A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

learn more… | top users | synonyms

1
vote
2answers
1k views

Zabbix 2.0 reads logs correctly, but trigger status is “UNKNOWN”

I'm trying to monitor a log file for the word "error", and if the word appears, fire a trigger for each new occurence of "error." I'm starting simply, with a file (/var/log/test.log) that is ...
4
votes
1answer
1k views

Can I safely delete MS SQL Server Error Log?

I have some huge log files, which are taking up all the space on a PC's hard drive. Is ok to simply delete the log file: C:\Program Files\Microsoft SQL ...
7
votes
2answers
5k views

How to set up fail2ban to read multi log in a jail?

How can I configure multiple logpaths for the same rule? I'm trying to write a syntax like this: [apache-w00tw00t] enabled = true filter = apache-w00tw00t action = iptables-allports logpath = ...
1
vote
1answer
39 views

Redmine 500 Internal Server Error on My account page

I used this method to install redmine I installed redmine in /opt/redmine, and i checked my log in /opt/redmine/current/log/production.log I recently upgraded from 2.5.2.stable.13345 to ...
1
vote
2answers
24 views

awstats server in dynamic infrastructure

I have a linux server dedicated to awstats. This server hosts awstats application and generate/publish statistics for several websites hosted by several webservers deployed in my infrastructure. In ...
0
votes
2answers
95 views

Unable to get Rsyslog structured data in syslog message

I am new to syslog module. I am trying to log messages with structured data by using this parameter in template. But it is showing null value for structured data. I am working with rsyslogd 5.8.11 ...
1
vote
1answer
28 views

Change the logs directory for CentOS

The default directory in which the OS writes its logs is '/var/log/', I want to change that directory to another one that I create. How can I do that? Note: I tried changing the paths (/var/log/.) ...
3
votes
1answer
3k views

logfile deleted on Oracle database how to re-create it?

For my database assignment we were looking into 'database corruption' and I was asked to delete the second redo log file which I have done with the command: rm log02a.rdo this was in the ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
2answers
119 views

What is the difference between syslog, rsyslog and syslog-ng?

I am a bit confused in syslog, rsyslog and syslog-ng. From where can I get the source code for syslog()? Is there any difference between rsyslog and rsyslogd?
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
0
votes
0answers
33 views

FreeNAS is getting Uncorrectable parity/CRC errors

In my FreeNAS 9.3 installation I am getting more and more Uncorrectable parity/CRC errors (like these here: May 15 13:39:41 freenas (ada1:ahcich1:0:0:0): READ_FPDMA_QUEUED. ACB: 60 00 b8 0e 18 40 91 ...
0
votes
1answer
19 views

How can I avoid non-existent file -systematically- requests?

This is my apache httpd log: [Wed May 13 18:29:48 2015] [error] [client 108.162.213.59] File does not exist: /www/html/ui/core.min.js [Wed May 13 18:29:48 2015] [error] [client ...
2
votes
2answers
1k views

IIS6/IIS7: how to get physical path to logs of web sites?

I have two questions: How to get list of all web web sites on server How to get list of log folders for each website (ex:C:\WINDOWS\system32\LogFiles\W3SVC1141336521 ) Are there special console ...
1
vote
2answers
33 views

Apache Server Log File Issue

I'm a programmer for a company and their server specs are off limits to me due to IT restrictions. I know it's an Apache server running off a Linux environment. I have permissions to add/remove files ...
1
vote
1answer
1k views

ForFiles.exe Not Working In Task Scheduler 0x1 Result?

I have no idea why it is not working in Task Scheduler because if I run the same code in a batch file it works fine? I am putting the following into task scheduler on a Win2008 R2 machine and I keep ...
2
votes
2answers
2k views

Logformat for catching asked hostname in a *.domain.com scenario?

I have an Apache 2.2 VirtualHost with a *.example.com ServerName. This is required for my scenario, all subdomains are handled with the same site. Now, in the access log, I am trying to figure out a ...
2
votes
3answers
3k views

nginx access logs ignore certain requests

I'm running nginx behind haproxy (running on the same server). I've configured haproxy to use a simple html file on nginx to verify the service is up, since I don't have/want a valid "/" URL on this ...
0
votes
0answers
34 views

Protocol not available errors in squid3

I set up a transparent cache proxy on my Raspberry Pi with Squid3. Everything seems to be working fine and Squid is caching everything it's supposed to and working perfectly. The cache.log is filled ...
5
votes
4answers
10k views

In unix, what's the best way to reduce the size of a massive log file that is actively being written to?

On a linux server, I want to reduce the size of a log file which is several GB big. Cutting off the top half, or maybe the first million lines would work.
2
votes
0answers
40 views

nginx, separate robot access log and human access log

I'm trying to separate the robot access log and human access log, so I'm using below configuration: http { .... map $http_user_agent $ifbot { default 0; "~*rogerbot" 3; ...
1
vote
2answers
22 views

Modifying LogFormat in Apache

I need to modify the LogFormat in Apache in order to add the X-Forwarded-For header and log clients' real IPs. I attempted to edit that in httpd.conf file but I then found two separate parts for the ...
1
vote
2answers
34 views

nginx log when specific referrer is present

Because someone steals content from our website, I need to create additional log file, that logs only if http_referrer contains specific domain. Currently I have this: if ($http_referer ~* ...
3
votes
4answers
11k views

Linux - martian source in /var/log/messages

I keep getting these messages in /var/log/messages : Mar 8 23:17:25 saas1 kernel: martian source 169.254.1.1 from 169.254.95.118, on dev usb0 Mar 8 23:17:25 saas1 kernel: ll header: ...
1
vote
2answers
2k views

Postfix log showing same error every 5 minutes

I have an error in my mail.log (/var/log). I'm using postfix. I am only using it to send email from my web app (Python/Django) for registration (I haven't configured for inbound, the MX isn't pointing ...
2
votes
1answer
26 views

Change filename format for Nagios archived logs to use different date format?

I have just set up a Nagios server, and by default it keeps archives of the log messages in /var/log/nagios3/archives. However the files are named with US style date format, like ...
11
votes
2answers
23k views

How to enable error log in lighttpd properly?

I have a Centos 5 system with Lighttpd and fastcgi enabled. It does log access but does not log errors. I have Internal Server Error 500 and no info in log and when I try to open not -existing file ...
1
vote
1answer
29 views

What does READ_CONTROL mean in the Security event log?

I have been asked to create audit record of file accesses. By the log is simply overwhelming. A single double click of a text file opening in notepad creates more than 10 log entries with Event Id ...
0
votes
0answers
46 views

Baidu trying to access .ftpquota in Nginx access.log

When I look at the Nginx access.log there are always several attempts from Baidu to access the file .ftpquota. When I do a ls -a I can see that the file even doesn't exist. I don't use FTP. Here are ...
1
vote
1answer
516 views

Techniques for Filtering Spiders/Bots during Log Files Analysis

I'll begin by telling you what we do. The measures we have implemented catch a lot of spiders, but we have no idea how many we are missing. Currently, we apply a set of measures that are obviously ...
1
vote
1answer
1k views

Merging Large IIS Logs

I am planning on using Webalizer to analyze and graph our IIS logs, but because we have a server farm Webalizer requires me to make sure that all of the logs are in chronological order (or else it ...
3
votes
3answers
167 views

What criteria do you use to determine if someone is hammering your server?

When you go through your logs, what criteria do you use to determine if it's you (ie: you need to beef up your server/s) or them (ie: they're verging on a DoS)? How many connections/second would you ...
-3
votes
1answer
66 views

Why same request for hundreds times in access log

I don't know what comes to this, and how to prevent it. Look at the time, it keep on with the same request for hundreds times. Not just those particular IPs but some others too. How do I prevent this. ...
2
votes
2answers
2k views

How to make apache log files readable by apache

I would like to make apache access log file readable by www-data (the user running the webserver) so I can serve it over HTTPS, to save me the trouble of SSHing to the server every time I want to ...
0
votes
1answer
1k views

How to see the content-type of a response in Nginx log file

Is it possible to see the content-type of a response to a request in Nginx's log file? At the moment, this is what I see for the request in question: 127.0.0.1 - - [23/Nov/2012:10:17:19 -0500] "GET ...
0
votes
1answer
45 views

Do DFS logs contain folder permission changes?

I have a DFS server sharing files and want to see when an admin gave read/write/full control to a user in a DFS share. Is there any way I can view this? I have checked in C:\Windows\Debug but the log ...
2
votes
2answers
1k views

How to get rid of network broadcasting of port 17500

I get the following in my VPS logs Aug 11 11:29:22 sv1254 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f6:f3:49:7e:0a:54:08:00 SRC=178.162.203.19 DST=255.255.255.255 LEN=131 ...
0
votes
3answers
1k views

kern.log bandwidth and syslog filling up with bandwidth lines

I'm using Ubuntu 11.04 and my kern.log, bandwidth, and syslog files are filling(And completely consuming my hard drive) with this stuff Apr 18 20:20:23 main kernel: [1886527.503932] BANDWIDTH_OUT:IN= ...
-1
votes
2answers
39 views

Exim log file errors

1- What is the meaning of these lines in /var/log/exim/main.log? I have these lines repeated more than 700 times in main.log 2015-03-16 21:30:57 TLS error on connection from [192.0.2.1] ...
11
votes
2answers
14k views

How to forward specific log file outside of /var/log with rsyslog to remote server?

How can I forward message from a specific log file like /www/myapp/log/test.log with rsyslog client to remote rsyslog server? This log file is outside of the directory /var/log.
1
vote
1answer
3k views

How do you handle log rolling (or truncation) for unix services that don't handle it themselves?

In my particular case it's the mysql general log and slow query log; neither is critical to operations, just there for troubleshooting if need be, and mysql doesn't have a mechanism for rolling or ...
0
votes
1answer
486 views

wireshark extract w3c log file

Does anyone know how I would go about extracting urls in w3c extended log format from a wireshark pcap capture file?
4
votes
3answers
1k views

Centralizing PHP error logging with syslog

I have a PHP application that is running on 20 web servers. It's silly to check every servers' PHP error log. I'm planning to centralize the error logging on one (not a web server, a server just used ...
1
vote
2answers
55 views

Deleting phpMyAdmin setup.php

My website log files show many requests looking for: /phpmyadmin/scripts/setup.php I have phpmyadmin on my website. Am I supposed to delete that setup.php file or just let them keep on requesting ...
0
votes
1answer
22 views

Apache2 client ip and port

Do anyone know if Apache by default is logging the port number of a client and were to find it. I know that it log the ip, but for mobile users there can be several devices with the same ip which uses ...
0
votes
0answers
20 views

Scraping log to identify emails sent to another MTA

I have a Courier MTA that seems to be sending spam. I want to scrape courier's mail.log to identify, for each mail that was sent to another MTA: The from address Where Courier got the email from ...
0
votes
1answer
86 views

Centos - /var/log/secure records nothing

I have accidentally remove /var/log/secure, I try to recreate it but it still stays blank after several connections. On a server where everything works, with ls -l I have: -rw-------. root:root ...
8
votes
4answers
7k views

Fast extraction of a time range from syslog logfile?

I've got a logfile in the standard syslog format. It looks like this, except with hundreds of lines per second: Jan 11 07:48:46 blahblahblah... Jan 11 07:49:00 blahblahblah... Jan 11 07:50:13 ...
0
votes
1answer
36 views

What user must own apache log directory

If I define apache log directory for a vhost, what is the user that I should make the owner? Should be apache user, or can be root?
0
votes
1answer
530 views

Exchange 2010 mailbox database logs

We recently discovered that an Exchange Server could not accept any (external) messages anymore due to low disk space. It is the Exchange "Back Pressure" feature that caused the Exchange Server to ...