Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.
-3
votes
0answers
25 views
How to log VPN traffic? [closed]
I have the following services running:
root 780 1 0 May18 ? 00:00:00 /usr/lib/ipsec/starter
root 782 780 0 May18 ? 00:00:00 /usr/lib/ipsec/pluto --nofork --uniqueids ...
1
vote
4answers
45 views
Rsyslog not logging from remote server
I am trying to set up a centralized log server. I have central server (A) receiving logs via a remote server (B) on port 514. I know it is receiving these. Here are a few entries from a tcpdump on ...
1
vote
2answers
29 views
Is there a way to log all files that are created on a W2K8 server?
I've got a W2K8 server with some IIS apps that are creating a lot of files. I would like to monitor what files are created and how big they are. Is there a tool I could use to log all files that are ...
1
vote
2answers
44 views
Is there a Midnight Commander log or history file?
Sometimes I have to track down user activity on remote machines. Linux audit and messages log are of course a great help; .bash_history is also very helpful, but it's not very verbose as a lot of ...
-1
votes
0answers
22 views
Extract data information from proxy squid log [closed]
I need to extract data information from proxy squid logs.
I've check out some online scripts to extract data from squid, but first I would like to check with some of your experience if this ...
0
votes
2answers
30 views
Cleaning log files on Solaris for a service manifest
I have a service manifest on Solaris (Smart OS actually) and I would like to periodically clean its log files either automatically or manually without shutting down the server.
My log is here:
...
0
votes
1answer
25 views
Troubleshooting NFS authentication problems
I am trying to mount a krb5p NFS export. For this I have followed these instructions.
Line in /etc/exports:
/home/users ...
1
vote
1answer
24 views
Add logging to HTTP server on runtime
Sometimes we have an HTTP server running where you can see that it starts to act out. Without restarting it I want to start to log all HTTP requests.
Are there any tools that allows you to add some ...
1
vote
1answer
30 views
client 157.56.229.87 attempt to invoke directory as script: /usr/lib/cgi-bin/
Ok, so i frequently check my logs and see an array of errors logs from people "scoping the joint" but today i noticed a new one:
[client 157.56.229.87] attempt to invoke directory as script: ...
-6
votes
2answers
57 views
What do the numbers after status code in HTTPD logs signify?
"POST /cgi-bin/test.cgi HTTP/1.1" 200 368 "-" "-" What is the 368? I have also seen 370 and 333 in this log. What do they mean?
1
vote
0answers
36 views
Timzone incorrect for log files only?
I have a small server running centos 6.4 and it is working quite nicely for some time. One thing that still bugs me is that the time in my log files is different then the time the 'date' command ...
1
vote
1answer
21 views
View when IP Address Was Blocked in IIS
We had an issue recently where our server started throwing 500 errors because an IP address was blocked that had already been blocked elsewhere. It -appears- that the IP was blocked on individual ...
0
votes
2answers
46 views
Log PHP-script that take long time to render
I would like to find out, which pages on my server are really slow.
Is it possible to log all pages that took longer than 2 seconds to render in a file?
/var/log/php/php-slow.log
Or could the ...
0
votes
1answer
24 views
Add causing php-script to mysql-slow.log
If you enable the line
log_slow_queries = /var/log/mysql/mysql-slow.log
in
/etc/my.cnf or /etc/mysql/my.cnf
then that will log all queries, that take longer than the setting in long_query_time.
...
0
votes
1answer
43 views
Parse Apache logfile and ban IPs
My server is under attack, it is flooded with request with the following pattern:
Thousands of IPs
Each IP request the same page "GET / HTTP/1.1" with the same referrer 3-5 times per second (same ...
2
votes
1answer
42 views
Multitier server logging
I have a multitier application, consisting of many servers on different subnets (each one of these subnets dedicated for the application purpose they provide with no other servers independent of the ...
0
votes
1answer
13 views
Tomcat logs web interface
I have several production machines running Java servlets on Tomcat infrastructure.
When I want to look at the logs, I have to remote access the machine with ssh, and manually grep the logs for ...
0
votes
0answers
16 views
Global access log and vhost access logs?
I am running Apache2 with Froxlor, so every customer gets their own access and error log in /var/customers/logs.
Now, is it possible to keep this functionality while also having a global access and ...
0
votes
2answers
30 views
centos cron logs are not executed
I have been trying to setup a cronjob on centos but doesn't seems to work. I have been deleting the crons logfile to see all newly created logs and I have been restarting crond but /var/log/conf ...
0
votes
1answer
35 views
Cisco asa 5500 series - Logging VPN connections to easily search connection history
We have a fresh requirement to log information to do with vpn connections.
The ultimate goal would be facilitating IT management being able to easily review when someone had been connecting / ...
0
votes
1answer
30 views
Rsyslog: Difference between logging to a UNIX domain socket or an INET socket (UDP)
I am observing the following behaviour when logging to syslog from an external application: if I send a well-formed syslog message to a UDP socket, rsyslog correctly parses it, however if the very ...
0
votes
2answers
39 views
High Processor Usage
I have a Linode VPS and am getting alerts regarding high CPU usage every few days - a reboot solves the problem - but would rather find the issue.
I'm running Ubuntu 12.10 and other than PHP, MySQL ...
0
votes
1answer
38 views
Review of a crontab script to add timestamps to minutely runs; any suggestions?
I've got a crontab job set to run minutely as such:
* * * * * /home/username/public_html/domain.tld/production/scripts/cron_runner.sh
My goal is to add some timestamps to output from cron so I can ...
1
vote
1answer
47 views
How backup files with logrotate and Amazon S3?
I would like to create a new standard of two things:
how long would be generated and be rotated the logs generated by my applications ?
how to transfer the logs to Amazon S3, as a backup server ?.
...
0
votes
0answers
12 views
Loading JavaScript with query param triggers mod_security
When accessing http://domain.com/js/scriptaculous.js?load=effects it results in a mod_security warning:
Message: Warning. Match of "eq 1" against "&ARGS:CSRF_TOKEN" required.
[file ...
0
votes
1answer
29 views
Apache vhost-specific logging
I have the following apache setting (in conf.d/owasp-modsecurity.conf):
SecAuditLog "/var/www/vhosts/${lowercase:%{SERVER_NAME}}/statistics/logs/modsec_audit.log"
When I do httpd -t I get the ...
0
votes
2answers
33 views
How planing about backup log files in Linux?
In my company, we have lots of applications running in lots of different servers.
These applications generates lots of logs, which sometimes the developers forgot to compress this logs, this way ...
0
votes
0answers
21 views
Live access logging for many nginx websites
I'm running a couple of dozen sites on a server for a client. This number moves around pretty fluidly as they test ideas and we have a flexible configuration to host things.
The problem comes in that ...
0
votes
1answer
35 views
IIS 7.5 Log Request Processing Time
I am running on a performance issue with ASP.Net 2.0 Application.
A page takes atmost 20+ secs to load in a browser.
I would like to know where the problem is occurring, i.e in browser(rendering) or ...
1
vote
1answer
24 views
SQL Server doesn't archive logs
I was just looking over one of oure less monitored databases and noticed that it hasn't archived any logs for over a month. This is what it looks like now. The current log has over 700 000 events and ...
0
votes
0answers
27 views
IIS Advanced Logging Creating Mulitple Files
Following on the heels of the following question, IIS Advanced Logging Forward to Syslog, I am having a problem with IIS Advanced Logging creating multiple log files per rollover period.
Some of the ...
0
votes
0answers
16 views
Exclude a php file from php5-fpm slow logging?
I use nginx/php5-fpm on my VPS.
I also enabled slow script logging in php5 configuration. I analyze slow logs in periods. However, I have that script which "inteded to be slow". And I want to ...
0
votes
0answers
39 views
windows log logon activity: is it safe to rely on windows audit?
I found a guide that teaches, through turning on the Audit of the System Log on Activity via gpedit.msc, how to read the logon activity via eventvwr.msc
Is this way of monitoring fully comprehensive?
...
2
votes
1answer
39 views
Wildcard support for InputFileName in rsyslog?
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: ...
1
vote
1answer
31 views
Don't log favicon.ico erors
I run an apache2 server with some vhosts (50-100). A lot of these do not have favicon.ico files, cluttering the error logs with messages like
[Thu Mar 21 14:07:40 2013] [error] [client 84.xx.xx.xx] ...
1
vote
0answers
27 views
Neo4j Web Server Hangs: Logging Issue?
I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs.
lsof -i | grep 7474
states ...
0
votes
1answer
33 views
Linux: How to list all messages sent from sendmail
I am getting occasional claims that people are not receiving some automated emails from the Apache server, which uses sendmail as the MTA. How do I see a list of activity? /var/log/maillog is empty.
...
0
votes
1answer
23 views
strace vs. log4cxx performance hit?
I need to debug some issue on a production server, and I'm trying to decide whether to use strace or the log4cxx logging library; one crucial characteristic I need to know before, is which of the two ...
0
votes
0answers
17 views
Generic logging + mail alerts solution when monitoring services [duplicate]
We are running several daemons and services on Linux. We would like to be able to get an e-mail/SMS alert when a service goes down without being alerted too often while it's down.
Simple case: we ...
1
vote
1answer
52 views
Logging varnishlog output to a file with awk in daemon mode
I would like to daemonize the answer in this topic http://serverfault.com/a/480871/94127. Since varnishlog has daemon mode, I tried to use -D option as below. But the timestamps are not appearing.
...
1
vote
2answers
44 views
Logging all ssh tunnel data
Having an SSH server through which multiple users tunnel all the traffic, how can I log (write) all the traffic (mostly interested in unencrypted HTTP one)?
UPD: not all traffic should be logged, ...
0
votes
1answer
29 views
How to split access and error logs in Parallels Plesk?
I have a site in PHP on Apache. Is there a way I can define settings in Parallels Plesk Panel for logging for e.g. it should create log file for each day?
Currently my access_log file size is more ...
0
votes
0answers
46 views
funneling apache logs to syslog server
We are in an AWS environment and want to have all our web servers log to one logserver (also in the same AWS VPC). We want to stream all the Access Log data to the logserver I setup. The logserver ...
0
votes
1answer
7 views
Matching time to system event
I have a file server running Ubuntu 12. I have recently installed noflushd to spin-down unused hard drives in an effort to extend their life. I am noticing that every morning at the same time ...
3
votes
1answer
38 views
Why Postfix on Linux require a “-” character before the pathname?
I´ve found the following here:
IMPORTANT: on Linux you need to put a "-" character before the pathname, e.g., -/var/log/maillog, otherwise the syslogd process will use more system resources than ...
0
votes
0answers
12 views
Rsyslog related query
I have configured my system to put syslog to a remote machine. The logging is heavy and I am running out of memory. so I want to filter it based on priority for example log only error message. I see ...
0
votes
0answers
5 views
Webalizer 2.23 - Merge data
Actually, we migrate a domain from server_very_old_and_hacked to shiny_and_new_server.
Our client, now want old webalizer stats from old server merge with new server.
I can't find documentation ...
0
votes
2answers
45 views
Logging OpenVPN/PPTP connections
I currently have a default setup of OpenVPN and PPTP. I was wondering how I can enable the most verbose logging of the services so in case of abuse we can track down who's IP did what?
0
votes
0answers
24 views
Merging multiple log files by date including multilines
I have several logs containing lines all starting with a timestamp, so that the following works as expected to merge them:
cat myLog1.txt myLog2.txt | sort -n > combined.txt
Problem is, that ...
0
votes
2answers
36 views
Log user access on windows domain
I want to log the user access to domain's computer. For example I would like to store datetime, username and computer for each login into a domain's computer. Is it possibile?
I'm using windows server ...
