Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
1answer
17 views

Central Logging Options - need flat file as well as elastic search

I would like to have ephemeral ec2 instances push logs to a central flat-file store for archiving and manual perusing, as well has have that data pushed to elastic search. Is there a single agent ...
2
votes
1answer
9 views

Does AppEnforce.log really log the context used for installation incorrectly?

I have a deployment type with the following attributes: Technology: MSI Installation behavior: Install for system Logon requirement: Whether or not a user is logged on Installation program ...
0
votes
2answers
26 views

logrotate not workig as expected

I am setting up logrotate & realized that a few of the options are either incorrectly explained/understood. My logrotate rotate 52 keyword is creating 52 files of the same log every time it ...
0
votes
0answers
10 views

Log specific info from request in Apache

I need to login whether X-PDONE-SESSION-ID come on each request being made to my server or doesn't. First I have enabled mod_forensic_log and I setup this at my virtual host logging: <VirtualHost ...
0
votes
0answers
12 views

Solaris run rsync after logadm

I'm trying to get this logadm configuration running. '/dir1/*/*/alert*.log' -C 8 -c -s 10m -t '$file_%Y-%m-%d' -z 0 -a '/usr/bin/rsync -qp /dir1/*/*/alert*.gz ...
0
votes
1answer
25 views

What is this error in apache error.log

What is this error in apache error.log and how to fix that problem?: [Sat Jul 25 09:23:11.961977 2015] [proxy_fcgi:error] [pid 4448:tid 140445816444672] [client 127.0.0.1:57067] AH01068: Got bogus ...
0
votes
1answer
8 views

Which log file can I use for server port analytics?

Ideally I'd like to use piwik to track conversions from ads to server connections on port 5000 and port 5001 but I highly doubt that is even possible. I'm willing to settle for [ipaddress,time ...
1
vote
0answers
6 views

fluentd modular configuration

Is there any way to setup fluentd/td-agent in a way that it's configuration will be modular? I know there is @include directive but this works only if every time I add something new I modify main ...
1
vote
1answer
21 views

Audit Logs for Environment Path Changes

Something (or someone) keeps changing our environment path variables on several of our servers. I have the Audit Policy (under local sec pol) set to Success, Failure for all but Process Tracking ...
0
votes
1answer
37 views

How can I log a linux command's process tree?

I'm trying to track the usage of a certain command so I want to log its parents (to see what is actually using it) Solaris has "ptree" which would be pretty easy to parse and log: # ptree 4198 4198 ...
1
vote
0answers
29 views

Event Log trigger configuration for scheduled tasks not working despite working with the eventviewer

I'm trying to start a task that gets triggered by specific events. The XML configuration for the filter I'm using is the following: <QueryList> <Query Id="0" Path="Security"> ...
0
votes
0answers
6 views

centralized logging when clients have an intermittent connection

I'm working on a project where we'd like to monitor remote embedded clients running Ubuntu Trusty. We are planning to start by just centralizing critical and error log messages on one cloud server. ...
-1
votes
0answers
16 views

Ubuntu logger with delayed flush [closed]

Is there any good logging tool in Ubuntu that meets requirements: Console-based Collects data in memory to be flushed to user-defined logs on disk with delay, for example, 5 sec. I.e. not to "kill" ...
0
votes
1answer
25 views

Logs during rpm installation

I'm able to obtain logs in /var/log/message while installing a package using yum, but I'm not able to find logs when a package is installed using rpm. Is there any option to log rpm ...
0
votes
0answers
29 views

how to set up logging-files ubuntu 14.04

Im having some trouble to correctly configure my mail logs. How can i configure the following needs? I have a mail server and the log result should be 7 different files mail.sunday, mail.monday, ...
0
votes
1answer
28 views

Send user level messages to syslog

I currently have syslog.conf like so to send INFO logs to /var/log/messages *.info;mail.none;authpriv.none; /var/log/messages; I have an application that uses python libraries LOG_USER facility to ...
0
votes
1answer
30 views

How to find out what is being accesed in Apache logs

I am managing a dedicated server with hundreds of websites, in which there is a main log for Apache. The server has spikes in Apache CPU usage once every 4 or 5 hours and after a review I found in ...
0
votes
1answer
31 views

Event viewer missing logs following unexpected reboot

One of our Server 2012 boxes lost power unexpectedly recently. We're still not sure how it happened, but given its suddenness I suspect someone in the data centre tripped over a power cable. I went ...
0
votes
1answer
34 views

Logging when cisco switch restarts, shuts down, or starts up

Is it possible to log events like restart,shutdown and start in cisco catalyst 3750. Also need to log when a new user is created. I'm forwarding the logs from the cisco switch to the syslog server and ...
0
votes
0answers
19 views

Fetch logstash-forwarded auth logs from elasticsearch database

In my logstash-forwarder, i have configured to ship /var/log/auth.log messages under the files section as, { "paths": [ "/var/log/syslog", "/var/log/auth.log" ], ...
0
votes
0answers
7 views

How to log any connection request from statically banned IPs with shorewall?

So I'm banning IPs with shorewall drop IP. How do I get shorewall to log connexion requests from those IPs ?
1
vote
1answer
30 views

Constant server pings

I've got a Python/Django app hosted on Heroku, monitored on New Relic, with logging tracked on Logentries. I've noticed a large amount of logs that are of the form: at=info method=HEAD ...
0
votes
0answers
13 views

prevent rsyslog to duplicate logs

my rsyslog writes on secure and on messages i have this *.info;mail.none;authpriv.none;cron.none /var/log/messages authpriv.* ...
0
votes
0answers
42 views

Acount Logon events not getting on domain controller

We have windows domain running with 2012R2 DC, We have enabled logging through GPO for all member servers and DCs, but I dont see any Account logon/logoff events (4624/4634) being logged, neither on ...
0
votes
3answers
42 views

How to make a cron script for cleaning up a log file? [closed]

I don't usually do this kind of stuff, so I just have to ask. How do I make a script which checks a log file, lets say it's named log.txt, grabs everything but the first 100 000 lines from it to a new ...
2
votes
1answer
99 views

Forwarding structured data with rsyslog

We have a Java application logging structured data (MDC with log4j) via syslog to rsyslog (7.6.3) on localhost. localhost should then forward these log messages to a central logging host (also running ...
0
votes
0answers
28 views

rsyslog syntax error on non existent line

I get a syntax error message for my rsyslog configuration file at line 61. But my configuration only got 60 lines. I checked the last line in my configuration and it seems correct since it is the ...
-3
votes
1answer
34 views

How do you restart logging after deleting an NGINX log? [closed]

I deleted my NGINX log because it was very large, thinking that NGINX would automatically create a new one in its place. It didn't, and now I don't have logs. The file was previously located at ...
0
votes
1answer
35 views

nginx log entries out of sequence, possible to fix?

I have an nginx log parser which relies on fact, nginx log entries placed in sequential order. But from time to time I have log like this: [2015-07-01T08:41:59-07:00] https "GET ... ...
0
votes
2answers
43 views

rsyslog (local) and remote logging

I have several linux servers that I want to monitor the log files. I thought it would be great to setup a central log server that can capture incoming rsyslog packets. Each hostname would have its own ...
0
votes
0answers
20 views

logger not logging to remote rsyslogd instance

I am running CentOS 7.0.1406 with rsyslogd 7.4.7 and logger from util-linux 2.23.2. I have two machines connected via a switch. When I try to use logger to log from one machine to the other, nothing ...
0
votes
0answers
20 views

Using goaccess to figure out cause of increased traffic

I have an Ubuntu server hosted by Linode. A few days ago I got a notification that my Disk IO rate was higher than normal. I am trying to determine what they root cause of this is and whether I need ...
0
votes
2answers
27 views

What would be a portable nignx HTTP access log format to use with nginx?

I am looking for a way to store that logs in a common format so they can easily be recognized and parsed by most tools. I am interested about a format that is automatically recognized by goaccess ...
0
votes
0answers
15 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
0
votes
0answers
27 views

Logrotate: Error creating outfile, file already exists

I run logrotate in a daily cron, today I got an e-mail about a file already existing error: error creating output file path/to/search.log.2014-10-03.1412289722.gz: File exists But I'm not sure why ...
0
votes
0answers
19 views

How to set IIS Logging to best fit this scenario

I need to monitor a IIS 7 App Pool (WCF is running on it) and I would like to read messages like: Request A Received. Pool is down. Starting Pool. Request B Received. Pool going up. Request C ...
1
vote
1answer
38 views

Can the ETW Provider: Microsoft-Windows-IIS-Logging be installed on a Windows workstation?

I'm attempting to use Microsoft Message Analyzer version 1.3 to perform a live trace on an IIS 8.5 server. I'm an admin on my Windows 7 workstation and the target server. Each remote provider I want ...
0
votes
0answers
22 views

How to set the correct file permissions for custom logging with Apache 2? [duplicate]

I am trying to set custom logging for a particular web application (Apache 2.4.7 on Ubuntu Server 14.04). In the .conf file I added the following: CustomLog "|/usr/sbin/rotatelogs ...
1
vote
1answer
49 views

Import IIS Advanced Logs into SQL

I'm using IIS 8.5 Advanced Logging and also logging some custom HTTP headers. How can I import the raw logs into SQL on a regular basis (i.e. every minute)? I want to avoid the overhead of ODBC ...
2
votes
1answer
17 views

sles/opensuse os installation log

Is it possible to keep installation log off all events, tasks, say running commands, etc.. while installing SLES/openSUSE (or maybe another linux)? It's not a problem lookup info in already running ...
0
votes
1answer
417 views

huge traffic from POST 123.249.24.233/POST_ip_port.php

222.186.129.5 - - [19/Jun/2015:16:56:28 +0000] "POST http://123.249.24.233/POST_ip_port.php HTTP/1.1" 301 184 "http://123.249.24.233/POST_ip_port.phpAccept: */*" "Mozi$ 222.186.30.111 - - ...
0
votes
1answer
36 views

Redirecting syslog facility to other facility

I have a syslog server, which separates logging informations according to hostnames. It can separate messages if it's in the 'local1' facility. I have a mail server, which sends messages to the ...
0
votes
0answers
20 views

fail2ban stops logging after some time (3-4 days)

I've noticed that whenever I want to see fail2ban logs after 3 or 4 days of being working, it compresses the logs to .gz which Im fine with that: -rw-r--r--. 1 root root 90034 May 1 12:49 ...
0
votes
1answer
32 views

Syslog-ng reverse dns lookup for data fields

I would like to try a reverse-dns before storing the firewall logs. I know this is possibile in logstash but i don't know if syslog-ng can be configured to do the same. Actually my logs coming from ...
0
votes
0answers
15 views

How to log only certain result/status codes with Squid?

By default Squid logs all access information including 'successes' and 'failures'. I'm interested in logging only 'failures'. In other words, I want to do something like log only Squid DENIED result ...
0
votes
0answers
18 views

Log network traffic from a specific process

I would like to track all the network traffic coming from and to specific processes. I don't need very detailed information, more like the total data volume, protocols, ports and addresses. Something ...
-1
votes
2answers
24 views

How do I get a simple non-reload logging toggle switch for Apache?

On a development server, I'd like to turn logging on only when needed for specific debugging operations. One way I can think of is Apache checks for the existence of certain dotfile somewhere and ...
0
votes
0answers
118 views

View PHP error logs on VM - Vagrant CentOS via Puphpet

I have a Vagrant VM running CentOS, which was built from a puphpet file (config.yaml), and I'm trying to get the PHP error logs setup and accessible. config.yaml - PHP section: php: install: '1' ...
0
votes
0answers
22 views

Windows 2012R2 — Always-on comprehensive startup/shutdown logging

Is there an option/utility that will allow me to always create more verbose startup/shutdown logs in Windows 2012R2? The event logs don't seem to be detailed enough to debug problems like ...
1
vote
0answers
185 views

PostgreSQL - Invalid byte sequence for encoding “UTF8”: 0xe7 0x75 0x20

Here is the problem : Everything worked fine with my postgresql system until I decided to click on the "rotate logs" button in the server status tab (from pgAdmin). After that, I faced this issue, ...