Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
2answers
190 views

Apache logs full URL rather than URI

My Apache web server logged following messages to access.log: 46.22.173.131 - - [23/Dec/2014:15:34:54 +0100] "GET http://pl.wikipedia.org/wiki/Special:Search?search=&go=Go HTTP/1.1" 302 482 "-" ...
-2
votes
0answers
22 views

log error in centos7 [closed]

I'm just a beginner in linux base opreation system. I delete a log folder(log folder and all the sub folder within log folder) under var folder because it take 19GB of my hosting. And here we got the ...
0
votes
1answer
23 views

Syslog-ng loghost - filter not-match

I've got a problem with receiving remote logs from syslog-ng OSE to syslog-ng OSE. I am configuring loghost and at now - i how no idea what i am doing wrong. It seems like filters are not working for ...
2
votes
1answer
16 views

How to make Ossec aware of logrotate

I installed Ossec in a monitor/agent configuration on a few servers of mine. Everything works greats. The only thing that annoy me is that I keep receiving alerts after logrotate rotates the log I ...
0
votes
2answers
34 views

Automatic archiving of log files [closed]

I look at my various log files, and I believe the operating system will periodically archive the log by appending a datestamp to it. I've created some custom logs in my httpd.conf file, however, ...
0
votes
1answer
27 views

Centralised log monitoring for linux servers [closed]

I've read several QA on this site about monitoring servers, but I found out, that none of them centralises all the logs I want to watch. To describe my situation: 10 linux hosts Using logwatch to ...
0
votes
0answers
20 views

Logging user and power activity Synology DiskStation (v5)

Is there any practical way of logging user activity and power state changes on a Synology NAS? I'm not looking for anything very extensively detailed, but I would like to log e.g. Video Station usage ...
16
votes
4answers
522 views

Need a technique to coerce sysadmins to log the reason for accessing a prod server

My company requires that any time a user logs into a production server the reason that person logged in and the changes the user intends to make must be logged. My team wants to do this, but its easy ...
1
vote
1answer
27 views

User blocked in AD by some windroid device

We have a user that is constantly blocked. We checked the logs in the domain controllers and all the information shown is that a WINDROID device is the source. How can I know which device is causing ...
1
vote
2answers
14 views

Use iptables to log connections except for two addresses

We would like to use iptables to log all network connections except if the connecting address is A.B.C.D or the connecting address is E.F.G.H. These two addresses cannot be combined into a single CIDR ...
1
vote
0answers
6 views

Log to file in Asterisk: append with newline

(I am testing on Asterisk 11.7.0~dfsg-1ubuntu1) I am using the following format to append to a logfile, according to the documentation: same => n,Set(FILE(/tmp/mylog.txt,,,a)=my-log-message) ...
0
votes
0answers
27 views

Solaris SSH Server Log Destinaton IP Address

To stay compliant, it's required that my Solaris 10 SSH server log the destination IP address in addition to the existing port logging. Is it possible to add the destination IP address in the authlog? ...
0
votes
1answer
33 views

Sudo-io log output shows garbled text

We have set up in our servers sudoers config the following configuration in order to log the console output for auditoring purposes Defaults:%administrators log_output Defaults logfile=/var/log/sudo ...
0
votes
1answer
56 views

MySQL/MariaDB stops running. How do I find out why?

Today I've seen MySQL/MariaDB stop running on a CentOS VPS. When I check the status I get: # service mysql status ERROR! MySQL is not running, but lock file (/var/lock/subsys/mysql) exists So I ...
0
votes
0answers
14 views

WinServer 2003 R2: Socket Error#10060

So I inherited a legacy in-house application, that is supposed to have printing functionality. However, whenever a user prints, it conks out with the following error, "Message: Socket Error #10060, ...
0
votes
1answer
14 views

Output server and other logs to the browser

I am facing a challenge with my current project.We have it on an ec2 instance and we have a dev and a production server.Now the challenge is,whenever a team member encounters an error on the server I ...
-1
votes
2answers
25 views

How disabled log apache for image file missing?

How can we specify extensions file to filter it in log error of apache? My error.log fills with : [Thu Nov 27 22:42:42 2014] [error] [client 42.42.42.42] File does not exist: ...
0
votes
1answer
56 views

Haproxy not logging requests?

So, I configured Haproxy so the logging would go through rsyslog and, for now, be all dumped in one file. It's definetly logging, as I get those "starting" messages on startup, but no HTTP requests ...
1
vote
0answers
23 views

Rsyslog won't monitor mysql-slow.log when written to by mysql

I'm going mad. I'm trying to get rsyslog to send log files to logentries.com. This works perfectly until I try to log mysql-slow.log. The config is pretty simple module(load="imfile" ...
0
votes
0answers
25 views

IIS not logging On Demand App pool recycling

I am unable to get IIS to log on demand app pool recycling. I've followed the directions in this TechNet article: http://technet.microsoft.com/en-us/library/cc753412%28v=ws.10%29.aspx I see entries ...
12
votes
1answer
130 views

How do I make sec ignore a timestamp properly

I have a rule that is set up like so; In /etc/sec/rules.d I have; type=SingleWithSuppress ptype=regexp pattern=(\S+) sshd\[\d+\]: PAM \d+ more authentication failures\; logname=.* uid=.* euid=.* ...
0
votes
0answers
85 views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
0
votes
0answers
19 views

sshd log file entries from the past mixed in with currently occurring entries

I have sshd log entries from the past seemingly randomly mixed in (in time) with the presently occurring log entries. No remote hosts log to this server, rsyslog serves only this box. External ...
0
votes
1answer
18 views

Logging SFTP activity with auditd

I am currently using auditd to log TTY activity for users that are SSH'd into my system. However, SFTP sessions are not logged in this way. Is there a way to log them using auditd or will I need to ...
2
votes
1answer
33 views

How can I log the negotiated SSL Cipher in Windows 2008 R2

I have a web server running IIS 7.0, on Windows Server 2008 R2. The web application is written in C# .Net 4.0. The web application receives web requests, and sometimes makes outbound https requests to ...
1
vote
1answer
22 views

What kind of service is runit's svlogd expecting?

The runit manual states that in the configuration one can use an option to submit logs to: ua.b.c.d[:port] tells svlogd to transmit the first len characters of selected log messages to the ...
0
votes
1answer
85 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
0
votes
1answer
68 views

Haproxy logging not work

Cant understand, how it logging? Now my log is empty and haproxy doesnt write anything to file. Sometimes it logs some info, Logging works with syslog-ng, if i set in haproxy conf timeout client about ...
0
votes
1answer
64 views

How to share nginx log's without sudo to another user?

I have 2 users on my server. One with sudo access another without. How can i give access to nginx logs /var/log/nginx/error.log To another user without sudo permission to use cat ...
0
votes
1answer
47 views

How can I suppress Postfix anvil statistics from system logs?

After every email sent through my mail server, postfix/anvil appends something like the following: Nov 9 15:09:11 keutenberg postfix/anvil[30006]: statistics: max connection rate 1/60s for ...
0
votes
1answer
32 views

Diagnosing where all the queries are coming from

We have an issue where a site on a shared hosting account is going over the allowed query limit per user; that is set at 100k queries/hr. The site shouldn't be generating that amount of queries TBH ...
1
vote
2answers
111 views

How to pass PHP mail.log output to a script

I'm logging all php mail output using the mail.log setting in php.ini. Rather than log to a file I want to have the log data sent to a script for parsing in real-time to raise alerts. I have tried: ...
-2
votes
1answer
27 views

get server stats from a specfic time

On my server this morning I noticed that an application reported it was running slow. I checked the web and sql logs and found nothing special. I would like to know what was going on at about 2am ...
0
votes
0answers
81 views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
1answer
25 views

Log Outgoing Apache Port on AJP Connection

I have Tomcat 7 set up to work with mod_jk and AJP. I'm wondering if, on the Tomcat side, I can log the mod_jk (Apache side) outgoing port with the Tomcat request handler thread name in order to track ...
0
votes
1answer
24 views

Logging only written on old [filename].1 log files

My log is not written on the correct log file for example syslog, mail.log, mysql.log, auth.log but for some reason the latest event are written on these old log files syslog.1, auth.log.1, mail.log.1 ...
0
votes
1answer
87 views

Cisco IOS: Logging only debug messages on command-line

I want to have a quiet command-line such as (config)# no logging console causes. Still, I want to make use of # debug commands. It appears to me that # debug depends on syslog level 7. So I cannot ...
3
votes
1answer
40 views

Logging commands on cisco devices

I'm searching for a way to log every command executed on a cisco switch/router, I have a catalyst 2960s with lanbase image, and a catalyst 4500e with ipbase image. I've found a way to log commands ...
0
votes
0answers
73 views

MySQL exits without any output

Having a strange issue. Some time ago MySQL exited suddenly when I was creating a table (I think), and I shelved the issue until now. It seems to start, but nothing happens and it exits: 141031 ...
0
votes
2answers
95 views

nginx : stop error log from search engine bots

I have a centos 7 server with nginx 1.6.2 and I would like to stop error log when a bot from a search engine make a 404 error in my website. This, in order to have a clean error log, with only "true ...
1
vote
1answer
205 views

nginx logging to access.log.1 instead of access.log, logrotate failing?

I have an nginx instance that is set to log access to /var/log/nginx/access.log and errors to /var/log/nginx/errors.log, but as soon as logrotate runs each week, the file gets moves to *.log.1 and the ...
-1
votes
1answer
114 views

How to determine what traffic is being dropped / blocked base on iptables log

I have followed the example for iptable logging from https://help.ubuntu.com/community/IptablesHowTo#More_detailed_Logging sudo iptables -I INPUT 5 -m limit --limit 5/min -j LOG --log-prefix ...
1
vote
2answers
404 views

Clearing/Deleting Docker Logs

On our docker implementation on GCE, we are running out of space on the root file system. Since images themselves are stored on a separate 1TB volume, the images themselves shouldnt be the problem. ...
0
votes
1answer
75 views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
1
vote
1answer
489 views

Snort not sending alert log file to syslog server?

I am set up with three virtual machines running Ubuntu - a Server, Client, and Gateway. I am tasked with setting up Snort on the Gateway to monitor "attacks" from the Client to the Server. Snort is ...
1
vote
2answers
98 views

Syslog does not record logs received over TCP to a file

I am trying to setup a centralized rsyslog server on CentOS 6.5 for Cisco routers and switches. On the Cisco devices, I've set the correct date/time and enabled timestamps, logging to the server over ...
0
votes
1answer
186 views

apache error log AH00135: Invalid method in request "GET /cgi-bin/php HTTP/1.0

Today I have noticed a lonely error (for the last week) inside of my error log file: [datetime] [core:error] [pid 11220] [client 187.33.2.88:34964] AH00135: Invalid method in request "GET ...
1
vote
1answer
57 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
0
votes
1answer
30 views

Fine-grained control over mod_security logging

I installed mod_security2 on several dozen servers (each with several dozen VHosts) and don't have the time to configure it for every VHost. In the default configuration, it produces copious amounts ...
0
votes
1answer
106 views

Nginx log entries to multiple files

I'd like to log the same access.log entries to separate files, so when a request comes in it should populate a.log and b.log. Is there any way to do this with nginx?