Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
15 views

.google-analytics.com/ga.js started appearing in Apache logs

Since about a week ago I notice this in my Apache logs: 28 Jul 16 01:17:00 107.73.227.93 404 /.google-analytics.com/ga.js http://m.facebook.com/ It appears all throughout the day, and always referred ...
0
votes
0answers
5 views

Can we pause msi logging in between installation process in InstallShield?

In InstallShield, can we pause msi logging while installation is going on ? I want to prevent to log the data or execution steps of particular CustomAction.
0
votes
1answer
17 views

Apache log request port number

I've got two virtual hosts to serve the same site configured in Apache/2.4.18 (Ubuntu), one for http port 80, and the other for https port 443. Currently I have them generating two separate log files:...
0
votes
0answers
12 views

How to log when a port is becoming “listening” using Sylog? [duplicate]

Is it possible to log with Syslog when a new port is becoming listening in linux debian? how can i do that? Moreover, is there a way to log to syslog results of top or htop commands? Regards
-3
votes
0answers
17 views

Sharing and logging internet on a linux server [on hold]

I have a ADSL internet connection on my company. I was asked to log all internet activities of users of this connection. I think of a way to put a computer between switch and modem and share the ...
-2
votes
0answers
26 views

Syslog pull method instead of push

I'd like to know if it's possible to pull logs with Syslog (rsyslog or syslog-ng) instead of push. Thanks for any help
0
votes
0answers
8 views

echo_read_request_body doesn't work. How to log POST request body (nginx)?

I need to log POST data. I have added to my config location / { echo_read_request_body; access_log /var/log/nginx/domains/site.post.log postdata; } And also added this to http ...
0
votes
1answer
14 views

Logs concerning failed IAX2 registration attempt missing on Asterisk server

I am trying to register a VoIP softphone (Zoiper app for iOS) with an Asterisk installation via IAX2. At present, this results in an error message "Registration Refused (29)" on the side of the ...
0
votes
0answers
11 views

how to configure cloudwatch log agent without associating IAM role with instance in amazon web services

I have Ubuntu instance already running on aws without any IAM role associated to it. Now i want to configure cloudwatch log agent . As per requirement on aws on below link http://docs.aws.amazon.com/...
-1
votes
1answer
16 views

Are web requests logged to both access and error logs?

I'm trying to count the number of requests my nginx reverse proxies served in the last 30 days. I'm doing this by counting all the lines in access logs plus the rotated access logs. I have logs for 30 ...
0
votes
1answer
32 views

separate php error logs for each Apache vhosts

Is it possible to separate php error logs for each Apache vhost ? I am running Apache/2.4.10 (Debian) and PHP 5.4.45 (cli) For example i tried php_value and PHPINIDir in my apache config <...
-1
votes
1answer
21 views

Logrotate is not working centos 6.6

I have the following configuration for logrotating the app logs. /opt/tomcat/logs/app-web.txt { copytruncate daily size 500M compress delaycompress rotate 0 missingok ...
0
votes
0answers
7 views

rotatelogs: how to combine -L and -n?

I'm looking to get an archive of 7 rotations, daily interval, with a dedicated file name to constantly tail. ErrorLog "|/usr/sbin/rotatelogs -f -n 7 /var/log/apache2/ssl_error_log 86400" has a ...
0
votes
1answer
16 views

Hyperlinks between Logs

Logs get created in our context in several systems. For example: Job12345 gets created via a web service. Then it gets processed in a message queue Then it gets stored in a database Later it gets ...
0
votes
1answer
9 views

Varnishncsa for Varnish 4 split log by Vhost

In the varnish 3, varnishncsa can support -m option (-m tag:regex only list records where tag matches regex. Multiple -m options are AND-ed together. ). After upgraded to varnish 4, I cannot find the -...
0
votes
2answers
34 views

Sending Red Hat audit logs to Windows Share

I am trying to figure out the best way to offload audit logs from a single Red Hat server to a windows share. What is the best way to do this without installing any additional software on the Windows ...
1
vote
0answers
12 views

NXlog cant writes/read to cache for “savePos”

I can't configure NXlog to send Windows Event Logon logs. the logs are created before NXlog starts, so NXlog needs to remember When was the last time that he grabbed the Event logs. The problem occurs ...
0
votes
1answer
15 views

rsyslog 8 wildcard stops sending

We are having an issue with the rsyslog8 wildcard feature and logs that are generated with the date in them by default. Rsyslog will send log messages when I first add the config but then stops ...
0
votes
0answers
8 views

logstash elasticsearch using filebeat

While looking at logstash logs getting this in log files: {:timestamp=>"2016-07-12T16:56:03.675000+0530", :message=>"An unexpected error occurred!", :error=>#<NoMethodError: undefined ...
2
votes
1answer
42 views

sshd no longer logging after update on fresh CentOS 7 Install

I am running a VPS with CentOS 7. After a clean install, I correctly saw failed login attempts and service restarts appearing in /var/log/secure like so: Jul 8 13:55:32 vps unix_chkpwd[2561]: ...
0
votes
0answers
14 views

Is this a new type of exploit on SNI on apache2 web server with php? [duplicate]

This are some lines I am worried about which I found inside apache2/error.log [Wed Jul 06 23:37:33.013582 2016] [ssl:error] [pid 2754:tid 139761960302336] AH02032: Hostname www.redacted.net provided ...
0
votes
1answer
26 views

Graylog alert on unique email addresses?

We are trying to figure out if there is a way to create a stream/alert that will detect when an email address has been in a log more than X times. From what we can tell I can only count the total ...
2
votes
2answers
89 views

Martian sources from my public IP

These days I get some Martian packets in the kern.log: Jul 7 02:28:20 box14932 kernel: [789192.798073] IPv4: martian source XXX.XXX.XXX.XXX from 10.91.12.01, on dev eth1 Jul 7 02:28:20 box14932 ...
1
vote
0answers
8 views

Can I be sure that the name of a Linux Audit record's field is unique? [migrated]

I am creating a parser/converter from the Linux Audit format. As I was studying the format, looking at examples and reading the documentation I stumbled upon a problem. Can I be sure that the field ...
0
votes
2answers
70 views

How to filter (out) certain output in bash

I have a process that tails our AWS CloudWatch logs. It works great, except for the fact that every line is prepended by the CloudWatch group and container ID. For example: core-api ...
1
vote
0answers
27 views

Is /var/log/auth.log incomplete a symptom of unauthorized access?

Today I found that /var/log/auth.log file only has records from latest week, and I'm suspecting that I was hacked by using an insecure SSH password, and the attacker deleted access logs to avoid ...
0
votes
0answers
34 views

How to view Parse Server logs in Parse Dashboard?

I'm using parse-server 2.2.14, with parse-dashboard 1.0.14. According to this merged pull request, logs can be viewed from the dashboard. But my dashboard just show "No logs in the last 30 days" ...
3
votes
0answers
28 views

exclude IP from nginx access log

How to exclude some IP address from access log? This is my config: server { listen 443 ssl; [...] access_log /var/www/web/log/access.log; error_log /var/www/web/log/error.log; location / { ...
0
votes
0answers
20 views

Where are the Google Health check logs

I am running a GCE instance and on it I have a Kubernetes cluster running. An HTTP Load Balancer is also configured to probe the health of the a Kubernetes service running on this instance. But I ...
0
votes
0answers
17 views

How to enable information logging for all traffic - Cisco ASA

How do I enable information logging for all traffic in the Cisco ASA. I do not want to manually go to each rule and set the logging to informational (right now on default)? Also if I do this will ...
0
votes
1answer
15 views

Configure rsyslog client to send different log filename to a syslog-ng server

I have multiple servers with rsyslog configured to write logs to a remote syslog-ng server configured like this: # Log anything of level info or higher. # Don't log private authentication messages! *....
0
votes
1answer
20 views

How to view dnsmasq client MAC addresses dynamically?

If I have already known the client IP, I know there's /var/log/dnsmasq.log and it contains logs such as Jun 13 12:22:42 dnsmasq-dhcp[499]: DHCPACK(wlan0) 172.24.1.110 34:12:98:11:80:bd ones-iPad ...
0
votes
1answer
46 views

How to diagnose process at 100% CPU without being able to shell in?

Given an Ubuntu 14.04 server setup on a popular VPS provider hosting a single website with Nginx, Apache and WordPress / PHP, after starting the server it works fine for a while. Days later the VPS ...
0
votes
1answer
57 views

Rsyslog output in GELF

rsyslog is powerful, but its docs aren't that explicit. I can't figure out how to parse a log file and route it directly to Graylog in GELF format. I have found bits of documentation about outputing ...
0
votes
1answer
22 views

Can I edit a “live” log file?

I want to mark some log entries for a web server log file. Is it possible to do this while the file, possibly simultaneously, gets new entries added by the server?
0
votes
0answers
18 views

Tracking filesystem changes in runtime

I need to have program that tracks changes made to the file e.g. when I am installing software from supplied installer instead of packages. I do not want to checksum every file in filesystem because ...
0
votes
0answers
17 views

Can I rotate/truncate a single logfile in PostgreSQL 9.4?

I want to setup my test PostgreSQL instance in a VM so that is logs queries to a single file (postgresql.log), which is rotated every hour. Using examples from the docs, I've added the following to ...
0
votes
1answer
36 views

auditd - Getting only EXECVE in ausearch?

I'd like to use the auditd daemon to log whatever is run as or by root on our servers. To that effect, I added the following lines to /etc/audit/audit.rules: # Log all commands run as (or by) root -a ...
0
votes
0answers
8 views

Haproxy log in with more precision

Using Haproxy, is there a way to log Tq/Tw/Tc/Tr/Tt values (HTTP mode) with more precision? (or in different units than milliseconds, e.g. in microseconds)
0
votes
0answers
38 views

HAProxy - How to raise the log level of responses with status code above 400

Here's my sample configuration: frontend www-http bind *:80 acl status_error status ge 400 http-response set-log-level err if status_error default_backend www-backend backend www-...
0
votes
1answer
19 views

Logstash Grok Filter

I'm sure there is a simple solution to this but I'm new to working Logstash. The filter I'm trying to apply is for some firewall logs and I have a field that will either have a single or two values ...
0
votes
1answer
38 views

mongodb logging entire document occasionally even with verbosity lowest

We are using mongodb version 3 in a AWS environment with Linux AMIs. Initially mongo was logging the entire document. We then lowered the verbosity in the yaml. That seemed to make most (99%) of the ...
1
vote
0answers
22 views

Awstats shows no operating system

I have AWStats running for two applications and for both no operating system is displayed. Instead only "unknown" is shown (100%). All the other stats are interpreted correctly, only the operating ...
0
votes
0answers
147 views

“Index Patterns: Please specify a default index pattern” in Kibana

I'm trying to create a simple hello world for ELK and be able to see kibana reports via the internet. I've installed kibana, logstash, nginx and elastic search. Here's my /etc/logstash/conf.d/10-...
1
vote
1answer
83 views

systemd-logind spams in log

In /var/log/auth.log appears too many messages "Removed session" Jun 2 17:42:39 srv-1 systemd-logind[13785]: Removed session c36006. Jun 2 17:42:39 srv-1 systemd-logind[13785]: Removed session ...
0
votes
2answers
37 views

Multiple readers on a Unix Domain Socket?

I was hoping to have multiple clients reading from /dev/log (rsyslog and a custom tool) which I understand is a unix domain socket. How can this be achieved?
0
votes
0answers
10 views

Logging NAT translation errors on Cisco IOS router? (port scanning, bogus 'established' packets)

We have a NAT setup with port mappings to internal Webservers and DNS servers. If someone tries to connect, say, to port 22 (SSH), then those packets are dropped simply because there is no static NAT ...
0
votes
2answers
17 views

How to direct errors from with a find exec command to a log file

Hi I have the following command that does yui optimizations and runs as a cron job. I want to log the output of the command to a log file. find . -type d -exec bash -c "cd '{}' && pwd &&...
0
votes
1answer
22 views

rsyslog ignoring settings file

changing the /etc/rsyslog.conf has no effect for my rsyslog. After changing the settings I call service rsyslog restart and it starts up without any problems. I for instance tried commenting out all ...
0
votes
0answers
39 views

set log level for 404'ed requests in nginx

I am analyzing my server log via journalctl: journalctl --since '24 hours ago' -p err and there are a lot of error messages from nginx for the simple reason that someone requested an invalid/not-...