A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

5
votes
2answers
2k views

Rotate a file that's open and being written at all times

I have an linux application that continually writes logging information into a log file, eg. /var/log/application.log. As the application does not rotate the file automatically, this log file can ...
3
votes
1answer
548 views

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. ...
3
votes
2answers
4k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
1
vote
1answer
870 views

Apache Accessing System Environment Variables (for Log File Location)

Is there a way to let Apache access the system environment variables? I know it has its own environment and can pass them to spawned processes like PHP, but is there a way to let the server itself ...
3
votes
1answer
3k views

How do you force a process to flush the data written to an open file descriptor under Linux?

I have a binary process (with no sources available) running on an embedded Linux system. The process opens a log file (/tmp/dmaosd.log) where it logs what it's doing. The problem is the log gets ...
0
votes
3answers
1k views

Is this a denial of service attack?

I have my kern.log flooded by these lines: Jan 4 03:00:57 myhost kernel: [9040601.809740] iptables denied: IN=eth0 OUT= MAC=10:00:25:09:e7:40:00:21:5e:3f:c4:04:08:00 SRC=178.33.217.13 DST=xx.xx.xx....
1
vote
3answers
850 views

What is the simplest way to monitor log files for (a) string/regex matches AND (b) lack of output?

On a single Linux server, there are often lots of independent (perhaps interlinked) services outputting numerous logs to files at known paths. Sometimes bad stuff happens and is written about, to the ...
0
votes
1answer
7k views

CRON opens and closes sessions continuously

I'm seeing a huge amount of these lines in my auth logs: Dec 31 03:45:01 xxxxxxx CRON[17259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 31 03:45:01 xxxxxxx CRON[17259]: ...
2
votes
1answer
503 views

Restrict file access to append only

I have a directory with log files and I'm putting logs from script launched by users into them. Logging with syslog isn't possible in this case. I want the users to have only write permissions on ...
1
vote
1answer
177 views

Need a tool to monitor apache logs for suspicious requests and ban users via htaccess

Do you know any tool that monitors apache logs for suspicious actions (for example, several blocks by mod_security from one IP) and after it blocks this IP using .htaccess?
0
votes
2answers
161 views

How to process logs and debug information generated by applications running on spot instances

I am using Amazon Spot Instances to crawl a lot data. Most of them run until Amazon terminates them once the current price exceeds our max bid. I need to monitor and mainly archive the logs generated ...
1
vote
1answer
370 views

Make logwatch reports more interesting?

Is it possible to improve the quality of reports from logwatch? Like make it not just report disk usage which doesn't even change much in daily operation, but report significant changes in usage or ...
6
votes
4answers
181 views

How to measure rate of new lines in file (log file)

I'm trying to get a measure of log file line writes over time, ideally a current rate and 1-, 5-, and 15-minute averages. I could do something like this: watch wc -l /var/log/<my_file> .. ...
0
votes
1answer
73 views

create log file ssh (only ssh)

I use ubuntu 10.04, contained ssh. I want to create a log file that stores all the activity on ssh (only ssh). Like in /var/log/auth.log but only for ssh. Like/var/log/ssh.log. So, file ssh.log will ...
1
vote
2answers
276 views

Exchange 2010 Message Tracking

I was wondering if when i use the get-messagetrackinglog command i would also see rejected emails. Like if external user A sends an email to internal user B and got rejected for spam, could i see the ...
0
votes
1answer
592 views

IIS logs status code 590

Background: Trying to chase a bug where resources occasionally won't load. Only happens on mobile devices. Last five columns in IIS logs are cs(User-Agent) sc-status sc-substatus sc-win32-status time-...
2
votes
1answer
373 views

How can I remove old log entries from a log file and archive them somewhere else in Linux?

CentOS 4.x I apologize in advance if this is not the appropriate place to ask this question. It pertains to a linux server / IT admin task. I've got a log file on an old CentOS 4.x server and I ...
1
vote
1answer
157 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
0
votes
1answer
163 views

Is my webserver being abused for banking fraud?

Since a few weeks i'm getting a lot of 403 errors from apache in my log files that seem to be related to a bank frauding scheme. The relevant log entries look like this (The ip 1.2.3.4 is one I made ...
0
votes
1answer
2k views

How to see the content-type of a response in Nginx log file

Is it possible to see the content-type of a response to a request in Nginx's log file? At the moment, this is what I see for the request in question: 127.0.0.1 - - [23/Nov/2012:10:17:19 -0500] "GET /...
3
votes
1answer
443 views

How can i handle huge log files?

I am running SSD servers because I have great experiences with performance. However I have webservers which serve lots of requests and the uncompresssed logfiles of one day tend to grow out the ...
2
votes
0answers
216 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in /var/log/auth....
1
vote
1answer
551 views

Tool to correlate logs by timestamp

I have various log files, some with the same format (webserver + webserver SSL), some with different formats and even different timestamps. How can I correlate these log files together in a simple ...
2
votes
1answer
753 views

How can I reconstruct session from pcap file?

I am trying to extract session level (flow level) information from my pcap trace file. I want to generate the following data for each line of session (flow): Flow_num, IP_Src, IP_Dst, ...
0
votes
1answer
2k views

Zimbra 8.0: Warning create file maildrop/XXXXX.XXXXX permissions denied

I have Zimbra 8.0 running over Ubuntu work fine but I have a warning: postfix/postdrop[XXXX]: warning: mail_queue_enter: create file maildrop/XXXXX.XXXXX permissions denied The problem is that ...
3
votes
3answers
910 views

Deleted Apache access logs still taking up space

I deleted a 7GB apache2 other_vhosts_access.log.1 to free up some space on our server. Basically I deleted all but the most recent access logs. The largest was uncompressed - I assume it hadn't been ...
1
vote
1answer
1k views

What would be filling apache logs with “user not found”?

I noticed today that my apache log files have filled up with gigabytes of the following line: [SOME_TIME] [error] [client SOME_CLIENT] user__not found: /SOME_URI NOTE: the __ (double underscore) ...
0
votes
1answer
438 views

Repeated requests on our server?

I encountered something strange in the access log of our Apache server which I cannot explain. Requests for webpages that I or my colleagues do from the office's Windows network get repeated by ...
9
votes
1answer
7k views

How can I rotate many log files into a different subdirectory per rotation?

I have a directory with many log files, all of which I would like to rotate daily. For organizational purposes I would like to be able to move the rotated logs into a different directory (or ...
1
vote
0answers
211 views

Unable to log into samba server

I am unable to log into a samba server (running on fedora core 6) as it prompts for a username and password when I try to connect to the mapped drives from my windows 7 machine. I decided to reset ...
2
votes
4answers
1k views

How important is it to keep size of log files down?

I have a LAMP server where logrotate does its job once per week, and I notice some logs tend to get quite large. For example, the apache access-log is 73MB. Is it better that I tell logrotate to ...
1
vote
1answer
106 views

Sendmail's maillog polluted by dkim-filter

I just added domain keys to my sendmail configuration and everything appears to be working. However, upon reviewing the maillog I get a ton of these when an email gets sent or received: Oct 4 09:42:...
0
votes
1answer
218 views

Why do I get Postfix entries in Apache logs?

I have setup separated error logs for Apache virtualhosts. when I checked some logs lately, I found entries of other unrelated programs in virtualhost logs. for example I get entries like this in /...
1
vote
3answers
375 views

What consequences to take from what i read in logfiles?

Since some weeks i manage my first Webserver, a Seaside application behind an Apache proxy on Linode, and i installed logwatch to send me daily logs. Where can i get information on when i have to act ...
1
vote
1answer
244 views

Measuring custom statistics with sar

I have a server application which I think is leaking file handles. I want to track the usage of file descriptors over time on my Linux (ubuntu) server. I've figured out that I can track the number ...
0
votes
1answer
725 views

logrotate deletes all maillogs older than one day

I see only two files maillog and maillog.1 in /var/log. grepping for maillog in logrotate.d directory gives three files that have a mention of maillog. syslog /var/log/messages /var/log/secure /var/...
3
votes
1answer
271 views

Exchange 2010 SP2 log files taking up space

I administrate an Exchange server for a customer, and now the (transaction?) logs are taking up massive amounts of space. Are they safe to delete? The logs are taking ~70GB of space, while the ...
1
vote
1answer
682 views

Why is FunWebProducts flooding my server?

I have received 47 000 hits in the past couple of hours from a single domain. I researched FunWebProducts but it seems to be some kind of a plugin, not sure how this is possible? 89.70.25.120 - - [03/...
0
votes
2answers
89 views

Ubuntu split Apache2 log files

I rencently updated the config of my server to relocate the /var/www and /var/log in the /home folder, i also updated all my virtuals hosts to write the logs in the new /home/log folder. But now the ...
2
votes
1answer
989 views

Rotate other logs with rotatelogs.exe

On my machine there is some process which is writing a log in C:\Application.log. Now I want to rotate the logs file without stopping that application. On the same machine I have apache 2.2. As I know ...
0
votes
1answer
80 views

Apache2 decides to ignore the ErrorLog location. How to fix?

My apache2.conf file contains the lines ErrorLog /var/www/logs/error_log and CustomLog /var/www/logs/access_log common. I only get server shutdown/restart notifications there, however. All other logs ...
0
votes
1answer
420 views

IIS W3C Log files missing header

I've just gotten around to analyzing our log files. After banging my head with log parser and several other 'analyzer' tools I came to realize that my log files appear to be missing their header ...
3
votes
1answer
1k views

Compress logs rotated with cronolog

I have a bunch of servers(Centos 5.x) with Apache that have their logs rotated with cronolog. What is the best strategy for compressing and deleting those logs automatically after a certain time? ...
6
votes
2answers
1k views

How to get less to seek faster with large log files?

I am often dealing with incredibly large log files (>3 GB). I've noticed the performance of less is terrible with these files. Often I want to jump do the middle of the file, but when I tell less to ...
1
vote
3answers
1k views

nginx: log empty calls

Does nginx have an option to ignore health checks or buckets from load balancer against nodes? There are thousands of entries like 93.190.2.176 - - [24/Jul/2012:08:56:59 +0200] "-" 400 0 "-" ...
4
votes
1answer
2k views

SQL Server Maintenance Plan: Rebuild Indexes and Transaction Log Backup File Size

In my nightly maintenance plan, I was doing everything - reorganising and rebuilding indexes, updating statistics, etc. There's an hourly maintenance plan that does a transaction log backup. I ...
-1
votes
1answer
71 views

Trying to colate click fraud evidence [closed]

We've recently had some very heavy and unexpected Google adwords spikes recently, so I'm trying to work through the server logs to find out if we've been subject to click fraud. What I don't know is ...
0
votes
1answer
67 views

Safe to delete .lastcomm

I have a .lastcomm file that is >2GB is it safe to delete it? It's taking up a lot of room on the server and I can't find any documentation online related to it's log file.
1
vote
2answers
1k views

Apache's access.log files taking up too much space

So I switched all my sites over to Amazon's EC2 service a few months ago and I noticed today that my drive capacity is at >90%. Did a little digging and it seems that the majority of that is being ...
0
votes
1answer
270 views

Plesk adding logs folder as part of virtual host skeleton

Is there a way of adding a logs folder as part of default Plesk skeleton? I would like to include error logging into a file in the vhost directory as a part of vhost.conf in /var/www/vhosts/.skel/0 ...