A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

0
votes
0answers
41 views

Analyze logs after hack

I'm really new to log analysis.. And OVH contacted my society because one of our website has been hacked during the weekend. They told us that they used Asprox. So my boss told me to look into the ...
1
vote
2answers
927 views

Zabbix 2.0 reads logs correctly, but trigger status is “UNKNOWN”

I'm trying to monitor a log file for the word "error", and if the word appears, fire a trigger for each new occurence of "error." I'm starting simply, with a file (/var/log/test.log) that is ...
-1
votes
1answer
23 views

linux server still recognizes the old domain after changing it to new one

I have some Linux servers (RHEL 6.3 and 5.4) under one domain (MS Windows server 2008R2) and every thing was working fine, but we decided to change the domain from olddomain.com to newdomain.com, now ...
3
votes
3answers
306 views

Deleted Apache access logs still taking up space

I deleted a 7GB apache2 other_vhosts_access.log.1 to free up some space on our server. Basically I deleted all but the most recent access logs. The largest was uncompressed - I assume it hadn't been ...
0
votes
1answer
11 views

Configure logrotate to shrink file in user's folder?

All my users in /home/{user}/ have a specific error_log file in it that may grow overtime. So I was thinking about using logrotate to implement some kind of file reducing on it : when the file ...
4
votes
3answers
916 views

Wildcard support for InputFileName in rsyslog?

We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName? Example: InputFileName: ...
1
vote
3answers
357 views

Monitor log files in realtime, like “top” monitors processes [OS X]

Is there a command/program for OS X that allows me to hook to a file and display its changes in realtime without re-opening it, much like "top" monitors system processes in realtime?
0
votes
1answer
78 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
2
votes
2answers
1k views

Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net" A new line in my access log the other day. As far as i can tell ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
2
votes
2answers
1k views

IIS6/IIS7: how to get physical path to logs of web sites?

I have two questions: How to get list of all web web sites on server How to get list of log folders for each website (ex:C:\WINDOWS\system32\LogFiles\W3SVC1141336521 ) Are there special console ...
0
votes
4answers
4k views

error in php not logging or displaying

I can not get any errors to display on screen on write to a log file. When check phpinfo() print out I have same value of master a local for display_errors On display_startup_errors On error_log ...
0
votes
1answer
888 views

SCCM 2012 R2 - OSD Task Sequence failure on physical computers

I'm trying to deploy windows 7 with SCCM 2012 R2 to physical desktops and laptops. But the task sequence keeps failing, no matter what I try. When I try it on a VM it works fine. However, when I try ...
2
votes
1answer
3k views

logfile deleted on Oracle database how to re-create it?

For my database assignment we were looking into 'database corruption' and I was asked to delete the second redo log file which I have done with the command: rm log02a.rdo this was in the ...
0
votes
1answer
18 views

How to run putty with -m command line *and* get log?

I'd like to launch putty and run my script automatically, it works, but I can't save the logs (I need them to debug)! The way I call putty: "D:\Some-Path\putty\PUTTY.EXE" -t -load "Server - ...
1
vote
1answer
106 views

Do I have to restart my server every time I clear my nginx log file?

On nginx: if I open the error log, select all (in emacs) and cut, save, php errors stop logging to that file completely. If I restart nginx, they begin logging again. If I delete the files ...
3
votes
3answers
199 views

tail all log files in a directory | exclude zipped files

Im trying to find the right command to tail a bunch of log files whilst excluding the zipped files in a set directory. The log files are being zipped as they become oversized. At the moment Im using: ...
0
votes
0answers
19 views

OpenVPN “rwRW” logging

When an openvpn client is configured to have a debugging level of verb 5 or higher, one will find text similar to "rWrWRwRwRwRwrWrWrWRw" in their OpenVPN log, appearing when packets transit the VPN ...
-3
votes
1answer
26 views

I have a IP address with some open services. How could I contact the owner? [closed]

After having serious problems (DNS incident) I found out an IP address of a machine. Is it in any way possible to contact the owner without knowing anything else like email, domain name or website? I ...
0
votes
1answer
30 views

Working with multi line log entries (log parsing)

Say you have logs like these Thu 2014-10-09 23:55:12: 01: Session 525229; child 0101 Thu 2014-10-09 23:55:12: 05: Accepting IMAP connection from [172.1.2.3:52337] to [1.2.3.4:143] Thu 2014-10-09 ...
0
votes
0answers
8 views

Awstats exclude Country

I have Awstats + GeoIP and I would like to exclude an entire country. Is there a way to do that? I'm not sure SkipHosts would do it, since it probably has something to do with the GeoIP plugin. ...
0
votes
1answer
126 views

Deleting log files from an AWS RDS Postgres instance

How can I delete logs from an RDS Postgres instance? I just noticed that my instance is displaying the message, storage-full. I can find any descriptions of how to deleted the log files, which I think ...
0
votes
3answers
384 views

Sonicwall Email Security Audit Logs

I have a Sonicwall Email Security appliance from which I would like to extract the audit logs on a daily basis. Currently, I can only see how to get them manually by going to the web interface. Is ...
1
vote
1answer
99 views

Apache access.log filled with GET requests for wpad.dat [closed]

I'm running a small web-server on a Raspberry Pi Model B+ system running Rasbian from the NOOBS install image. I have apache2 running and a DDNS service providing a URL (from duckdns.org). I'm ...
0
votes
1answer
29 views

what does JYADXW mean as a HTTP verb?

Some jerk attacked my server, and I was reading the logs, when I saw "JYADXW" where the HTTP verb GET/POST/OPTIONS normally reside. What is this request? what does it mean? malicious IP Here - - ...
9
votes
5answers
8k views

Proper way to rotate Nginx logs

I would like to achieve rotation of nginx logs that: would work without any extra software (i.e. - best if without "logrotate") would create rotated files with names based on date Best approach is ...
0
votes
0answers
26 views

What is /stop in my server logs?

Why do my server logs show GET requests to /stop? I believe this is due to modsecurity but cannot determine why or the importance.
3
votes
3answers
6k views

Apache Error Log Analyzer — Which is Best? [closed]

I have 3 log analyzer tools pre-installed on my server. In your opinion, which of the 3 analyzer tools do you find best? My Objective: basically to analyze the error log file Software Installed: * ...
-1
votes
2answers
83 views

Is rsync more robust than scp for connection reset?

On a big corporate firewall-ridden network, we have traditionally used scp to copy a few brand new files over from one machine to another, as part of the log-file rotation and analysis routine. ...
0
votes
1answer
33 views

Delete Apache log files once Awstats is updated

in my /var/lib/awstats, awstats creates monthly .txt files (its database). Once these files are created and I have my graphics created in Awstats, can I delete the old log files created by Apache? ...
1
vote
1answer
106 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
1answer
38 views

What do repeating '^@' symbols in a logfile mean?

A few times I have come across this in a log file: Sep 17 09:35:57 00187d378926 ovpn-00187d378926[1701]: /sbin/ifconfig tun0 0.0.0.0 Sep 17 09:35:57 00187d378926 kernel: Kernel logging (proc) ...
7
votes
5answers
15k views

logrotate does not compress /var/log/messages

Over time I noticed some logs in /var/log such as auth, kern and messages were getting huge. I made logrotate entries for them: $ cat /etc/logrotate.d/auth.log /var/log/kern.log { rotate 5 ...
0
votes
1answer
22 views

Unable to read some files on hard disk

Our server has two independent hard disks without RAID. One hard drive just for storing junk/temporary data where we generally delete temporary data using LRU algorithm. We have a 10k file in that ...
6
votes
3answers
4k views

Avoid logging of certain missing files into the Apache2 error log

I'd like to avoid logging some missing files (that gives a 404) into the Apache2 error log. I want to do this on an Eclipse update site for my plugin. Problem is that the Eclipse P2 code tries to ...
0
votes
1answer
927 views

Zimbra 8.0: Warning create file maildrop/XXXXX.XXXXX permissions denied

I have Zimbra 8.0 running over Ubuntu work fine but I have a warning: postfix/postdrop[XXXX]: warning: mail_queue_enter: create file maildrop/XXXXX.XXXXX permissions denied The problem is that ...
0
votes
0answers
32 views

Server log shows Visitors asking for “408” with blank referrers and user agents,

I've created a website in a similar pattern to another website I already have, and hosted it on a similar server (only on a different IP). I've noticed that about 70% of my visitors (of no certain ...
0
votes
0answers
229 views

Apache error logs are empty httpd.conf defines the error log file in /var/log/httpd/error_log

I am relatively new to server administration and log files, so I am not sure what's wrong here. But here is what's going on. I am a PHP developer and I often navigate to ...
1
vote
1answer
1k views

Managing CBS.log files on Windows 2008R2?

Whilst auditing disk space on our Windows 2008R2 farm we noticed that some servers had quite large C:\Windows\Logs\CBS\CBS.log files (~1.5GB). I was under the impression that this particular log file ...
1
vote
2answers
58 views

Difference Between Netstat and Access Log

When I was checking stats in SSH terminal for my VPS, I noticed that netstat and access log gives different results. When I used: netstat -anp I saw that one attacker having 32 concurrent ...
2
votes
1answer
1k views

How to install auditd on CentOS?

How to install auditd on CentOS 6.4 x64 ? I want to Log all commands run by admins Log all commands run by admins on production servers Edit: I can't run aduditd service I did with this tut enter ...
0
votes
0answers
41 views

Apache2 access.log interpretation

I'm pretty new to apache in general. It's a LAMP installation on Ubuntu server 14.04 and all is up to date. I'm also running a squid proxy on the same box(not transparent) with success in my ...
8
votes
7answers
7k views

Command line tools to analyze Apache log files [closed]

I have a bunch of Apache log files that I would like to analyze. I'm looking for a tool that doesn't require much setup; something that I can run a log through the command line, without messing around ...
-2
votes
1answer
299 views

Bash Script to Compress / Transfer / Remove Log Files [closed]

I am currently using chronolog to set log file names for Apache with date. They are in the following format: /WEB/LOGS/APACHE_ACCESS_YYYY-MM-DD.log /WEB/LOGS/APACHE_ERROR_YYYY-MM-DD.log I would ...
2
votes
0answers
116 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
1
vote
1answer
74 views

How to get rid of network broadcasting of port 17500

I get the following in my VPS logs Aug 11 11:29:22 sv1254 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f6:f3:49:7e:0a:54:08:00 SRC=178.162.203.19 DST=255.255.255.255 LEN=131 ...
0
votes
1answer
27 views

unknown client in my error.log

I have recently reinstalled my VPS OS and at present do not have any websites in my public_folder. In order to investigate a dovecot error which of course is not my question here, I issued tail -n 20 ...
1
vote
0answers
139 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
45
votes
1answer
46k views

InnoDB: Error: log file ./ib_logfile0 is of different size

I just added the following lines in /etc/mysql/my.cnf after I converted one database to use InnoDB engine. innodb_buffer_pool_size = 2560M innodb_log_file_size = 256M innodb_log_buffer_size = 8M ...