Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
2answers
14 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
0
votes
0answers
17 views

No Logged in php5-fpm.log File

I'm using ubuntu 14.04 and by default, php5-fpm.log is enabled under /etc/php5/fpm/php-fpm.conf. But I don't see any logged specially warnings like the following: WARNING: [pool web8] child 76743, ...
1
vote
1answer
13 views

Tomcat: Log the equivalent of SSL_CLIENT_S_DN

In Apache HTTPD it is possible to create custom request logs which include the value of SSL_CLIENT_S_DN. Since the site requires mutual authentication (client certificates) this provides a good audit ...
0
votes
0answers
12 views

IIS 7 Advanced Logging Filters

I'm trying to separate normal from mobile traffic using Filtering in IIS Advanced Logging, but it is not working. I have one definition with: ('User Agent' Equals '.*android.*') and the "Enable as ...
2
votes
1answer
65 views

Need help grepping postfix log

I'm trying to search for an unknown string (Message ID) in a log based on a known string (recipient address), and then grep the unknown string to output the entire relevant log information. I'm able ...
0
votes
0answers
6 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
0
votes
1answer
55 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
20 views

Does enabling more IIS logging fields consume resources?

It seems that IIS7 doesn't enable the bytes sent and bytes received fields in its logs by default. I would like to enable them so I could watch bandwidth consumption of individual sites, but my ...
-2
votes
2answers
27 views

FTP and SFTP logs track in CentOS

How it is possible to track the changes made to a directory using tools like FileZilla or XFTP ? because we found some files suddenly got missed from server, in history also nothing was found so ...
1
vote
1answer
27 views

logrotate: neither rotate nor compress empty files

i have just set up an (r)syslog server to receive the logs of various clients, which works fine. only logrotate is still not behaving as intending. i want logrotate to create a new logfile for each ...
0
votes
1answer
25 views

What is a name of a technique of deduplicating and summarising of logs?

So for example, you have a stream of logs coming in somewhere (a syslog server, forwarded Windows event logs, "Typical Poor Sysadmin's Mailbox", a Splunk indexer, whatever...) Imagine this stream of ...
0
votes
0answers
12 views

How do i set regex variable as env variable and use it to conditionally log?

This is what I have in my apache conf. I am setting the first part of the request uri as env varibale. It is always going to be client1 or client2. Now based on that I need to log differently (pass ...
1
vote
1answer
104 views

Monit cannot connect to Solr/Jetty instance

I have my Solr/Jetty up and running well on Ubuntu 12.04. I am trying to hookup my monit conf to monitor it, but it is having trouble connecting to the service. I have Solr running on port 8983 and ...
1
vote
1answer
44 views

How can I let nginx log the used SSL/TLS protocol and ciphersuite?

My goal is to ensure proper security for clients connecting to my nginx. I'm following Mozilla's guide to configure TLS properly on my nginx installation, but I don't have an overview of the actual ...
2
votes
0answers
21 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
0
votes
2answers
40 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
0
votes
0answers
27 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
0
votes
0answers
11 views

One rsyslog machine accepting encrypted and non encrypted logs on different ports

I'm trying to setup an rsyslog server to accept input from 2 different ports, one encrypted for our non internal servers, and one open for our internal servers. The reason for needing this is that ...
1
vote
0answers
53 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
1answer
23 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
86 views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
-1
votes
2answers
46 views

Get domains accessed through a specific port [closed]

I'm developing a product and at a certain point I need to get domain names used to access some service on a specific port. Let's suppose I've a computers network with Internet access through a Linux ...
2
votes
1answer
27 views

IPTables custom log failing

I'm currently trying to split out some of my IPTables logging from kern.log into a file called iptables.log. Basically, I have several different adapters and I'm logging requests to port 80 on each ...
-1
votes
0answers
21 views

Lightsquid logs not showing all users

Our company is using Lightsquid software to monitor our users on a PFsense firewall with sophos Antivirus. However our Lightsquid reports is not picking up all our users some appear and reappear at ...
2
votes
0answers
19 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
0
votes
0answers
33 views

What can cause Apache to spend 30s to serve a request that normally takes less than 1s?

I am reviewing my Apache access log and came across this line: %T Method Request Protocol Status %I %b %O User-Agent 30 GET ...
1
vote
0answers
13 views

Simple web tool for viewing log

I'm developing a server deployment script that installs a bunch of stuff and generates a log in the process. I'd like users of the script to be able to view what's happening, on a web page, in real ...
0
votes
0answers
18 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
0
votes
0answers
19 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
2
votes
1answer
23 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
0
votes
0answers
141 views

Apache error log with django application showing “strange” error

My django code was previously in /var/www and all worked just fine. Yesterday, I decided to move the code in /root and keep the static files in /var/www for security purposes. I am using Django 1.6.5 ...
0
votes
1answer
40 views

Web access log analyzer for hosting providers

I have a nginx server set, it proxies request based on Host field. I have a common log for it, because per-host logging is done at the server, to which I do proxy_pass. So, is there any solution to ...
3
votes
3answers
83 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
0
votes
0answers
18 views

Server Error Logs - Folders and Files not found

I am receiving constant errors in the error_log which look like the following: [Tue Jul 22 10:28:18 2014] [error] [client 2001:8d8:906:7900::c:4cb5] File does not exist: ...
-2
votes
4answers
51 views

What would be a good tool for change correlation in the systems amongst group of sysadmins? [closed]

There is always problem in a group of sysadmins to sync their actions and log them into a central place. Machine based logging is easy, you can point syslog messages to a central logging server and ...
0
votes
0answers
44 views

SQL Server 2014 Standard 2014 no access and bad preformance

My company looks after a server which is running SQL Server 2014 Standard Edition. The main application database on the server is replicated out to about 20 subscribers. The server has only been in ...
1
vote
0answers
81 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
0
votes
1answer
44 views

PHP error logging with AWS and EC2 [closed]

I'm setting up my site to run on AWS EC2. In some presentation for AWS services I saw that there are ways to store your PHP error logs in AWS S3 and analyze it with specific tools. Can't find this ...
2
votes
1answer
28 views

auditctl - logging when a user logs out

Is it possible to log when a user logs out of a session on Linux using Auditctl? My current audit.rules relating to users are: -w /etc/login.defs -p xwa -k login -w /etc/securetty -p xwa -k login -w ...
1
vote
1answer
113 views

Using Logstash as shipper?

We are shipping logs from servers and using THE logstash on each server for shipping. So we read logs from the glob "/root/Desktop/Logstash-Input/**/*_log". input { file{ ...
2
votes
1answer
53 views

How to make “\n” a new line in terminal?

I'm trying to view the HHVM log in a friendly way - currently it just comes out as a giant block of text. I've noticed there are various instances of "\n" in there. How can I get my terminal (gnome ...
2
votes
2answers
190 views

How to split logs according to patterns?

I would like to be able to split log files according to a pattern found in them. For example process all logs and look for /(\w+)\s to match /myresource but exclude /myresource/anythingelse, to ...
1
vote
1answer
84 views

Apache logging not working

After upgrading from 2.2.7 to Apache 2.4.9 seems that logging doesn't work properly. Only things which are logged are modsecurity and fcgid events, but nothing from Apache like file not found errors. ...
3
votes
1answer
34 views

Is there a way to determine the log format if given a “.log” file?

Is there a way to determine the kind of log (so that it can be parse correctly) if I have no prior information about the type (for eg. syslog, apache log, IIS log) of log it is? I am trying to write a ...
2
votes
3answers
80 views

Common login script

Few weeks ago I thought it would be a good idea to write a script which should send me an email whenever some user would log in into my server. So I came to a perfectly working script ...
-2
votes
1answer
115 views

Bash script to install packages and report to log file [closed]

I want to be able to log result of running bash script to file. Script itself is pretty simple, its used to install basic packages on fresh install machines and it scheme looks like this sudo apt-get ...
0
votes
2answers
52 views

View realtime list of connections to Postfix

I am running Postfix on a linux box with a couple hundred local users with mailboxes. Is there a way to monitor all incoming connections (SMTP) to the Postfix service? I.e. a live stream of "IP ...
0
votes
1answer
35 views

Rotate whole /var/log

I want to rotate the whole /var/log folder on my server every day so I have the /var/log folder and compressed files like "log.1.gz" which contains the whole directory. I can't found anything on the ...
-2
votes
2answers
40 views

How to monitor and list modified files server wide for brief periods of time?

I would like to, from time to time, enable server-wide file monitoring that will show me all files being modified, updated and created while I have it running and thus simply spewing forth a list of ...
0
votes
1answer
36 views

Apache https error log

We have a website running on Apache. Users can access part of it by HTTP and the other part by HTTPS. Apache is logging HTTP errors but not HTTPS errors. However, both log access. How can I solve ...