Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

-1
votes
0answers
13 views

Open source framework for log visualization and messaging [on hold]

I'm searching for an open source framework which allows to visualize (server) logs on a web page in a dashboard style. So I would like to group the logs into different categories and display the ...
-1
votes
0answers
20 views

How to log DNS queries from my home network? [migrated]

I want to log all DNS lookups from computers on my home wireless network. What's the best way to do this? Options I know of: Using OpenDNS and let it log queries for me. However, in order to then ...
0
votes
1answer
39 views

How to determine what traffic is being dropped / blocked base on iptables log

I have followed the example for iptable logging from https://help.ubuntu.com/community/IptablesHowTo#More_detailed_Logging sudo iptables -I INPUT 5 -m limit --limit 5/min -j LOG --log-prefix ...
0
votes
2answers
34 views

Clearing/Deleting Docker Logs

On our docker implementation on GCE, we are running out of space on the root file system. Since images themselves are stored on a separate 1TB volume, the images themselves shouldnt be the problem. ...
-1
votes
0answers
13 views

Apache rotatelog including port number in the log file name

I have configured Apache rotatelog to create a new log file every minute. Is there any way to obtain the port number as one of the parameter in the log file name - like log_TIME_PORTNUMBER.log ...
-1
votes
0answers
6 views

Cant't figure out Awstats LogFormat for custom httpd Log

I can't figure out the right settings for my Awstats LogFormat. This is the Httpd config: LogFormat "%h %l %u %t \"%r\" %>s %b" common
0
votes
1answer
29 views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
1
vote
0answers
94 views
+50

Snort not sending alert log file to syslog server?

I am set up with three virtual machines running Ubuntu - a Server, Client, and Gateway. I am tasked with setting up Snort on the Gateway to monitor "attacks" from the Client to the Server. Snort is ...
1
vote
2answers
36 views

Syslog does not record logs received over TCP to a file

I am trying to setup a centralized rsyslog server on CentOS 6.5 for Cisco routers and switches. On the Cisco devices, I've set the correct date/time and enabled timestamps, logging to the server over ...
-1
votes
0answers
12 views

using mod_dumpost/mod_dumpio under cpanel/whm [closed]

hello i have a server with whm installed i want to activete this module: mod_dumpost or mod_dumpio i did installed them using apxs and the installed without any errors ... but not post request's ...
0
votes
1answer
49 views

apache error log AH00135: Invalid method in request "GET /cgi-bin/php HTTP/1.0

Today I have noticed a lonely error (for the last week) inside of my error log file: [datetime] [core:error] [pid 11220] [client 187.33.2.88:34964] AH00135: Invalid method in request "GET ...
1
vote
1answer
14 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
0
votes
1answer
18 views

Fine-grained control over mod_security logging

I installed mod_security2 on several dozen servers (each with several dozen VHosts) and don't have the time to configure it for every VHost. In the default configuration, it produces copious amounts ...
0
votes
1answer
27 views

Nginx log entries to multiple files

I'd like to log the same access.log entries to separate files, so when a request comes in it should populate a.log and b.log. Is there any way to do this with nginx?
0
votes
1answer
25 views

Daily postgresql cron error log file

I am getting these emails daily: /etc/cron.daily/logrotate: error: error accessing /var/log/postgresql: No such file or directory error: postgresql-common:1 glob failed for /var/log/postgresql/.log ...
0
votes
0answers
16 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
1
vote
1answer
22 views

Sent mail/login log for roundcube webmail

Does roundcube webmail have a log for logins, or for sent mail? I searched everywhere but could only located the "error log" directory in roundcube, not one for logins or for sent mail. I'm trying to ...
1
vote
2answers
85 views

How to log ssh client connection/command?

I would like to know how i could log SSH command lines a user is using on a server. For exemple, if the user Alex on my server is doing the following set of commands : $ cd /tmp $ touch myfile $ ssh ...
1
vote
1answer
13 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
0answers
42 views

Using OSSEC to monitor windows services

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
0
votes
1answer
41 views

My local MySQL server was temporary down for unknown reasons

My local MySQL server 5.5.38 (on CentOS 6.5) has been temporary down and the mysql log file was filled with this kind of details: This could be because you hit a bug. It is also possible that this ...
0
votes
2answers
47 views

URL logging on DNS server?

Following this setup http://www.g-loaded.eu/2010/09/18/caching-nameserver-using-dnsmasq/ I was able to configure a DNS resolver server using dnsmasq for my network. The setup works correctly and logs ...
0
votes
0answers
51 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
2answers
39 views

Block certain GET request in Apache log

Since recently I have a VPS. Now it seems that there is a domain not owned by me that has DNS records pointing to my IP. Because of this my Apache (2.4) logs are flooded with some kind of GIT request. ...
2
votes
2answers
76 views

Method to log amount of transmitted data per each IP address in linux

I am looking for a method in linux to log the amount of data transmitted (received and sent separately) for every single IP address to which the data was sent to or received from. These statistics ...
0
votes
1answer
71 views

How To Tell Apache To Not Log Certain Requests In Its Access Log

I am trying to set a SetEnvIf variable in apache2 and exclude it in CustomLog in order to stop my logs from filling up. I want to match a regex and also specific IPs. I tried to follow the ...
1
vote
1answer
27 views

How do you configure runit logging

I am having trouble with setting service with proper logging using running. Here is a brief overview of files and scripts I created according to runit's documentation and other resources I found in ...
0
votes
2answers
63 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
0
votes
0answers
47 views

No Logged in php5-fpm.log File

I'm using ubuntu 14.04 and by default, php5-fpm.log is enabled under /etc/php5/fpm/php-fpm.conf. But I don't see any logged specially warnings like the following: WARNING: [pool web8] child 76743, ...
1
vote
1answer
34 views

Tomcat: Log the equivalent of SSL_CLIENT_S_DN

In Apache HTTPD it is possible to create custom request logs which include the value of SSL_CLIENT_S_DN. Since the site requires mutual authentication (client certificates) this provides a good audit ...
0
votes
0answers
43 views

IIS 7 Advanced Logging Filters

I'm trying to separate normal from mobile traffic using Filtering in IIS Advanced Logging, but it is not working. I have one definition with: ('User Agent' Equals '.*android.*') and the "Enable as ...
3
votes
1answer
91 views

Need help grepping postfix log

I'm trying to search for an unknown string (Message ID) in a log based on a known string (recipient address), and then grep the unknown string to output the entire relevant log information. I'm able ...
0
votes
0answers
103 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
0
votes
1answer
110 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
22 views

Does enabling more IIS logging fields consume resources?

It seems that IIS7 doesn't enable the bytes sent and bytes received fields in its logs by default. I would like to enable them so I could watch bandwidth consumption of individual sites, but my ...
-2
votes
2answers
48 views

FTP and SFTP logs track in CentOS

How it is possible to track the changes made to a directory using tools like FileZilla or XFTP ? because we found some files suddenly got missed from server, in history also nothing was found so ...
1
vote
1answer
48 views

logrotate: neither rotate nor compress empty files

i have just set up an (r)syslog server to receive the logs of various clients, which works fine. only logrotate is still not behaving as intending. i want logrotate to create a new logfile for each ...
0
votes
1answer
29 views

What is a name of a technique of deduplicating and summarising of logs?

So for example, you have a stream of logs coming in somewhere (a syslog server, forwarded Windows event logs, "Typical Poor Sysadmin's Mailbox", a Splunk indexer, whatever...) Imagine this stream of ...
0
votes
0answers
23 views

How do i set regex variable as env variable and use it to conditionally log?

This is what I have in my apache conf. I am setting the first part of the request uri as env varibale. It is always going to be client1 or client2. Now based on that I need to log differently (pass ...
1
vote
1answer
222 views

Monit cannot connect to Solr/Jetty instance

I have my Solr/Jetty up and running well on Ubuntu 12.04. I am trying to hookup my monit conf to monitor it, but it is having trouble connecting to the service. I have Solr running on port 8983 and ...
1
vote
1answer
445 views

How can I let nginx log the used SSL/TLS protocol and ciphersuite?

My goal is to ensure proper security for clients connecting to my nginx. I'm following Mozilla's guide to configure TLS properly on my nginx installation, but I don't have an overview of the actual ...
2
votes
0answers
35 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
0
votes
2answers
92 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
0
votes
0answers
60 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
0
votes
0answers
20 views

One rsyslog machine accepting encrypted and non encrypted logs on different ports

I'm trying to setup an rsyslog server to accept input from 2 different ports, one encrypted for our non internal servers, and one open for our internal servers. The reason for needing this is that ...
1
vote
0answers
97 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
1answer
38 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
283 views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
-1
votes
2answers
54 views

Get domains accessed through a specific port [closed]

I'm developing a product and at a certain point I need to get domain names used to access some service on a specific port. Let's suppose I've a computers network with Internet access through a Linux ...
2
votes
1answer
47 views

IPTables custom log failing

I'm currently trying to split out some of my IPTables logging from kern.log into a file called iptables.log. Basically, I have several different adapters and I'm logging requests to port 80 on each ...