Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

-1
votes
2answers
16 views

How disabled log apache for image file missing?

How can we specify extensions file to filter it in log error of apache? My error.log fills with : [Thu Nov 27 22:42:42 2014] [error] [client 42.42.42.42] File does not exist: ...
0
votes
1answer
17 views

Haproxy not logging requests?

So, I configured Haproxy so the logging would go through rsyslog and, for now, be all dumped in one file. It's definetly logging, as I get those "starting" messages on startup, but no HTTP requests ...
1
vote
0answers
15 views

Rsyslog won't monitor mysql-slow.log when written to by mysql

I'm going mad. I'm trying to get rsyslog to send log files to logentries.com. This works perfectly until I try to log mysql-slow.log. The config is pretty simple module(load="imfile" ...
0
votes
0answers
19 views

IIS not logging On Demand App pool recycling

I am unable to get IIS to log on demand app pool recycling. I've followed the directions in this TechNet article: http://technet.microsoft.com/en-us/library/cc753412%28v=ws.10%29.aspx I see entries ...
-1
votes
0answers
31 views

(Web-based) application to keep track of sysadmin tasks [on hold]

I'm not entirely confident my title reflects what I'm looking for so I'll explain here what I'm looking for. As a sysadmin my daily job is keeping track of numerous small things that are running on ...
12
votes
1answer
101 views

How do I make sec ignore a timestamp properly

I have a rule that is set up like so; In /etc/sec/rules.d I have; type=SingleWithSuppress ptype=regexp pattern=(\S+) sshd\[\d+\]: PAM \d+ more authentication failures\; logname=.* uid=.* euid=.* ...
0
votes
0answers
26 views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
0
votes
0answers
17 views

sshd log file entries from the past mixed in with currently occurring entries

I have sshd log entries from the past seemingly randomly mixed in (in time) with the presently occurring log entries. No remote hosts log to this server, rsyslog serves only this box. External ...
0
votes
1answer
15 views

Logging SFTP activity with auditd

I am currently using auditd to log TTY activity for users that are SSH'd into my system. However, SFTP sessions are not logged in this way. Is there a way to log them using auditd or will I need to ...
1
vote
1answer
15 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
0
votes
0answers
4 views

What kind of service is runit's svlogd expecting?

The runit manual states that in the configuration one can use an option to submit logs to: ua.b.c.d[:port] tells svlogd to transmit the first len characters of selected log messages to the ...
0
votes
1answer
79 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
0
votes
1answer
36 views

Haproxy logging not work

Cant understand, how it logging? Now my log is empty and haproxy doesnt write anything to file. Sometimes it logs some info, Logging works with syslog-ng, if i set in haproxy conf timeout client about ...
0
votes
1answer
49 views

How to share nginx log's without sudo to another user?

I have 2 users on my server. One with sudo access another without. How can i give access to nginx logs /var/log/nginx/error.log To another user without sudo permission to use cat ...
0
votes
1answer
20 views

How can I suppress Postfix anvil statistics from system logs?

After every email sent through my mail server, postfix/anvil appends something like the following: Nov 9 15:09:11 keutenberg postfix/anvil[30006]: statistics: max connection rate 1/60s for ...
0
votes
1answer
29 views

Diagnosing where all the queries are coming from

We have an issue where a site on a shared hosting account is going over the allowed query limit per user; that is set at 100k queries/hr. The site shouldn't be generating that amount of queries TBH ...
1
vote
2answers
40 views

How to pass PHP mail.log output to a script

I'm logging all php mail output using the mail.log setting in php.ini. Rather than log to a file I want to have the log data sent to a script for parsing in real-time to raise alerts. I have tried: ...
-2
votes
1answer
25 views

get server stats from a specfic time

On my server this morning I noticed that an application reported it was running slow. I checked the web and sql logs and found nothing special. I would like to know what was going on at about 2am ...
0
votes
0answers
45 views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
1answer
21 views

Log Outgoing Apache Port on AJP Connection

I have Tomcat 7 set up to work with mod_jk and AJP. I'm wondering if, on the Tomcat side, I can log the mod_jk (Apache side) outgoing port with the Tomcat request handler thread name in order to track ...
0
votes
1answer
15 views

Logging only written on old [filename].1 log files

My log is not written on the correct log file for example syslog, mail.log, mysql.log, auth.log but for some reason the latest event are written on these old log files syslog.1, auth.log.1, mail.log.1 ...
0
votes
1answer
53 views

Cisco IOS: Logging only debug messages on command-line

I want to have a quiet command-line such as (config)# no logging console causes. Still, I want to make use of # debug commands. It appears to me that # debug depends on syslog level 7. So I cannot ...
3
votes
1answer
34 views

Logging commands on cisco devices

I'm searching for a way to log every command executed on a cisco switch/router, I have a catalyst 2960s with lanbase image, and a catalyst 4500e with ipbase image. I've found a way to log commands ...
0
votes
0answers
51 views

MySQL exits without any output

Having a strange issue. Some time ago MySQL exited suddenly when I was creating a table (I think), and I shelved the issue until now. It seems to start, but nothing happens and it exits: 141031 ...
0
votes
2answers
76 views

nginx : stop error log from search engine bots

I have a centos 7 server with nginx 1.6.2 and I would like to stop error log when a bot from a search engine make a 404 error in my website. This, in order to have a clean error log, with only "true ...
1
vote
1answer
102 views

nginx logging to access.log.1 instead of access.log, logrotate failing?

I have an nginx instance that is set to log access to /var/log/nginx/access.log and errors to /var/log/nginx/errors.log, but as soon as logrotate runs each week, the file gets moves to *.log.1 and the ...
-1
votes
1answer
76 views

How to determine what traffic is being dropped / blocked base on iptables log

I have followed the example for iptable logging from https://help.ubuntu.com/community/IptablesHowTo#More_detailed_Logging sudo iptables -I INPUT 5 -m limit --limit 5/min -j LOG --log-prefix ...
0
votes
2answers
152 views

Clearing/Deleting Docker Logs

On our docker implementation on GCE, we are running out of space on the root file system. Since images themselves are stored on a separate 1TB volume, the images themselves shouldnt be the problem. ...
0
votes
1answer
59 views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
1
vote
1answer
285 views

Snort not sending alert log file to syslog server?

I am set up with three virtual machines running Ubuntu - a Server, Client, and Gateway. I am tasked with setting up Snort on the Gateway to monitor "attacks" from the Client to the Server. Snort is ...
1
vote
2answers
72 views

Syslog does not record logs received over TCP to a file

I am trying to setup a centralized rsyslog server on CentOS 6.5 for Cisco routers and switches. On the Cisco devices, I've set the correct date/time and enabled timestamps, logging to the server over ...
0
votes
1answer
130 views

apache error log AH00135: Invalid method in request "GET /cgi-bin/php HTTP/1.0

Today I have noticed a lonely error (for the last week) inside of my error log file: [datetime] [core:error] [pid 11220] [client 187.33.2.88:34964] AH00135: Invalid method in request "GET ...
1
vote
1answer
42 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
0
votes
1answer
24 views

Fine-grained control over mod_security logging

I installed mod_security2 on several dozen servers (each with several dozen VHosts) and don't have the time to configure it for every VHost. In the default configuration, it produces copious amounts ...
0
votes
1answer
57 views

Nginx log entries to multiple files

I'd like to log the same access.log entries to separate files, so when a request comes in it should populate a.log and b.log. Is there any way to do this with nginx?
0
votes
1answer
39 views

Daily postgresql cron error log file

I am getting these emails daily: /etc/cron.daily/logrotate: error: error accessing /var/log/postgresql: No such file or directory error: postgresql-common:1 glob failed for /var/log/postgresql/.log ...
0
votes
1answer
51 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
1
vote
1answer
34 views

Sent mail/login log for roundcube webmail

Does roundcube webmail have a log for logins, or for sent mail? I searched everywhere but could only located the "error log" directory in roundcube, not one for logins or for sent mail. I'm trying to ...
1
vote
2answers
182 views

How to log ssh client connection/command?

I would like to know how i could log SSH command lines a user is using on a server. For exemple, if the user Alex on my server is doing the following set of commands : $ cd /tmp $ touch myfile $ ssh ...
1
vote
1answer
19 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
0answers
73 views

Using OSSEC to monitor windows services

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
0
votes
1answer
47 views

My local MySQL server was temporary down for unknown reasons

My local MySQL server 5.5.38 (on CentOS 6.5) has been temporary down and the mysql log file was filled with this kind of details: This could be because you hit a bug. It is also possible that this ...
0
votes
2answers
61 views

URL logging on DNS server?

Following this setup http://www.g-loaded.eu/2010/09/18/caching-nameserver-using-dnsmasq/ I was able to configure a DNS resolver server using dnsmasq for my network. The setup works correctly and logs ...
0
votes
0answers
67 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
2answers
56 views

Block certain GET request in Apache log

Since recently I have a VPS. Now it seems that there is a domain not owned by me that has DNS records pointing to my IP. Because of this my Apache (2.4) logs are flooded with some kind of GIT request. ...
2
votes
2answers
82 views

Method to log amount of transmitted data per each IP address in linux

I am looking for a method in linux to log the amount of data transmitted (received and sent separately) for every single IP address to which the data was sent to or received from. These statistics ...
0
votes
1answer
90 views

How To Tell Apache To Not Log Certain Requests In Its Access Log

I am trying to set a SetEnvIf variable in apache2 and exclude it in CustomLog in order to stop my logs from filling up. I want to match a regex and also specific IPs. I tried to follow the ...
1
vote
1answer
45 views

How do you configure runit logging

I am having trouble with setting service with proper logging using running. Here is a brief overview of files and scripts I created according to runit's documentation and other resources I found in ...
0
votes
2answers
98 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
0
votes
0answers
74 views

No Logged in php5-fpm.log File

I'm using ubuntu 14.04 and by default, php5-fpm.log is enabled under /etc/php5/fpm/php-fpm.conf. But I don't see any logged specially warnings like the following: WARNING: [pool web8] child 76743, ...