Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
2answers
7 views

How to direct errors from with a find exec command to a log file

Hi I have the following command that does yui optimizations and runs as a cron job. I want to log the output of the command to a log file. find . -type d -exec bash -c "cd '{}' && pwd ...
0
votes
1answer
15 views

rsyslog ignoring settings file

changing the /etc/rsyslog.conf has no effect for my rsyslog. After changing the settings I call service rsyslog restart and it starts up without any problems. I for instance tried commenting out all ...
0
votes
1answer
18 views

Logging tool for many single-file logs

I'm working on a mobile cross-platform game, and there is a big team of QA that tests it all the time. When they find a bug, they have ability to send logs just by taping one hidden button. Log is a ...
0
votes
0answers
13 views

set log level for 404'ed requests in nginx

I am analyzing my server log via journalctl: journalctl --since '24 hours ago' -p err and there are a lot of error messages from nginx for the simple reason that someone requested an ...
0
votes
0answers
12 views

Odoo: reopen log files for external logrotate

We'd like to use logrotate (the standard tool, not Odoo's configuration parameter) to manage rotation of odoo.log: that usually means having the application close and reopen its log file in order to ...
-1
votes
1answer
19 views

How to tell if auditd has suspended logging?

If you put the following in your auditd.conf, auditd will suspend logging when you have 50MB or less space on your disk: admin_space_left = 50 admin_space_left_action = SUSPEND How can an external ...
0
votes
2answers
28 views

Rsyslog pull tools or strategy

I would collect the log(in particolar auditd but also other syslog log) produced by several linux server in a centralized syslog server installed in a linux server. I would configure the centralized ...
0
votes
0answers
7 views

General purpose monitoring and alerter [duplicate]

I sometimes have a need to automatically get notified when some events happens... I'm looking for some suggestions of application to use for this (Operation System isn't important). Requirements ...
0
votes
0answers
38 views

IIS 7.0 Advanced Logging: Is 1 Log File per Website Possible?

We currently have normal IIS Logging enabled with the "One log file per: Site" option selected, allowing each website to have its own log files. I just set up IIS Advanced Logging and cannot find a ...
0
votes
0answers
16 views

Hiding apache internal dummy connection on local ip address, not loopback

TLDR Hide in apache logs only the "Internal dummy connection" entries. My problem Apache 2.4, CentOS 7. For some reason the infamous internal dummy connection is coming from my own local IP ...
0
votes
0answers
8 views

Trim and filter functions in NFLOG

I have a tricky task to fulfill: I need to reduce the memory-size of my log on the disk space. Due to customer demand, I have work in a Linux environment with NFLOG. Another security restriction I ...
2
votes
0answers
23 views

Node.js program failing to read .log text file with Buffer error

I am attempting to view a log with a program called 'logger'. When I run node logger I get the following error: <Buffer 66 72 75 69 74 69 73 68 79 0a> The 'logger' program file looks as ...
1
vote
2answers
30 views

I erased haproxy.log with old content but this file hasn't appeared again

I have a load balancer with HAProxy in Ubuntu 14.04. I did all configurations for turn on log and it works well. However, I erased haproxy.log file and that hasn't appeared again. Can someone help me? ...
0
votes
0answers
8 views

How can I process auditd logs on the fly using ausearch?

I want to ship off logs into centralized logging (ELK). Because of the way things are, I need to do the processing on the machine that creates the logs. How can I get each new auditd event to ...
0
votes
1answer
11 views

OSX Server - Logging POP Mail Connections

I am trying to keep a running record of the users that are accessing our OSX 10.6.8 Mail Server using POP instead of IMAP. The Server Admin application features a running list of Mail connections ...
0
votes
1answer
42 views

Is there any way to log entered password from ssh?

My server is under attack and some one try to run brute force attack on my ssh port, I know that I can block the IPs which are illegal,with iptables,fail2ban, ... but I want to know which password ...
0
votes
1answer
47 views

How to get logwatch to filter dates in celery logs?

I'm a newbie to Logwatch and have it set up to watch log files created by celery, a distributed task queue popular in the Python world. My logwatch.conf "Range" is set to "between yesterday 4am and ...
0
votes
0answers
25 views

Forward to remote syslog in CoreOS

I want to aggregate CoreOS logs to Papertrail service, which basically provides a syslog endpoint for aggregate logging. Common advice for this setup seems to be starting a service that does ...
1
vote
0answers
16 views

Mysql query log is empty after boot

I can't figure out why is general and slow query log empty after computer restart. After restarting the server with systemctl the logs get populated. After reboot the files are created just empty. $ ...
0
votes
0answers
19 views

What does %t in Apache Log Format mean?

I have sever installations of the Apache web server where the Log Format is configured something containing the parameter %t. This documentation clearly states that it is the time the request was ...
2
votes
0answers
25 views

How to maximize utilization of fluentd server?

I have a fluentd server that is processing an average of 1000 req/s. This server is composed by 32 cpus. In this server are running 32 fluentd docker containers with the same configuration. The entry ...
0
votes
1answer
20 views

Field type not being honor in Kibana/Elasticsearch

I'm using a logstash plug-in for a Java app using logback to forward logs on to my logstash server. I've setup a filter definition as follows: input { tcp { port => 2856 codec => ...
0
votes
1answer
38 views

What do these logs mean? Am I attacking someone?

This night my server got put in an "anti-hack" mode where I could only use a read-only FTP to download my data. They told me that I was being a threat to the network, and that these were the logs ...
1
vote
0answers
10 views

Capping log file size: FIFO and maxsize

I am looking for a generic way to hard-cap erratically growing logfiles. The existing answers (linked below) suggest using a polling algo with logrotate, but that approach does not enforce a hard ...
2
votes
1answer
44 views

LDAP Remote Login Logs

How would I log who authenticated against my ldap system on Linux in my lab? I have a lab with several workstations, and one server running openldap. I would like to have similar functionality as with ...
1
vote
1answer
59 views

Forwarding specific logs rsyslog

TL;DR - send specific logs with rsyslog (to a redis server) : how to select the logs to be sent ? I want to forward to a redis server a set (and only that set) of logs, say for instance nginx logs in ...
2
votes
1answer
31 views

systemd journal and docker

I am using CoreOS which uses systemd and docker. One of the big issues with systemd and CoreOS is that it doesn't play 100% nice with docker. Or maybe docker doesn't play 100% nice either. Another ...
1
vote
1answer
19 views

Ubuntu 14.04. auth.log deleted

the log file auth.log has dissappeared on my ubuntu 14.04 server. Fail2ban log says that suddenly the file was gone: 2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36 ...
1
vote
2answers
16 views

IIS logs before written to file

I have an IIS version 8.5 web server running on Windows Server 2012 R2. Logging is configured on this server to write a new log file daily to %SystemDrive%\inetpub\logs\LogFiles. My "Log Event ...
1
vote
0answers
44 views

Nginx log to syslog on TCP port

I need to redirect Nginx access and error logs to a remote syslog server. From http://nginx.org/en/docs/syslog.html I saw that I can do: error_log syslog:server=192.168.1.1; However I need to ...
-1
votes
0answers
11 views

What should be the user set to , if i want to send the suricata log files to remote nxlog? [closed]

I am stuck at a point , basically i have suricata installed on the machine & the same machine has rsyslog. I am wondering by which user:group should we run suricata such that it is able to produce ...
-1
votes
1answer
38 views

Which Nginx log file is for fail2ban?

I have files in /var/log/nginx/ the log file /var/log/nginx/access.log is empty. But the /var/log/nginx/access.log.1 is being appended as always. In file /etc/fail2ban/fail2ban.conf, logtarget = ...
0
votes
0answers
14 views

SSH not logging failed key authenticated logins from valid users [duplicate]

For some reason OpenSSH is not logging the failed logins in /var/log/btmp (lastb) of valid users when I am authenticating with an SSH Key. On the other hand It logs failed and successfull logins from ...
0
votes
0answers
9 views

Weblogic: ignoring error messages

In a project I'm working on we're having problems with Weblogic server logs being filled with BEA-090513 error messages: <BEA-090513> <ServerIdentity failed validation, downgrading to ...
-7
votes
1answer
72 views

We want capture all login user activity and keystroke [closed]

We use CentOS 6/7 we have use script which user are stop that process. So we don't get to see any log from such users. We want capture following: Timestamp when the user logs in to the OS Timestamp ...
0
votes
0answers
25 views

nginx set does not update log

Simple task, I'd like to dynamically set variable to log. First, quick check, set variable temp to a fixed string # nginx.conf http { log_format test_format 'body:$request_body, temp:$temp'; } ...
1
vote
1answer
49 views

How do I pipe stdout and std error to a file and back to stdout on Windows?

On Windows when running a batch script I want to record the output of I run: myprogram.bat 1> mylog.log 2>&1 Which is great - but I have to run a separate tail process to read the output ...
0
votes
0answers
29 views

Kerberos authentication failure with strange account name [closed]

Recently, I observed a lot of authentication failures(about 600 failures per day) coming from one of my company servers with account name "@@CyBAAAAUBQYAMHArBwUAMGAoBQZAQGA1B...."(about 150 characters ...
1
vote
0answers
23 views

BIND9 logging only specified view

For diagnosing purposes I need to log BIND9 queries. BIND9 is configured with two zones/views (internal/external). I've configured logging but there is a lot of unnecessary queries being logged - ...
0
votes
2answers
40 views

mod_authz_core.c Logging

So I'm pretty new to the whole server admin world and just got a fresh install of a server up and running. While looking at my apache2 logs, I've seen a lot of mod_authz_core.c lines. Another guy I ...
5
votes
2answers
73 views

Phone rings, but no call, and no log entries in Asterisk

We have one phone (123) that rings from time to time, displaying what seems like an internal number (6001), but it's not, because we don't use that number and nothing in that range. When you pick up ...
0
votes
0answers
23 views

Yum-cron output to both email and log

When configuring yum-cron on a CentOS (07 x64) host, i noticed the following option (/etc/yum/yum-cron.conf) - # How to send messages. Valid options are stdio and email. If # emit_via includes ...
0
votes
2answers
40 views

How to kill/close log files that are open through lsof grep deleted?

I have a deleted a large log file from our servers. so I executed this command to validate. lsof -nP | grep '(deleted)' and this showed up. how can I permanently delete the results fo this lsof? ...
0
votes
0answers
15 views

rsyslog 8.17 char changing

My rsyslog configuration do not want to work properly Here is my example log: Mar 10 10:57:35 servername log_tag ...
0
votes
1answer
15 views

Weird journalctl Lines

I'm managing my tiny vps and was working on a script to send the logging log to my email. I'm using journalctl to list the logging tentative with: journalctl -u sshd >> ./connection.log ...
1
vote
1answer
43 views

nginx - How often was accessed to specific file or path? [closed]

I'm looking for a command/line to get the information how often was a specific file/path accessed from the web-server. (source: default access-log from nignx) It should check all logs (current and ...
1
vote
1answer
21 views

Log backup clashes with log rotation

On my servers I have log rotation and a backup script which, besides all, backs up the entire log directory. For log rotation I use logroatate on Linux and newsyslog is used on BSD. For log backup I ...
0
votes
0answers
12 views

What would stop apache2 for writing in error log

I usually test my under development website on my own machine, running apache2, and for debug, I type tail -f /var/log/apache2/error.log, and it always did good, until a few days ago. Most of the ...
2
votes
1answer
34 views

Do any OpenSSH 6.7 `preauth` error log entries warrant specific human attention?

A Linux (specifically Debian Jessie) server that needs to be exposed to the Internet is spitting out various OpenSSH 6.7 preauth errors in the logs. For example, I'm getting (timestamps elided for ...
0
votes
0answers
19 views

Optimizing log file size on Ubuntu VM

This is a fact-finding question. I'm implementing fail2ban to keep some unscrupulous elements out of my Django website's experience. Note that my webserver is nginx (reverse proxy) with gunicorn as ...