Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
1answer
19 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
0
votes
0answers
10 views

Server Error Logs - Folders and Files not found

I am receiving constant errors in the error_log which look like the following: [Tue Jul 22 10:28:18 2014] [error] [client 2001:8d8:906:7900::c:4cb5] File does not exist: ...
-2
votes
4answers
51 views

What would be a good tool for change correlation in the systems amongst group of sysadmins? [on hold]

There is always problem in a group of sysadmins to sync their actions and log them into a central place. Machine based logging is easy, you can point syslog messages to a central logging server and ...
0
votes
0answers
35 views

SQL Server 2014 Standard 2014 no access and bad preformance

My company looks after a server which is running SQL Server 2014 Standard Edition. The main application database on the server is replicated out to about 20 subscribers. The server has only been in ...
1
vote
0answers
34 views
+100

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
0
votes
1answer
21 views

PHP error logging with AWS and EC2 [closed]

I'm setting up my site to run on AWS EC2. In some presentation for AWS services I saw that there are ways to store your PHP error logs in AWS S3 and analyze it with specific tools. Can't find this ...
2
votes
1answer
17 views

auditctl - logging when a user logs out

Is it possible to log when a user logs out of a session on Linux using Auditctl? My current audit.rules relating to users are: -w /etc/login.defs -p xwa -k login -w /etc/securetty -p xwa -k login -w ...
1
vote
1answer
38 views

Using Logstash as shipper?

We are shipping logs from servers and using THE logstash on each server for shipping. So we read logs from the glob "/root/Desktop/Logstash-Input/**/*_log". input { file{ ...
2
votes
1answer
50 views

How to make “\n” a new line in terminal?

I'm trying to view the HHVM log in a friendly way - currently it just comes out as a giant block of text. I've noticed there are various instances of "\n" in there. How can I get my terminal (gnome ...
2
votes
2answers
180 views

How to split logs according to patterns?

I would like to be able to split log files according to a pattern found in them. For example process all logs and look for /(\w+)\s to match /myresource but exclude /myresource/anythingelse, to ...
1
vote
1answer
45 views

Apache logging not working

After upgrading from 2.2.7 to Apache 2.4.9 seems that logging doesn't work properly. Only things which are logged are modsecurity and fcgid events, but nothing from Apache like file not found errors. ...
3
votes
1answer
30 views

Is there a way to determine the log format if given a “.log” file?

Is there a way to determine the kind of log (so that it can be parse correctly) if I have no prior information about the type (for eg. syslog, apache log, IIS log) of log it is? I am trying to write a ...
2
votes
3answers
77 views

Common login script

Few weeks ago I thought it would be a good idea to write a script which should send me an email whenever some user would log in into my server. So I came to a perfectly working script ...
-2
votes
1answer
61 views

Bash script to install packages and report to log file [closed]

I want to be able to log result of running bash script to file. Script itself is pretty simple, its used to install basic packages on fresh install machines and it scheme looks like this sudo apt-get ...
0
votes
2answers
40 views

View realtime list of connections to Postfix

I am running Postfix on a linux box with a couple hundred local users with mailboxes. Is there a way to monitor all incoming connections (SMTP) to the Postfix service? I.e. a live stream of "IP ...
0
votes
1answer
32 views

Rotate whole /var/log

I want to rotate the whole /var/log folder on my server every day so I have the /var/log folder and compressed files like "log.1.gz" which contains the whole directory. I can't found anything on the ...
-1
votes
0answers
18 views

Is there a way to recover lost logs in Nginx? [duplicate]

I have a fedora based server with nginx installed on it. I was taking logs and using logrotate, rotating them on a daily basis. Here's the configuration /etc/logrotate.d/nginx: /var/log/nginx/*log { ...
-1
votes
0answers
27 views

How to correlate apache events among a web cluster?

We have a cluster of about 200 web servers. From time to time we'll have an event occur where a subset of those servers will trigger the monitoring software to restart the apache daemon. We can get ...
-3
votes
2answers
34 views

How to monitor and list modified files server wide for brief periods of time?

I would like to, from time to time, enable server-wide file monitoring that will show me all files being modified, updated and created while I have it running and thus simply spewing forth a list of ...
0
votes
1answer
30 views

Apache https error log

We have a website running on Apache. Users can access part of it by HTTP and the other part by HTTPS. Apache is logging HTTP errors but not HTTPS errors. However, both log access. How can I solve ...
1
vote
1answer
43 views

When cron is completed How to get email notification and log in a file (both)

I am a Newbie to linux. I'm trying to figure out things. Can someone kindly help me how to combine these two commands? (1) Normally cron can results can be directed to a log file by editing crontab ...
1
vote
1answer
19 views

apache2: log requests from LAN to separate logfile

I would like to separate apache 2.2 log entries in 2 log files: requests from LAN (192.168.0.0/16) should go in a lan-access.log, and the rest in the default access.log How can I achieve that? I've ...
1
vote
1answer
34 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
0
votes
1answer
28 views

Trying to log with runit only returns 'unable to open supervise/ok'

Installed runit in Debian 7.4 in a Vagrant. My run script is working, but the moment I create a service/pants/log/ directory I start getting the following error: unable to open supervise/ok. My ...
0
votes
1answer
55 views

Strange GET requests on Apache and a lot of 404 errors every day

It's been about a month since I have been receiving strange requests to my website. It's self hosted on a VPS and some of those requests are noted by Google Analytics too. I really tried to figure ...
1
vote
0answers
39 views

Where does cPanel, Apache, or Nginx log php script access?

Synopsis Earlier today a website went down due to some database issues. After some investigation I found out that some tables were missing data. In order for me to rule out "accidental deletion" by ...
0
votes
1answer
46 views

Correlating data within Kibana

I'm looking at aggregating data within the whole ELK stack (Elasticsearch/Logstash/Kibana) and I'm getting lots of good data from my windows systems. It's working very well, but when i get Windows ...
0
votes
0answers
27 views

ELSA configuration

I have an ELSA install I'm trying to get working on Scientific Linux 6.4, importing logs from a local OSSEC server (i.e. they're on the same server). I've followed the documentation such as it is, and ...
0
votes
1answer
21 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
-1
votes
1answer
24 views

Alerting on threshold crossing?

We are using logstash + elasticsearch + Kibana to parse, store and view our logs respectively. Now, we want a notification/alert when a threshold for a particular log or threshold for a particular ...
0
votes
0answers
7 views

How to get log of the addres that mod_rewrite is redirecting to?

I have defined a rewrite rule that is creating an 404. But I can't find any additional information about where the Apache is really looking for the file so it can't find it and also I don't see ...
0
votes
1answer
31 views

Integrating Zenoss (mail data Logs) with MySql database table?

I have installed Zenoss monitoring tool on my pc and I want to store every outgoing email from the zenoss to a database. Does any one know how I can achieve this. FYI I just use this server to send ...
0
votes
2answers
45 views

Apache logging - root user changes groups

I have an issue where I get the following error when trying to download apache logs: rsync: send_files failed to open "/var/log/apache2/log-filename": Permission denied (13) The command I'm running ...
0
votes
2answers
82 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
2
votes
1answer
39 views

How can I avoid logging file not founds commonly caused by vulnerability scanners?

My apache logs are pretty much full of 'admin.php' not found or unable to stat and similar statements for wp-login.php, default.php, and so on that are often sought after by vulnerability scanners. ...
0
votes
0answers
20 views

Adding extra header using middleware module in django

I was trying to log the user-name in the nginx logs. As I am not doing basic http authentication, adding $remote_user in log_format doesn't work. I will need my application to tell Nginx what the ...
4
votes
1answer
46 views

Storing username in nginx logs

Is there a way in which user-name or user-id can be stored in nginx logs. I tried inserting $remote_user in the log_format directive but it doesn't seem to work.
0
votes
1answer
27 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
21 views

OpeVPN log connecting client IPs

I looking for the best solution to log all connecting client's ip to either a text file or a database who logs into my VPN server. Under the IP I mean the public WAN IP on the internet where they are ...
5
votes
2answers
214 views

Weird Apache Access Logs

I see repeated requests like these in my Apache Access Logs and they have been eating up all my CPU. I have a normal WordPress installation. All i changed in the Apache Configuration was changing the ...
2
votes
1answer
462 views

/phpTest/zologize/axa.php? Another botnet?

Staring at the log made me think, what is /phpTest/zologize/axa.php and why are bots looking for it? Previously, I had lots of /HNAP1/ requests. Requesting /HNAP1/ from IPs from log revealed, that all ...
0
votes
0answers
19 views

Python uWSGI logs have no read permissions

I am running a Python Flask server on uWSGI over an EC2 Ubuntu 14.04 LTS. The server is configured as follows: [uwsgi] http-socket = :9000 plugin = python wsgi-file = /path/to_wsgi.py ...
0
votes
0answers
65 views

Setup CENTOS Centralized AUDIT and RSYSLOG server

Attempting to use these links: Sending audit logs to SYSLOG server or http://wiki.rsyslog.com/index.php/Centralizing_the_audit_log I have been unable to get centralized AUDIT logging to work on my ...
1
vote
2answers
159 views

How to go about rotating logs which are arbitrary named and placed in deeply nested directories?

I have a couple of hosts which are basically a playground for developers. On these hosts, each of them has a directory under /tmp where he is free to do all he wants - store files, write logs etc. Of ...
3
votes
2answers
130 views

Postfix - searching emails (logstash, greylog or other solution)

We are currently having ~100 servers and all of them are using remote syslog, so we have aggregated all logs on one server. The most questioned problem from our support team is: Has an email from ...
0
votes
1answer
32 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
1
vote
2answers
108 views

What does the SMTP status 250 BONHAM COOLED BY FIRE mean?

I noticed this in my email server logs recently: status=sent (250 OK BONHAM COOLED BY FIRE ...) I searched, and the only reference I could find anywhere else on the internet was in this ...
1
vote
1answer
168 views

Make a Docker application write to stdout

I'm deploying a 3rd-party application in compliance with the 12 factor advisory, and one of the points tell that application logs should be printed to stdout/stderr: then clustering software can ...
1
vote
1answer
77 views

How do I get cURL errors to go into the correct log file?

I have a website running using Apache 2.2.22, PHP 5.3.10, and cURL 7.2.00. The relevant portions of the apache config is below, and you will notice that errors are sent to www.example.com_error.log. ...
0
votes
1answer
40 views

How to best monitor/log problems on eth0?

I have manually configured an email server - very simple config and I have done no fancy networking. I simply opened up only the relevant ports via iptables. Once every 10-15 days however, eth0 ...