A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

2
votes
4answers
438 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
-1
votes
1answer
367 views

EDAC error messages at boot each time, is it a hardware issue?

I noticed I have EDAC error messages in the logs while I was doing a dmesg. Then I found out I am getting the same EDAC error message each time at boot. This is on CentOS 6.4 x86_64. I suspect a ...
1
vote
2answers
110 views

how can i get list of created and deleted files on the server?

i have a image sharing website , users log and upload image last night i've lost about 30 newly-consecutive uploaded images ... i mean they have been uploaded ... apparently ... they are in the ...
0
votes
1answer
287 views

How does nginx handle log file growth by default?

I'm a bit worried because its been a couple of days and my access log file is up to 250MB+. Does it roll log files over and delete them? I'd like for there only to be 1GB or less of log files total.
0
votes
1answer
72 views

Yesterday-access.log is pointing to a different directory

Under /var/log/ispconfig/httpd/quotednews.com/ folder, the yesterday-access.log is pointing to a wrong directory. yesterday-access.log is just a symlink to: ...
0
votes
1answer
251 views

How to understand these lines in apache.log

I just get 19000 lines like these in the apache.log file for my site example.com. My hosting provider shut down the hosting and notified me that I need to avoid to activate my hosting again. I ...
1
vote
1answer
76 views

Search log files newer than a time

I have a log file which has entries like below. I want to find only the log entries newer than a given time. What would be a suitable shell script for it? [2013-06-23 21:31:19,972] INFO [2013-06-23 ...
0
votes
1answer
101 views

Iptables LOG rules — what are they good for?

The arch wiki reads, The LOG target can be used to log packets that hit a rule. Unlike other targets like ACCEPT or DROP, the packet will continue moving through the chain after hitting a LOG ...
2
votes
2answers
144 views

Postfix log file grows too fast

I've configure postfix for just sending emails. (I need it just for PHP mail() function). However, after one day running, And just a couple of sent emails, the log file is about 20 MB. Checking the ...
1
vote
1answer
42 views

Coherent logs from multiple identical nodes

I have multiple web heads running a stack containing Apache/mod_php/Magento/MySQL and more. Every time I need to view logs I find myself jumping on multiple servers to view logs in different files ...
1
vote
1answer
115 views

Do I have to restart my server every time I clear my nginx log file?

On nginx: if I open the error log, select all (in emacs) and cut, save, php errors stop logging to that file completely. If I restart nginx, they begin logging again. If I delete the files ...
0
votes
1answer
90 views

Are Apache logs needed when Piwik is being used

Do I need to keep Apache access logs if I'm using Piwik for analytics (or Google Analytics)? True, these could serve as a backup. However, rotation would remove a certain history from the logs ...
0
votes
1answer
3k views

Newbie, need help deciphering firewall log files (Cisco ASA 5520)

I'm not very familiar with firewall log files, or many of the terms involved in server connections. The lines in question involve a foreign, unauthorized IP interacting with a firewall (Cisco ASA ...
2
votes
1answer
283 views

unix logrotate specify chunk size

How can I specify output file size which I want after rotation? For example lets say I want to run logrotate when log file reaches 10MB and I want to split this log into chunks which are 1MB max. I ...
-1
votes
1answer
39 views

What can cause drastic traffic jump on server?

In the last couple of days, between 3AM and 4AM my server traffic jumps tenfold, from 20MB to 200MB. I've checked the access log, and while there is significant googlebot activity, the difference ...
1
vote
2answers
4k views

rsyslog filtering based on message content

I have an application which is writing to syslog. The messages written to the syslog are for various buckets which need to be filtered out. Every message starts with a bucket number, so the messages ...
4
votes
2answers
302 views

Opening an archived “Application Event Log” (Hidden Directory)

I'm an admin on the box. I've turned off all the folder options "Hide protected operating system files" and turned on "Show hidden files and folders". I can see this folder in Windows Explorer: ...
0
votes
2answers
190 views

Analysing user behaviour using IIS log

Recently I've decided to try to analyse user behavior on my site by using the information in the IIS log files in order to think of improvements to the site. I've tried some free tools to analyse logs ...
0
votes
2answers
173 views

How to control error_log file size

I can see multiple error_log files on my Apache Server. Example: error_log, error_log.1, error_log.2, error_log.3, error_log.4 .. I think initially single file is created with name error_log. Then ...
0
votes
2answers
672 views

Cleaning log files on Solaris for a service manifest

I have a service manifest on Solaris (Smart OS actually) and I would like to periodically clean its log files either automatically or manually without shutting down the server. My log is here: ...
1
vote
2answers
720 views

PowerShell filter files by date in name

I have many files with different names per day. How can I filter them by the date in their name? For example: app_20130505.log app_20130506.log app_20130507.log app_20130508.log app_20130509.log ...
1
vote
2answers
244 views

Strange java user agent in access.log

I recently noticed a huge load on my main production server, after some log parsing i stumbled upon a large number of those user agents originate from about 20 different IPs: 173.244.182.194 - - ...
0
votes
1answer
154 views

Why is the fpcgisock= socket found in apache logs folder?

The listing of apache logs folder in my hosting server is as follows: someuser@machine [~]# ls -al /usr/local/apache/logs total 86980 drwxr-xr-x 2 root root 4096 Apr 30 09:18 ./ drwxr-xr-x ...
0
votes
1answer
289 views

GoAccess analytics and HTTP Referer

This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own ...
3
votes
3answers
122 views

Reopen a truncated file while following a file with less

Sometimes I am running a less +F on a log file, which I then truncate. I would like less to realize that the file has been truncated and start following the file as it is now. Currently, I am forced ...
1
vote
1answer
73 views

I just found odd URLs in my Apache logs

I was using Tail on an Apache log file and noticed these: /cie/insxp5/update.ins /rpam/homepage-e.asp /rpam/Training-e.asp From a short session of googling, I think the rpam URLs refer to either ...
0
votes
2answers
44 views

Strange HTTP logs

in my apache log i have very lot lines like this : IP_ADRESS - - [21/Apr/2013:23:05:27 +0200] "\xc8j\xe8_\x8b\xad*x\x98\x0f\xbe\x1a\xf5\xfd\xe3*8\xa3H\x0f\x80\r)o\xe7\xc9\x8b\b ...
2
votes
1answer
268 views

How to tell cold boot from warm by /var/log/messages

Say I have a log which captures something really interesting as happening during boot. I want to know, was it just a reboot, or complete power off-and-on. What are the definite signs of cold reboot?
4
votes
3answers
1k views

Wildcard support for InputFileName in rsyslog?

We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName? Example: InputFileName: ...
0
votes
1answer
314 views

syslog-ng stopped and don't want to start

I noticed lately that my syslog is empty. I tried restarting it but i get this error: $ /etc/init.d/syslog-ng reload Reload system logging: syslog-ngsyntax error in /etc/syslog-ng/syslog-ng.conf at ...
0
votes
1answer
2k views

How can I automatically delete old apache error log files?

My /var/log/apache2 folder is getting out of hand. It has loads of old compressed error.log files that I want to get rid of before my server runs out of space and explodes. Firstly - Is it safe to ...
0
votes
1answer
125 views

How to split access and error logs in Parallels Plesk? [closed]

I have a site in PHP on Apache. Is there a way I can define settings in Parallels Plesk Panel for logging for e.g. it should create log file for each day? Currently my access_log file size is more ...
0
votes
1answer
1k views

How to check web server logs for SQL injection?

If I have a PHP site hosted on Apache and someone hacks it using SQL injection, is there a way I can find out exactly which script caused this by looking at my web server logs? Or using some other ...
1
vote
1answer
2k views

security_error_ring_buffer_recorded in system health log - what does it mean?

Our company is running a few servers for a couple of websites. The server are running Windows Server 2012 and for databases we have MS SQL Server 2012. Today I was checking the log files located in: ...
0
votes
1answer
59 views

Getting Webalizer to show URL stats for all time, not by month

The conf file has this section: AllSites yes AllURLs yes AllReferrers yes AllAgents yes AllSearchStr yes AllUsers yes ...which is great, but I don't see any way to show the same ...
0
votes
1answer
138 views

Webalizer shows only PART of the very first day in a log

I'm using webalizer-2.23-04-cygwin, the latest binary I could find, and it's doing the same thing an older version was also doing on a certain 900MB logfile I have. It only shows the first 411 hits, ...
-1
votes
1answer
48 views

HTTP request logs needed for anaylsis [closed]

I'm looking for detailed server logs of HTTP requests, so that I can find the most common HTTP request header values for fields such as User-Agent, Accept, Accept-Charset, etc.. I found a resource ...
0
votes
1answer
128 views

Large Number of 206 codes in Access Log

I'm finding a lot of 206 access codes in my Apache access log. After looking at the access log it seems that a number of IPs would hit the server multiple time for partial content on a number of large ...
5
votes
1answer
2k views

Is it possible to log additional HTTP headers in IIS logs?

I need to analyze logs for Exchange and would like to get additional headers saved such as MS-ASProtocolVersion Is is possible to configure IIS to log these additional headers? POST ...
0
votes
1answer
397 views

pptpd: log of unsuccessful authentication

I am using pptpd on Debian 6. I know that last shows the list of connections as well as the source IP. I am looking for the log of unsuccessful authentication, or any form of alert/ban for a source ...
1
vote
1answer
299 views

Trying to Setup Log Monitoring with Sentry

I am trying to setup a log monitoring application for monitoring Jboss Application logs. We have more than 50 Jboss Application servers in all our environments. My Requirement is below. The log ...
0
votes
1answer
152 views

the network dropped on ubuntu 12.04 server but came back

I have a ubuntu server, type 12.04 that serves as a mysql box and intranet server. Without notice it dropped all packets (www, ping and mysql). What logs should i check - the messages log is not in ...
6
votes
1answer
5k views

How to set up fail2ban to read multi log in a jail?

How can I configure multiple logpaths for the same rule? I'm trying to write a syntax like this: [apache-w00tw00t] enabled = true filter = apache-w00tw00t action = iptables-allports logpath = ...
1
vote
1answer
652 views

Monit check log file content

I am having a issue with Monits content check. I know I can check the log file like this check file test.log with path logs/test.log if not match "something" for 5 cycles then alert But the log ...
1
vote
1answer
7k views

Delete IIS log files

I do not find a way to disable and delete log file at C:\inetpub\logs\LogFiles\W3SVC2\u_extend1.log The file is extremely large about 50gb, I have tried to delete it as administrator, but got an ...
0
votes
1answer
74 views

Opening Windows NT evt files

Does anyone know of a tool which allows me to open Windows NT logs. I managed to get some results by using Window's 7 Event Viewer, but for some sources, it does not have the event's description. One ...
0
votes
3answers
2k views

Why is logrotate not rotating logs Tomcat access logs on aws centos 6.3?

I have the following file in /etc/logrotate.d: /usr/share/apache-tomcat/logs/*.access { nodateext copytruncate daily rotate 7 notifempty postrotate EXT=`date --date='-1 day' +%Y-%m-%d` /bin/gzip $1.1 ...
0
votes
1answer
113 views

Monitoring auth.log

Say you want to be able to easily see who's logged in to a system recently. auth.log has this information, but it's very cluttered with crontab entries and you have to use sudo to read it. ...
4
votes
1answer
943 views

I need to monitor a log file with monit if the file does not change monit will alert

I need help. I was looking in to Monit documentation and I need help. I could not find my answer there. I need to monitor a log file of a service, if that log file stops to increase in size or even ...
1
vote
1answer
7k views

Ubuntu EC2 Apache 2 : Access Log only shows Internal Dummy Connection

I'm running a micro instance on Amazon Cloud Services, and a recent spike made our web server unresponsive, I'm trying to do a little research to determine if this was a DOS attack, or which process ...