - Is it safe to ...
0
votes
1answer
109 views

How to split access and error logs in Parallels Plesk?

I have a site in PHP on Apache. Is there a way I can define settings in Parallels Plesk Panel for logging for e.g. it should create log file for each day? Currently my access_log file size is more ...
0
votes
1answer
934 views

How to check web server logs for SQL injection?

If I have a PHP site hosted on Apache and someone hacks it using SQL injection, is there a way I can find out exactly which script caused this by looking at my web server logs? Or using some other ...
1
vote
1answer
1k views

security_error_ring_buffer_recorded in system health log - what does it mean?

Our company is running a few servers for a couple of websites. The server are running Windows Server 2012 and for databases we have MS SQL Server 2012. Today I was checking the log files located in: ...
0
votes
1answer
50 views

Getting Webalizer to show URL stats for all time, not by month

The conf file has this section: AllSites yes AllURLs yes AllReferrers yes AllAgents yes AllSearchStr yes AllUsers yes ...which is great, but I don't see any way to show the same ...
0
votes
1answer
118 views

Webalizer shows only PART of the very first day in a log

I'm using webalizer-2.23-04-cygwin, the latest binary I could find, and it's doing the same thing an older version was also doing on a certain 900MB logfile I have. It only shows the first 411 hits, ...
-1
votes
1answer
48 views

HTTP request logs needed for anaylsis [closed]

I'm looking for detailed server logs of HTTP requests, so that I can find the most common HTTP request header values for fields such as User-Agent, Accept, Accept-Charset, etc.. I found a resource ...
0
votes
1answer
108 views

Large Number of 206 codes in Access Log

I'm finding a lot of 206 access codes in my Apache access log. After looking at the access log it seems that a number of IPs would hit the server multiple time for partial content on a number of large ...
5
votes
1answer
2k views

Is it possible to log additional HTTP headers in IIS logs?

I need to analyze logs for Exchange and would like to get additional headers saved such as MS-ASProtocolVersion Is is possible to configure IIS to log these additional headers? POST ...
0
votes
1answer
286 views

pptpd: log of unsuccessful authentication

I am using pptpd on Debian 6. I know that last shows the list of connections as well as the source IP. I am looking for the log of unsuccessful authentication, or any form of alert/ban for a source ...
1
vote
1answer
265 views

Trying to Setup Log Monitoring with Sentry

I am trying to setup a log monitoring application for monitoring Jboss Application logs. We have more than 50 Jboss Application servers in all our environments. My Requirement is below. The log ...
0
votes
1answer
143 views

the network dropped on ubuntu 12.04 server but came back

I have a ubuntu server, type 12.04 that serves as a mysql box and intranet server. Without notice it dropped all packets (www, ping and mysql). What logs should i check - the messages log is not in ...
4
votes
1answer
4k views

How to set up fail2ban to read multi log in a jail?

How can I configure multiple logpaths for the same rule? I'm trying to write a syntax like this: [apache-w00tw00t] enabled = true filter = apache-w00tw00t action = iptables-allports logpath = ...
1
vote
0answers
511 views

Monit check log file content

I am having a issue with Monits content check. I know I can check the log file like this check file test.log with path logs/test.log if not match "something" for 5 cycles then alert But the log ...
0
votes
1answer
6k views

Delete IIS log files

I do not find a way to disable and delete log file at C:\inetpub\logs\LogFiles\W3SVC2\u_extend1.log The file is extremely large about 50gb, I have tried to delete it as administrator, but got an ...
0
votes
1answer
72 views

Opening Windows NT evt files

Does anyone know of a tool which allows me to open Windows NT logs. I managed to get some results by using Window's 7 Event Viewer, but for some sources, it does not have the event's description. One ...
0
votes
3answers
2k views

Why is logrotate not rotating logs Tomcat access logs on aws centos 6.3?

I have the following file in /etc/logrotate.d: /usr/share/apache-tomcat/logs/*.access { nodateext copytruncate daily rotate 7 notifempty postrotate EXT=`date --date='-1 day' +%Y-%m-%d` /bin/gzip $1.1 ...
0
votes
1answer
108 views

Monitoring auth.log

Say you want to be able to easily see who's logged in to a system recently. auth.log has this information, but it's very cluttered with crontab entries and you have to use sudo to read it. ...
4
votes
1answer
764 views

I need to monitor a log file with monit if the file does not change monit will alert

I need help. I was looking in to Monit documentation and I need help. I could not find my answer there. I need to monitor a log file of a service, if that log file stops to increase in size or even ...
1
vote
1answer
4k views

Ubuntu EC2 Apache 2 : Access Log only shows Internal Dummy Connection

I'm running a micro instance on Amazon Cloud Services, and a recent spike made our web server unresponsive, I'm trying to do a little research to determine if this was a DOS attack, or which process ...
0
votes
2answers
32 views

Is there a free solution to count the number of context roots in an apache file?

I have an apache log file. I need to report how many rows (request) are from a specific context root. The apache logs already start with a slash and context root is to the second slash. Example ...
1
vote
1answer
123 views

Why are these requests in my Apache logs?

I've found the following lines in my Apache 2.2 logs (using the standard "combined" log format): 92.240.68.152 - - [10/Feb/2013:20:47:38 +0000] "GET http://8stepschools.com/images/8stances_tiger.jpg ...
3
votes
2answers
2k views

Tool to collect and read all linux logs in one place [duplicate]

I have two linux servers. I'm an administrator, and part of my daily routine is to check all the logs for errors or strange messages. So, every morning I check: On server #1: /var/log/syslog ...
0
votes
1answer
797 views

httpd error log : [client 127.0.0.1] Attempt to serve directory: /var/www/html/

I was looking through my server's error logs, because it has been crashing lately, and I noticed this error occuring constantly: [Mon Feb 04 17:26:09 2013] [error] [client 127.0.0.1] Attempt to ...
0
votes
1answer
183 views

What is the exmon equivalent in Exchange 2010? (to get detailed per user information)

Exmon was an Exchange 2003 utility that exposed the quantity of RPC calls and IO that each user consumed. I suspect that several users are downloading OSTs or manually importing other data into the ...
0
votes
2answers
395 views

How do I funnel all my EC2 apache logs to one server

Is the best way to get all my EC2 Web Server Instance Apache Logs in one place, to create a "LogServer" EC2 Micro instance and point all the Apache Configs to it? Not sure how to do this and ...
3
votes
3answers
414 views

Find out how long a user was logged into a Linux server

In my Debian Squeeze server, all user logins and logouts are recorded in the file /var/log/auth.log Jan 28 07:11:06 xen8 sshd[29826]: pam_unix(sshd:session): session opened for user root by (uid=0) ...
3
votes
2answers
193 views

Benefits of Separate Over Combined Apache Logs?

I was wondering if there are any benefits or common use-cases in which using separate Apache logs (access, agent, error, and referer) is better than using a single combined log file. I tried Googling ...
2
votes
2answers
606 views

Rotate a file that's open and being written at all times

I have an linux application that continually writes logging information into a log file, eg. /var/log/application.log. As the application does not rotate the file automatically, this log file can ...
2
votes
1answer
332 views

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. ...
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
1
vote
1answer
457 views

Apache Accessing System Environment Variables (for Log File Location)

Is there a way to let Apache access the system environment variables? I know it has its own environment and can pass them to spawned processes like PHP, but is there a way to let the server itself ...
3
votes
1answer
1k views

How do you force a process to flush the data written to an open file descriptor under Linux?

I have a binary process (with no sources available) running on an embedded Linux system. The process opens a log file (/tmp/dmaosd.log) where it logs what it's doing. The problem is the log gets ...
0
votes
3answers
511 views

Is this a denial of service attack?

I have my kern.log flooded by these lines: Jan 4 03:00:57 myhost kernel: [9040601.809740] iptables denied: IN=eth0 OUT= MAC=10:00:25:09:e7:40:00:21:5e:3f:c4:04:08:00 SRC=178.33.217.13 ...
1
vote
3answers
500 views

What is the simplest way to monitor log files for (a) string/regex matches AND (b) lack of output?

On a single Linux server, there are often lots of independent (perhaps interlinked) services outputting numerous logs to files at known paths. Sometimes bad stuff happens and is written about, to the ...
0
votes
1answer
5k views

CRON opens and closes sessions continuously

I'm seeing a huge amount of these lines in my auth logs: Dec 31 03:45:01 xxxxxxx CRON[17259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 31 03:45:01 xxxxxxx CRON[17259]: ...