A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

1
vote
1answer
8k views

Delete IIS log files

I do not find a way to disable and delete log file at C:\inetpub\logs\LogFiles\W3SVC2\u_extend1.log The file is extremely large about 50gb, I have tried to delete it as administrator, but got an ...
0
votes
1answer
74 views

Opening Windows NT evt files

Does anyone know of a tool which allows me to open Windows NT logs. I managed to get some results by using Window's 7 Event Viewer, but for some sources, it does not have the event's description. One ...
0
votes
3answers
2k views

Why is logrotate not rotating logs Tomcat access logs on aws centos 6.3?

I have the following file in /etc/logrotate.d: /usr/share/apache-tomcat/logs/*.access { nodateext copytruncate daily rotate 7 notifempty postrotate EXT=`date --date='-1 day' +%Y-%m-%d` /bin/gzip $1.1 ...
0
votes
1answer
114 views

Monitoring auth.log

Say you want to be able to easily see who's logged in to a system recently. auth.log has this information, but it's very cluttered with crontab entries and you have to use sudo to read it. ...
4
votes
1answer
992 views

I need to monitor a log file with monit if the file does not change monit will alert

I need help. I was looking in to Monit documentation and I need help. I could not find my answer there. I need to monitor a log file of a service, if that log file stops to increase in size or even ...
2
votes
1answer
8k views

Ubuntu EC2 Apache 2 : Access Log only shows Internal Dummy Connection

I'm running a micro instance on Amazon Cloud Services, and a recent spike made our web server unresponsive, I'm trying to do a little research to determine if this was a DOS attack, or which process ...
0
votes
2answers
32 views

Is there a free solution to count the number of context roots in an apache file?

I have an apache log file. I need to report how many rows (request) are from a specific context root. The apache logs already start with a slash and context root is to the second slash. Example ...
1
vote
1answer
137 views

Why are these requests in my Apache logs?

I've found the following lines in my Apache 2.2 logs (using the standard "combined" log format): 92.240.68.152 - - [10/Feb/2013:20:47:38 +0000] "GET http://8stepschools.com/images/8stances_tiger.jpg ...
4
votes
2answers
2k views

Tool to collect and read all linux logs in one place [duplicate]

I have two linux servers. I'm an administrator, and part of my daily routine is to check all the logs for errors or strange messages. So, every morning I check: On server #1: /var/log/syslog ...
0
votes
1answer
855 views

httpd error log : [client 127.0.0.1] Attempt to serve directory: /var/www/html/

I was looking through my server's error logs, because it has been crashing lately, and I noticed this error occuring constantly: [Mon Feb 04 17:26:09 2013] [error] [client 127.0.0.1] Attempt to ...
0
votes
1answer
200 views

What is the exmon equivalent in Exchange 2010? (to get detailed per user information)

Exmon was an Exchange 2003 utility that exposed the quantity of RPC calls and IO that each user consumed. I suspect that several users are downloading OSTs or manually importing other data into the ...
0
votes
2answers
474 views

How do I funnel all my EC2 apache logs to one server

Is the best way to get all my EC2 Web Server Instance Apache Logs in one place, to create a "LogServer" EC2 Micro instance and point all the Apache Configs to it? Not sure how to do this and ...
3
votes
3answers
452 views

Find out how long a user was logged into a Linux server

In my Debian Squeeze server, all user logins and logouts are recorded in the file /var/log/auth.log Jan 28 07:11:06 xen8 sshd[29826]: pam_unix(sshd:session): session opened for user root by (uid=0) ...
3
votes
2answers
212 views

Benefits of Separate Over Combined Apache Logs?

I was wondering if there are any benefits or common use-cases in which using separate Apache logs (access, agent, error, and referer) is better than using a single combined log file. I tried Googling ...
3
votes
2answers
859 views

Rotate a file that's open and being written at all times

I have an linux application that continually writes logging information into a log file, eg. /var/log/application.log. As the application does not rotate the file automatically, this log file can ...
3
votes
1answer
377 views

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. ...
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
1
vote
1answer
543 views

Apache Accessing System Environment Variables (for Log File Location)

Is there a way to let Apache access the system environment variables? I know it has its own environment and can pass them to spawned processes like PHP, but is there a way to let the server itself ...
3
votes
1answer
2k views

How do you force a process to flush the data written to an open file descriptor under Linux?

I have a binary process (with no sources available) running on an embedded Linux system. The process opens a log file (/tmp/dmaosd.log) where it logs what it's doing. The problem is the log gets ...
0
votes
3answers
653 views

Is this a denial of service attack?

I have my kern.log flooded by these lines: Jan 4 03:00:57 myhost kernel: [9040601.809740] iptables denied: IN=eth0 OUT= MAC=10:00:25:09:e7:40:00:21:5e:3f:c4:04:08:00 SRC=178.33.217.13 ...
1
vote
3answers
570 views

What is the simplest way to monitor log files for (a) string/regex matches AND (b) lack of output?

On a single Linux server, there are often lots of independent (perhaps interlinked) services outputting numerous logs to files at known paths. Sometimes bad stuff happens and is written about, to the ...
0
votes
1answer
5k views

CRON opens and closes sessions continuously

I'm seeing a huge amount of these lines in my auth logs: Dec 31 03:45:01 xxxxxxx CRON[17259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 31 03:45:01 xxxxxxx CRON[17259]: ...
2
votes
1answer
319 views

Restrict file access to append only

I have a directory with log files and I'm putting logs from script launched by users into them. Logging with syslog isn't possible in this case. I want the users to have only write permissions on ...
1
vote
1answer
132 views

Need a tool to monitor apache logs for suspicious requests and ban users via htaccess

Do you know any tool that monitors apache logs for suspicious actions (for example, several blocks by mod_security from one IP) and after it blocks this IP using .htaccess?
0
votes
2answers
144 views

How to process logs and debug information generated by applications running on spot instances

I am using Amazon Spot Instances to crawl a lot data. Most of them run until Amazon terminates them once the current price exceeds our max bid. I need to monitor and mainly archive the logs generated ...
1
vote
1answer
267 views

Make logwatch reports more interesting?

Is it possible to improve the quality of reports from logwatch? Like make it not just report disk usage which doesn't even change much in daily operation, but report significant changes in usage or ...
6
votes
4answers
140 views

How to measure rate of new lines in file (log file)

I'm trying to get a measure of log file line writes over time, ideally a current rate and 1-, 5-, and 15-minute averages. I could do something like this: watch wc -l /var/log/<my_file> .. ...
0
votes
1answer
66 views

create log file ssh (only ssh)

I use ubuntu 10.04, contained ssh. I want to create a log file that stores all the activity on ssh (only ssh). Like in /var/log/auth.log but only for ssh. Like/var/log/ssh.log. So, file ssh.log will ...
1
vote
2answers
122 views

Exchange 2010 Message Tracking

I was wondering if when i use the get-messagetrackinglog command i would also see rejected emails. Like if external user A sends an email to internal user B and got rejected for spam, could i see the ...
0
votes
1answer
322 views

IIS logs status code 590

Background: Trying to chase a bug where resources occasionally won't load. Only happens on mobile devices. Last five columns in IIS logs are cs(User-Agent) sc-status sc-substatus sc-win32-status ...
2
votes
1answer
193 views

How can I remove old log entries from a log file and archive them somewhere else in Linux?

CentOS 4.x I apologize in advance if this is not the appropriate place to ask this question. It pertains to a linux server / IT admin task. I've got a log file on an old CentOS 4.x server and I ...
1
vote
1answer
143 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
0
votes
1answer
151 views

Is my webserver being abused for banking fraud?

Since a few weeks i'm getting a lot of 403 errors from apache in my log files that seem to be related to a bank frauding scheme. The relevant log entries look like this (The ip 1.2.3.4 is one I made ...
0
votes
1answer
1k views

How to see the content-type of a response in Nginx log file

Is it possible to see the content-type of a response to a request in Nginx's log file? At the moment, this is what I see for the request in question: 127.0.0.1 - - [23/Nov/2012:10:17:19 -0500] "GET ...
3
votes
1answer
263 views

How can i handle huge log files?

I am running SSD servers because I have great experiences with performance. However I have webservers which serve lots of requests and the uncompresssed logfiles of one day tend to grow out the ...
2
votes
0answers
147 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
1
vote
1answer
270 views

Tool to correlate logs by timestamp

I have various log files, some with the same format (webserver + webserver SSL), some with different formats and even different timestamps. How can I correlate these log files together in a simple ...
2
votes
1answer
532 views

How can I reconstruct session from pcap file?

I am trying to extract session level (flow level) information from my pcap trace file. I want to generate the following data for each line of session (flow): Flow_num, IP_Src, IP_Dst, ...
0
votes
1answer
1k views

Zimbra 8.0: Warning create file maildrop/XXXXX.XXXXX permissions denied

I have Zimbra 8.0 running over Ubuntu work fine but I have a warning: postfix/postdrop[XXXX]: warning: mail_queue_enter: create file maildrop/XXXXX.XXXXX permissions denied The problem is that ...
3
votes
3answers
424 views

Deleted Apache access logs still taking up space

I deleted a 7GB apache2 other_vhosts_access.log.1 to free up some space on our server. Basically I deleted all but the most recent access logs. The largest was uncompressed - I assume it hadn't been ...
1
vote
1answer
696 views

What would be filling apache logs with “user not found”?

I noticed today that my apache log files have filled up with gigabytes of the following line: [SOME_TIME] [error] [client SOME_CLIENT] user__not found: /SOME_URI NOTE: the __ (double underscore) ...
0
votes
1answer
343 views

Repeated requests on our server?

I encountered something strange in the access log of our Apache server which I cannot explain. Requests for webpages that I or my colleagues do from the office's Windows network get repeated by ...
1
vote
2answers
54 views

Get Zipped Logs from a Remote Server

I am tasked with trying to find a way to download zipped logs from a remote server. There are quite a bit of these logs and they are constantly created. I do have limited ssh access to the remote ...
9
votes
1answer
3k views

How can I rotate many log files into a different subdirectory per rotation?

I have a directory with many log files, all of which I would like to rotate daily. For organizational purposes I would like to be able to move the rotated logs into a different directory (or ...
1
vote
0answers
195 views

Unable to log into samba server

I am unable to log into a samba server (running on fedora core 6) as it prompts for a username and password when I try to connect to the mapped drives from my windows 7 machine. I decided to reset ...
2
votes
4answers
763 views

How important is it to keep size of log files down?

I have a LAMP server where logrotate does its job once per week, and I notice some logs tend to get quite large. For example, the apache access-log is 73MB. Is it better that I tell logrotate to ...
1
vote
1answer
102 views

Sendmail's maillog polluted by dkim-filter

I just added domain keys to my sendmail configuration and everything appears to be working. However, upon reviewing the maillog I get a ton of these when an email gets sent or received: Oct 4 ...
0
votes
1answer
179 views

Why do I get Postfix entries in Apache logs?

I have setup separated error logs for Apache virtualhosts. when I checked some logs lately, I found entries of other unrelated programs in virtualhost logs. for example I get entries like this in ...
1
vote
3answers
249 views

What consequences to take from what i read in logfiles?

Since some weeks i manage my first Webserver, a Seaside application behind an Apache proxy on Linode, and i installed logwatch to send me daily logs. Where can i get information on when i have to act ...
1
vote
1answer
189 views

Measuring custom statistics with sar

I have a server application which I think is leaking file handles. I want to track the usage of file descriptors over time on my Linux (ubuntu) server. I've figured out that I can track the number ...