Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
1answer
80 views

Forwarding structured data with rsyslog

We have a Java application logging structured data (MDC with log4j) via syslog to rsyslog (7.6.3) on localhost. localhost should then forward these log messages to a central logging host (also running ...
0
votes
0answers
14 views

rsyslog syntax error on non existent line

I get a syntax error message for my rsyslog configuration file at line 61. But my configuration only got 60 lines. I checked the last line in my configuration and it seems correct since it is the ...
-3
votes
1answer
28 views

How do you restart logging after deleting an NGINX log? [on hold]

I deleted my NGINX log because it was very large, thinking that NGINX would automatically create a new one in its place. It didn't, and now I don't have logs. The file was previously located at ...
-2
votes
0answers
15 views

mail log error (dovecot - postfix -amavis) and spam folder config [on hold]

Im having some trouble to filter mail error logs (Mail Server - Postfix - Dovecot - Amavis -ClamAV - SpamAssasin). Right now i can see my logs in the "/var/log/mail.log" file. Is there anyway to get ...
0
votes
1answer
27 views

nginx log entries out of sequence, possible to fix?

I have an nginx log parser which relies on fact, nginx log entries placed in sequential order. But from time to time I have log like this: [2015-07-01T08:41:59-07:00] https "GET ... ...
0
votes
2answers
17 views

rsyslog (local) and remote logging

I have several linux servers that I want to monitor the log files. I thought it would be great to setup a central log server that can capture incoming rsyslog packets. Each hostname would have its own ...
0
votes
0answers
12 views

logger not logging to remote rsyslogd instance

I am running CentOS 7.0.1406 with rsyslogd 7.4.7 and logger from util-linux 2.23.2. I have two machines connected via a switch. When I try to use logger to log from one machine to the other, nothing ...
0
votes
0answers
15 views

Using goaccess to figure out cause of increased traffic

I have an Ubuntu server hosted by Linode. A few days ago I got a notification that my Disk IO rate was higher than normal. I am trying to determine what they root cause of this is and whether I need ...
0
votes
2answers
21 views

What would be a portable nignx HTTP access log format to use with nginx?

I am looking for a way to store that logs in a common format so they can easily be recognized and parsed by most tools. I am interested about a format that is automatically recognized by goaccess ...
0
votes
0answers
8 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
0
votes
0answers
19 views

Logrotate: Error creating outfile, file already exists

I run logrotate in a daily cron, today I got an e-mail about a file already existing error: error creating output file path/to/search.log.2014-10-03.1412289722.gz: File exists But I'm not sure why ...
0
votes
0answers
15 views

How to send rsyslog to graylog? [on hold]

Hi I have just configured GrayLog Now I want to transport my Linux-Client log to GrayLog. How can I do that? I tried with allowing TCP:514 in /etc/rsyslog.conf and on the client I have added this ...
0
votes
0answers
19 views

How to set IIS Logging to best fit this scenario

I need to monitor a IIS 7 App Pool (WCF is running on it) and I would like to read messages like: Request A Received. Pool is down. Starting Pool. Request B Received. Pool going up. Request C ...
1
vote
1answer
23 views

Can the ETW Provider: Microsoft-Windows-IIS-Logging be installed on a Windows workstation?

I'm attempting to use Microsoft Message Analyzer version 1.3 to perform a live trace on an IIS 8.5 server. I'm an admin on my Windows 7 workstation and the target server. Each remote provider I want ...
0
votes
0answers
21 views

How to set the correct file permissions for custom logging with Apache 2? [duplicate]

I am trying to set custom logging for a particular web application (Apache 2.4.7 on Ubuntu Server 14.04). In the .conf file I added the following: CustomLog "|/usr/sbin/rotatelogs ...
1
vote
1answer
37 views

Import IIS Advanced Logs into SQL

I'm using IIS 8.5 Advanced Logging and also logging some custom HTTP headers. How can I import the raw logs into SQL on a regular basis (i.e. every minute)? I want to avoid the overhead of ODBC ...
1
vote
0answers
13 views

sles/opensuse os installation log

Is it possible to keep installation log off all events, tasks, say running commands, etc.. while installing SLES/openSUSE (or maybe another linux)? It's not a problem lookup info in already running ...
-1
votes
1answer
163 views

huge traffic from POST 123.249.24.233/POST_ip_port.php

222.186.129.5 - - [19/Jun/2015:16:56:28 +0000] "POST http://123.249.24.233/POST_ip_port.php HTTP/1.1" 301 184 "http://123.249.24.233/POST_ip_port.phpAccept: */*" "Mozi$ 222.186.30.111 - - ...
0
votes
1answer
31 views

Redirecting syslog facility to other facility

I have a syslog server, which separates logging informations according to hostnames. It can separate messages if it's in the 'local1' facility. I have a mail server, which sends messages to the ...
0
votes
0answers
16 views

fail2ban stops logging after some time (3-4 days)

I've noticed that whenever I want to see fail2ban logs after 3 or 4 days of being working, it compresses the logs to .gz which Im fine with that: -rw-r--r--. 1 root root 90034 May 1 12:49 ...
0
votes
1answer
22 views

Syslog-ng reverse dns lookup for data fields

I would like to try a reverse-dns before storing the firewall logs. I know this is possibile in logstash but i don't know if syslog-ng can be configured to do the same. Actually my logs coming from ...
0
votes
0answers
8 views

How to log only certain result/status codes with Squid?

By default Squid logs all access information including 'successes' and 'failures'. I'm interested in logging only 'failures'. In other words, I want to do something like log only Squid DENIED result ...
0
votes
0answers
17 views

Log network traffic from a specific process

I would like to track all the network traffic coming from and to specific processes. I don't need very detailed information, more like the total data volume, protocols, ports and addresses. Something ...
3
votes
0answers
25 views

iptables on openwrt router: logging connections to a host from clients on the same subnet [migrated]

I am trying to setup an auto wake-on-lan setup using my router that is running OpenWRT 14.07, Barrier Breaker. My idea is that the router monitors any connection attempts to the host I want to wake up ...
-1
votes
2answers
23 views

How do I get a simple non-reload logging toggle switch for Apache?

On a development server, I'd like to turn logging on only when needed for specific debugging operations. One way I can think of is Apache checks for the existence of certain dotfile somewhere and ...
0
votes
0answers
72 views

View PHP error logs on VM - Vagrant CentOS via Puphpet

I have a Vagrant VM running CentOS, which was built from a puphpet file (config.yaml), and I'm trying to get the PHP error logs setup and accessible. config.yaml - PHP section: php: install: '1' ...
0
votes
0answers
17 views

Windows 2012R2 — Always-on comprehensive startup/shutdown logging

Is there an option/utility that will allow me to always create more verbose startup/shutdown logs in Windows 2012R2? The event logs don't seem to be detailed enough to debug problems like ...
1
vote
0answers
82 views

PostgreSQL - Invalid byte sequence for encoding “UTF8”: 0xe7 0x75 0x20

Here is the problem : Everything worked fine with my postgresql system until I decided to click on the "rotate logs" button in the server status tab (from pgAdmin). After that, I faced this issue, ...
0
votes
0answers
10 views

Squid do not log proxy error

How to configure squid to not log errors? I tried: acl respError rep_header X-Squid-Error .+ log_access deny respError But I got this warning: ACL::checklistMatches WARNING: 'respError' ACL is ...
0
votes
0answers
9 views

Squid log auth method

Is there any way to log the authentication method of a client request to squid proxy? I have 3 methods: - negotate (kerberos) - ntlm - basic But in squid proxy logs (access log) I can not see this ...
0
votes
1answer
8 views

IIS Advanced logging: enable for a website but disable for a virtual dir below it

I've been googling for hours, but can't seem to find any info on this... Is there a way I can enable "IIS Advanced Logging" for a website, but disable for a child virtual directory? I tried ...
1
vote
0answers
32 views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
0
votes
0answers
19 views

Another Place to Edit Error Reporting Aside from php.ini, httpd.conf, or apache2.conf

Is there another place to edit error reporting aside from php.ini, httpd.conf, or apache2.conf (I am using Apache 2.2.15 so it uses httpd.conf). The issue is not php.ini or httpd.conf since they are ...
0
votes
0answers
34 views

Log Outgoing cURL Requests From PHP?

I currently have PHP set up to log all sent mail messages to a log file, using the following configuration in my php.ini: mail.log = /var/log/phpmail.log And it works incredibly well. It gives me a ...
2
votes
1answer
54 views

Is someone trying to hack into my VPS? [duplicate]

I was browsing my logs on papertail and I saw this. Jun 03 03:26:01 /USR/SBIN/CRON: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Jun 03 ...
0
votes
0answers
24 views

Issue with SSH on RHEL while monitoring logs from SpectorSoft Server Manager

I have 3 servers running RHEL hosting a number of Java applications where each of them generates a log file which I am monitoring from a Windows-based machine with the use of SpectorSoft Server ...
0
votes
1answer
31 views

Logstash matching ceph client and server separation

So I have a fresh logstash install and I am trying to deploy logstash to get a handle on the logs. I am going through and will eventually segment the logstash filters based on subsystem and ...
0
votes
0answers
14 views

Reconstructing a session (or user-flow) in splunk

I'm trying to recreate the process that a user goes through with regards to a specific set of endpoints and I want to see the order in which these call events occur. For the time being, I can use ...
1
vote
1answer
87 views

Change systemd unit tag send to journalctl/syslog

Is it possible to change what tag systemd managed service uses for logging? For example, my custom service report-daemon.service defined as # ... [Service] ExecStart=/usr/bin/php # ... # ... shows ...
0
votes
1answer
116 views

Boot time log: 'Failed to start Postfix Mail Transport Agent'

centos 7.1 postfix 2.10.1 After restarting server in /var/log/messages during boot time Postfix noted only in these 4 lines (all actions during 1 second): systemd: Starting Postfix Mail Transport ...
1
vote
0answers
11 views

Is it possible to limit what is logged in ODBC logging in IIS 6.0?

I am using ODBC logging in IIS 6.0. I cannot change that. Is there a way to limit it's logging to just the actual pages requested as opposed to every single tiny thing requested on a page? I don't ...
0
votes
2answers
55 views

Log rotation on NginX in Configuration file

I've tried this tutorial to rotate log file without external software, but it seems it doesn't work, my configuration on the server { block: if ($time_iso8601 ~ ...
0
votes
1answer
49 views

What should be the right logs permissions for NGINX on CentOS?

on /var/log/nginx/ I have access and error logs. Some are .log errors and others have .gz I think I messed up with the permissions. Some files are created by root/root, other files are created using ...
2
votes
0answers
70 views

How to find size of atomic write for nginx access log buffer?

This link says: The buffer size must not exceed the size of an atomic write to a disk file. For FreeBSD this size is unlimited. How can I find size of atomic write on my server? Is there any ...
0
votes
0answers
54 views

How to log changes made in a particular file to syslog

How to log changes made in a particular file using syslog-ng. The log must contain the timestamp, hostname, user who modified the file and action performed. Is there any option other than audit in ...
0
votes
1answer
32 views

nginx log request before processing

I have nginx server serving a lot of big files. I can see plenty of connections on the server. As it iw know, file to the accesslog is written after the request is completed. Is there any way to log ...
0
votes
1answer
26 views

Maintaining rsync log file

I have a cron running rsync for backup purposes, and rsync logs the output to a file via --log-file. This script will keep on running for a quite long time and I am worried that the log file will keep ...
0
votes
1answer
48 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
0
votes
1answer
37 views

Logging into file doesn't write anything

I have got some script, which I want run after start computer. I set it in group policy and script is running after PC start (I checked it), but I have in script some logging to which doesn't work. I ...
3
votes
1answer
66 views

How to stop SQL Server from logging informational lines to SQLFT log files?

I checked on a SQL Server 2012 instance recently only to see that the HDD is full and after investigating what happened it was Full Text Search informational lines filling the log files and disk space ...