Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
14 views

How do I forward Common Access Card information from a Blue Coat proxy to an Apache server?

I suspect I will have to forward a header from the proxy to the Apache server and then log it to the Apache logs using %{X-Forwarded-Common-Name}i or something to that effect. I've found Blue Coat's ...
0
votes
0answers
11 views

Service httpd went down, rsyslogd was HUPed

I have an M2 server on amazon ec2 with (amazon's default ami). I have the default php stack installed with wordpress running on it. The server has been working fine for a few months now without any ...
2
votes
0answers
13 views

How to add a prefix / label for services to supervisor stdout output

I'm using supervisor in docker images when I have to run multiple services in one image e.g. postfix and other mail services. When I redirect the stdout/stderr from all services to supervisor and ...
0
votes
0answers
9 views

Linux at command logging [duplicate]

For Linux, specifically CentOS, is the command executed by 'at' logged anywhere? If so, in what file would the command be logged? I looked under /var/log.
0
votes
0answers
12 views

linux firewall, log and display traffic [closed]

my debian/linux gateway serves many private devices. I want to log all trafficvolume per device and per portusage. Is there a OSS solution with a nice webfrontend to display (sortable) this data?
0
votes
0answers
23 views

fail2ban doesnt read log if file being used

My environment is Ubuntu 14.04, LAMP stack all from apt. implemented fail2ban and configured jail.local with backend = auto [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
0
votes
1answer
10 views

mod_security: How to log POST requests for specific URI?

I'm trying to set up mod_security to log POST requests payload for a specific URI, as it seems that a customers webpage is used as a spam relay and these requests corrupt the server side cache. I ...
0
votes
1answer
15 views

mod_security: What's the point of action auditlog?

I'm fiddling around with mod_security to log POST request payloads for a specific URI. As stated in this response http://serverfault.com/a/729079/292993 to a similar question mod_security's ...
0
votes
0answers
17 views

How to make svlogd send logs via UDP

I am currently using runit + svlogd for supervising some applications, but when deploying to multiple machines, I have the need to centralize/unify the logs in a single place in order to simplify ...
0
votes
2answers
22 views

IPTables: How to log and set a specific log file

Is it possible log all dropped connections by IPTables and set a iptables.log file for logging in /var/log/?
0
votes
0answers
29 views

mail.log file is growing too quickly

my mail.log file is currently growing out of all proportion. It's logged over 15Gb of content today and most of that seems to be down to spamassassin. There are a few questions that I can't ...
0
votes
0answers
17 views

Nagios check_log reset to OK after notification

Fail2ban is installed on one of the servers, I'm able to ban every IP that try to log in. I'm using the check_log plugin of Nagios to capture the last line of the fail2ban.log, it compares to the ...
0
votes
0answers
6 views

How do I change the log format for IIS8 ODBC Logging

With IIS8 (and 7) you can log directly to a database using ODBC logging. Unfortunately I can't find a way to customize which fields are logged using this method. In particular the referral link is not ...
0
votes
0answers
10 views

Generate guid in IIS logs

I am using Advanced Logging in IIS. I have a requirement where I need to generate GUID(correlation Id) for every log entry into the log. Is this possible in IIS, as I don't see GUID type columns in ...
0
votes
0answers
19 views

fcoemon: error response from lldpad: error

I have created and configured the red hat cluster and as I was just going through logs to see if every thing is fine, thats when I saw these errors. Not sure whats with these errors. Please advise. ...
-1
votes
1answer
33 views

is there a way to findout about a file history (create date / create directory / moved directory ) ? [duplicate]

so i found a shell deep in a directory of my website . my website doesn't have a upload section and i use a well known framework and it covers sql injection ( i use codeigniter active record to work ...
0
votes
0answers
21 views

Huge citadel log files

I noticed today that my mysql server was not starting up anymore. Checking the error logs, it showed that it didn't have enough disk space. I thought that's really weird since there's nothing on my ...
-1
votes
1answer
20 views

What is the difference between combined and combinedio Log Formats in Apache?

Essentially, the question is in the title. I am familiar with what the combined log format provides, however, I don't understand the difference when compared to the combinedio format. What do the %i ...
0
votes
1answer
25 views

logrotate frequency - when and from when

if have lograte in my daily cron /etc/cron.daily/logrotate -- assume cron.daily is run at 1.05am daily and if my logrotate config has a weekly settings Does it means that my logrotate will ...
2
votes
0answers
24 views

How to reliably capture Linux kernel log messages in case of a system debilitating crash (BUG, panic)?

I'd like to have access to the lines/tracebacks/whatever whispered by the kernel right before dying. This has proven problematic, because all interfaces I have access to become disabled. Post-reboot, ...
1
vote
0answers
27 views

Puppet missing deprecation warnings

I'm running a Puppet 3.4.3 master which I use to provision VMs. I noticed that a lot of deprecation warnings I can see when provisioning locally are missing when using the server as master. (For ...
0
votes
1answer
40 views

NXLog TCP Module Not Working

I am trying to use NXLog to forward logs from a file on one computer to a file on another computer. I am new to NXLog but feel like I now have a good handle on it after consulting the documentation. ...
0
votes
1answer
23 views

Pass arguements as parameter to -filterXPath get-wineventLogs

Hi I made powershell script in which I am taking three arguements(in param block) and passing them as parameters to -FilterXPath. But I am not able to get the result. $eventID=7036 $ServiceName=PW ...
0
votes
1answer
19 views

Cobian Backup: Incorrect parameter error

I have some Cobian Backup tasks to copy a file to an external hard drive. To prevent it from being compromised, the drive will not be mounted until the task is launched. We use the following ...
0
votes
1answer
11 views

Modsecurity Whitelist and keep logging

I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time. SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" ...
0
votes
0answers
21 views

Apache2: How to log the entire status line (including reason phrase)?

Apache logs the status code of the response if %s is in the log format, but I also need to log the reason phrase (the text to the right of the status code). How can I get Apache2 to log the entire ...
0
votes
0answers
10 views

IIS Log File Naming Scheme and Rollover

In IIS, you can configure logging to use different formats and different rollover schemes. You can also configure logging to be per-site (the default) or centralized (a single log for all configured ...
0
votes
1answer
21 views

Usage data from log file

Is there any way I can tell from the apache log files how many users are using an application and how often the use it? I kind of want the information that you would normally get from google ...
0
votes
0answers
22 views

How to forward logs and offenses from solarwinds to another server

There are several solarwinds servers in my Network. I want to aggregate some important logs and status from all of these different servers in a third party log server. I'v just searched but I didn't ...
2
votes
0answers
25 views

Analyzing squid3 access.log log files with a all-in-one shell script

I'm just going to write a shell script that me the essential functions such as SARG offers. Sort by URLs with most hits (Top100 in 10min out of 10k) Sum of status / error codes As well as sorting by ...
0
votes
0answers
16 views

rsyslog not filtering message field

Trying to remove ALL cron log stuff from auth/syslog but I cannot get it. Here is a snippet of my rsyslog. Not sure how to get this to format right, it keeps wanting to mess with my paste. But here ...
1
vote
0answers
11 views

Tomcat 7: how to log x509 cert dn with AccessLogValve

I have Tomcat7 running on RHEL6 with mutual authentication using x509 certificates for the entire container. From the user point of view in the browser, everything seems to work fine with a cert ...
0
votes
1answer
13 views

Apache 2.4 + PHP CGI SAPI: separate access_log of requests hitting PHP processing?

It's hard to tell from Apache general access_log which requests are processed by PHP, because direct file hits muddy the waters. PHP FPM SAPI has a super useful access_log directive, but how do I get ...
2
votes
1answer
29 views

Why isn't my SELinux logging anything?

I have a sneaking suspicion it has something to do with me mucking about with my rsyslog.conf, but I'm not 100% sure about that. I am running Centos 7, and SELinux has been working A-OK. However, I ...
0
votes
1answer
31 views

centos 7 : nginx givers error when enabling log

In CentOS 7, if I put the following line in my nginx.conf: error_log /usr/share/nginx/wordpress.itzgeek.com/logs/error.log; I get the following error when restarting nginx: nginx: [emerg] open() ...
1
vote
1answer
22 views

Apache piped logging failing

I am trying to write a simple apache piped logging directive and I am getting a failure. I just want to grep out 200 response codes for centralizing my log files to ELK. This is the custom log format ...
0
votes
1answer
26 views

Tomcat crashing with no error

I am running tomcat 7 on debian 7.9 dedicated server with several applications running on it and last time tomcat behavior is really strange. First after tomcat starts it takes all the assigned RAM ...
2
votes
0answers
43 views

How does one separate log data sent to a remote rsyslog server?

I have messages from multiple apache2 web servers logging to a rsyslog server. I've used a template to separate each /var/log/syslog file into its own folder based off of the ip address of the server ...
1
vote
0answers
47 views

Filebeat and downstream availability

I read here and there that a broker (like Redis) might not be required in the log pipeline (typically ELK) when Filebeat is used. From Filebeat's official page: [Filebeat] is intelligent enough ...
0
votes
0answers
16 views

How to show email addresses in Outlook 2013 SMTP logs?

I need to troubleshoot some client-side issues while sending SMTP messages using Outlook 2013; I've turned on diagnostic logging, however the sender and recipient addresses are hidden in the logs: ...
1
vote
1answer
38 views

What is the default retention and archiving mechanism for Windows 2012 Event Logs?

How does Windows 2012 manage event logs retention? Does it 'rotate' logs like *NIX systems? Does it automatically delete old logs when disk is full. Any way to define log retention period? (e.g. ...
0
votes
1answer
16 views

logrotate saves content to old file

I used logrotate to rotate my log files. The conf file look like this: /data/log/web/12114.log { daily rotate 10 copytruncate } But logrotate doesn't cut the log file properly. The ...
1
vote
1answer
72 views

How to log original value of $remote_addr when using Real-IP

My environment has user requests passing through a number of systems: [Client] --> [ELB] ---> [nginx] --> [web] (ELB = AWS Elastic Load Balancer) Thanks to this answer, I have nginx determining and ...
3
votes
1answer
31 views

Handling log files across mulitple Windows Servers

I have an application that at any time could be running on 1 of 4 windows servers. Hence, if I am looking for a specific log item, it could be in any of the 4 log files. What I am looking to do is ...
3
votes
1answer
12 views

Apache log HTTP code dispatch

I would like to get warned by email when some HTTP codes are triggered, so I wanted to dispatch log between different file depending of the request HTTP code. Like that i can put a watchers on those ...
1
vote
0answers
78 views

Excessive Windows Security Event Logs

I'm working on modifying our current Windows log setup and have ran across an issue I can't quite seem to find the answer to. We currently have nxlog configured on each DC to send windows event IDs ...
1
vote
0answers
34 views

php-fpm error log is trucated

I'm setting up test environment where I have nginx and php-fpm on centos 7. I have successfully setup everything and I can run php code. This is my configuration: nginx version: nginx/1.9.9 ...
0
votes
1answer
11 views

Log access to cached content by 3rd party

The question is pretty much the same as this one: How to log a request to apache access log if it's cached by Varnish but instead of varnish let's say I am using CloudFlare. Is there any way to ...
1
vote
1answer
58 views

Disable Nginx Logging for “forbidden by rule”

In my Nginx config I have some IP blocks in place, to fight off spammers & bots. This is very effective, but as a result, my error logs get filled up super fast with error messages like these: ...
2
votes
1answer
22 views

Ignoring Healthchecks With Graylog-Collector

I have a log file with a mix of health checks and actual hits in it. I'd like to collect all the logs except the /healthcheck hits. Can graylog-collector handle this for me? I've read through the ...