2
votes
2answers
178 views

How to split logs according to patterns?

I would like to be able to split log files according to a pattern found in them. For example process all logs and look for /(\w+)\s to match /myresource but exclude /myresource/anythingelse, to ...
1
vote
1answer
42 views

Apache logging not working

After upgrading from 2.2.7 to Apache 2.4.9 seems that logging doesn't work properly. Only things which are logged are modsecurity and fcgid events, but nothing from Apache like file not found errors. ...
1
vote
1answer
19 views

apache2: log requests from LAN to separate logfile

I would like to separate apache 2.2 log entries in 2 log files: requests from LAN (192.168.0.0/16) should go in a lan-access.log, and the rest in the default access.log How can I achieve that? I've ...
0
votes
2answers
82 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
0
votes
1answer
29 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
0
votes
3answers
95 views

store log files in the cloud, when servers are not in the cloud

We're looking at a long-term migration towards the cloud. The plan is to start small, and gradually move less essential parts of the infrastructure into the cloud. All good so far. Part of this ...
-1
votes
1answer
63 views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
0
votes
1answer
27 views

How to log mail client with Dovecot / Postfix

Does anyone know if it's possible to have Dovecot or Postfix output the mail client of a user? In Dovecot's variables list, I cannot find anything in that direction.
0
votes
0answers
56 views

Logparser - Getting average response time from microseconds

I have one month's worth of web server log files in the following format: #Fields: date time cs-uri-stem cs-uri-query c-ip cs(Referer) sc-status sc-bytes time-taken 2014-03-12 17:34:02 ...
0
votes
4answers
524 views

remote server log viewer/analyzer

I have an rsyslog server running Ubuntu 12.04 which stores logs from different clients also running Ubuntu 12.04. Now I want to view those logs from my machine which also runs Ubuntu 12.04. One way ...
0
votes
1answer
138 views

A good tool for parsing Nginx logs for Django app [closed]

Can anyone recommend a good tool to parse and analyze Nginx access logs which will group the urls based on the regex in my django urls.py files (or a config file generated from them)? It does not ...
1
vote
1answer
59 views

Apache logs just “plesklog”

I just discovered that my Apache 2.2.8 just logs in his access_log the string plesklog since a few weeks. Normally it looks like that www.xxx.yyy.zzz - - [19/Jul/2013:04:37:32 +0600] "GET ...
0
votes
2answers
362 views

Log Analysis Tools for Apache & Tomcat [closed]

I'm looking for a log analysis tool to monitor & analyse the logs from an Apache & Tomcat webfarm. It would need to have agents that run on the servers, and ship logs back to a central ...
2
votes
1answer
648 views

How to install auditd on CentOS?

How to install auditd on CentOS 6.4 x64 ? I want to Log all commands run by admins Log all commands run by admins on production servers Edit: I can't run aduditd service I did with this tut enter ...
1
vote
1answer
134 views

How to make comments in logcheck files?

how can I add comments to logcheck ignore-rules? Things I tried so far: # seems to match single # characters instead of starting a comment empty lines matches against everything $ matches against ...
2
votes
3answers
205 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
0
votes
1answer
234 views

How does nginx handle log file growth by default?

I'm a bit worried because its been a couple of days and my access log file is up to 250MB+. Does it roll log files over and delete them? I'd like for there only to be 1GB or less of log files total.
2
votes
2answers
95 views

Postfix log file grows too fast

I've configure postfix for just sending emails. (I need it just for PHP mail() function). However, after one day running, And just a couple of sent emails, the log file is about 20 MB. Checking the ...
0
votes
2answers
377 views

Cleaning log files on Solaris for a service manifest

I have a service manifest on Solaris (Smart OS actually) and I would like to periodically clean its log files either automatically or manually without shutting down the server. My log is here: ...
4
votes
1answer
654 views

Wildcard support for InputFileName in rsyslog?

We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName? Example: InputFileName: ...
0
votes
1answer
87 views

How to split access and error logs in Parallels Plesk?

I have a site in PHP on Apache. Is there a way I can define settings in Parallels Plesk Panel for logging for e.g. it should create log file for each day? Currently my access_log file size is more ...
-1
votes
1answer
47 views

HTTP request logs needed for anaylsis [closed]

I'm looking for detailed server logs of HTTP requests, so that I can find the most common HTTP request header values for fields such as User-Agent, Accept, Accept-Charset, etc.. I found a resource ...
3
votes
2answers
861 views

Tool to collect and read all linux logs in one place [duplicate]

I have two linux servers. I'm an administrator, and part of my daily routine is to check all the logs for errors or strange messages. So, every morning I check: On server #1: /var/log/syslog ...
0
votes
2answers
1k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
0
votes
3answers
358 views

Is this a denial of service attack?

I have my kern.log flooded by these lines: Jan 4 03:00:57 myhost kernel: [9040601.809740] iptables denied: IN=eth0 OUT= MAC=10:00:25:09:e7:40:00:21:5e:3f:c4:04:08:00 SRC=178.33.217.13 ...
1
vote
3answers
373 views

What is the simplest way to monitor log files for (a) string/regex matches AND (b) lack of output?

On a single Linux server, there are often lots of independent (perhaps interlinked) services outputting numerous logs to files at known paths. Sometimes bad stuff happens and is written about, to the ...
0
votes
1answer
3k views

CRON opens and closes sessions continuously

I'm seeing a huge amount of these lines in my auth logs: Dec 31 03:45:01 xxxxxxx CRON[17259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 31 03:45:01 xxxxxxx CRON[17259]: ...
2
votes
1answer
227 views

Restrict file access to append only

I have a directory with log files and I'm putting logs from script launched by users into them. Logging with syslog isn't possible in this case. I want the users to have only write permissions on ...
6
votes
4answers
122 views

How to measure rate of new lines in file (log file)

I'm trying to get a measure of log file line writes over time, ideally a current rate and 1-, 5-, and 15-minute averages. I could do something like this: watch wc -l /var/log/<my_file> .. ...
1
vote
1answer
122 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
3
votes
1answer
189 views

How can i handle huge log files?

I am running SSD servers because I have great experiences with performance. However I have webservers which serve lots of requests and the uncompresssed logfiles of one day tend to grow out the ...
1
vote
1answer
163 views

Tool to correlate logs by timestamp

I have various log files, some with the same format (webserver + webserver SSL), some with different formats and even different timestamps. How can I correlate these log files together in a simple ...
7
votes
1answer
1k views

How can I rotate many log files into a different subdirectory per rotation?

I have a directory with many log files, all of which I would like to rotate daily. For organizational purposes I would like to be able to move the rotated logs into a different directory (or ...
0
votes
2answers
58 views

Ubuntu split Apache2 log files

I rencently updated the config of my server to relocate the /var/www and /var/log in the /home folder, i also updated all my virtuals hosts to write the logs in the new /home/log folder. But now the ...
0
votes
1answer
57 views

Apache2 decides to ignore the ErrorLog location. How to fix?

My apache2.conf file contains the lines ErrorLog /var/www/logs/error_log and CustomLog /var/www/logs/access_log common. I only get server shutdown/restart notifications there, however. All other logs ...
3
votes
1answer
655 views

Compress logs rotated with cronolog

I have a bunch of servers(Centos 5.x) with Apache that have their logs rotated with cronolog. What is the best strategy for compressing and deleting those logs automatically after a certain time? ...
1
vote
2answers
446 views

Apache's access.log files taking up too much space

So I switched all my sites over to Amazon's EC2 service a few months ago and I noticed today that my drive capacity is at >90%. Did a little digging and it seems that the majority of that is being ...
0
votes
1answer
134 views

Prevent Apache2 from logging robots and image requests

I run a high-traffic site and I need to reign in my Apache2 access logs a bit. One way to do this, I've read, is to limit the types of things Apache2 logs. The obvious choice would be, to limit 3 ...
2
votes
1answer
225 views

Which log file holds the errors that appear on the server's physical console on CentOS?

On a CentOS 6 Server, sometimes messages (errors, warnings) appear on top of the login prompt on the monitor physically attached to the server. I can't seem to find a log file (/var/log/?) that these ...
0
votes
0answers
176 views

Apache - Bogus marker and Bogus Huffman table definition entries in error_log

How can one identify the full path (or the URL) of images producing Bogus Huffman table definition Bogus marker length entries in the /var/log/httpd/error_log? Can Apache be configured to be more ...
3
votes
3answers
2k views

How to Enable IPtables TRACE Target on Debian Squeeze (6)

I am trying to use the TRACE target of IPtables but I can't seem to get any trace information logged. I want to use what is described here: Debugger for Iptables. From the iptables man for TRACE: ...
4
votes
1answer
442 views

Insert MIME type of an URL into Apache's access_log

I would like to enhance my logfile with an additional field containing the mime type. E.G. 127.0.0.1 - - [01/Mar/2012:20:49:36 +0100] "GET / HTTP/1.1" 200 255 [...] "text/html" 127.0.0.1 - - ...
1
vote
1answer
375 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
0
votes
1answer
336 views

Modify swatch conf files to match multiple lines below a match

We use swatch for reading PHP logs and email them to us. Currently it emails one single line of the error, but fails to match the next few lines of stack trace. For example: for log file like this: ...
-1
votes
2answers
472 views

How to delete all debian squeeze logs?

What is the easiest way to clear all the /var/log/ logs so that it just looks like a fresh system? I know that the fresh system also have logs, but I don't acctualy need the old ones....
2
votes
4answers
789 views

Apache log processing on remote central log server

We have 50 RHEL Apache web-servers. We want all the Apache logs to be processed on a dedicated server meant for this purpose as we don't the dependencies of log processing application installed on our ...
0
votes
3answers
520 views

Where to see logs of a program that crashes on Ubuntu Server?

I have been running a service (a python script using twistd library) as a non-root user that stays in the background. I've been noticing that it crashes at random times and I want to understand why. ...
1
vote
2answers
218 views

serving logs via HTTP

Here is what i am trying to achieve: I have a few Linux servers that have my web App deployed on. Currently my development team access the web app, run their test cases and then SSH into my Linux ...
3
votes
1answer
3k views

Most functional log analysis tools? [closed]

I am curious as to what others find to be the most useful log analysis tools for *nix. Presently I am simply tailing output and grepping through things, however I'd like to use something that would ...
3
votes
1answer
773 views

Newsyslog wildcards - rotate all logs in a directory

I am running FreeBSD 8.1. I am trying to make newsyslog rotate logs defined by a dynamic path: # logfilename [owner:group] mode count size when flags [/pid_file] [sig_num] ...