Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

8
votes
1answer
18k views

How to configure php-fpm to log logs to log files configured in nginx virtualhosts

I have Fedora 16 with nginx and php-fpm. Everything is working very good. All logs with php notice,warnig error etc. are in /var/log/php-fpm/www-error.log. Is there a way to configure php-fpm to write ...
8
votes
5answers
30k views

How can I enable logging for requests going through mod proxy

Is there a way to log requests going through mod proxy? I need a way to debug my configuration, because I don't seem to be getting where I should be. I need the following information: headers of ...
7
votes
8answers
16k views

Linux monitor logs and email alerts?

I have a server with a faulty power button that likes to reboot itself. Usually there are warning signs, like the acpid log file in /var/log starts spamming garbage for about 10hrs or so. Is there an ...
6
votes
5answers
8k views

Mongodb - proper way to rotate logs

Mongo docs say that I can: use -SIGUSR1 signal and get the old log renamed and current switched use logrotate from OS I want the OS's logrotate ability to zip old files and remove oldest, but see ...
6
votes
4answers
18k views

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by ...
5
votes
3answers
8k views

Security Log in Event Viewer does not store IPs

I'd like to write a service that pulls Event Viewer records, specifically from the Security log. Of particular interest to me are things like event id 4625 (audit fail) messages. Ideally I'd like ...
3
votes
1answer
6k views

How do you rotate apache logs on windows without interrupting service?

I administrate a Windows Server 2003 (Standard Edition, 32-bit) installation running Apache2 and ColdFusion. The server has over 100 virtual hosts, each with an access log and an error log. I've been ...
2
votes
3answers
911 views

Benefits of log rotation

I have been using logrotation for years and never thought too much of it being a problem until I came across a question on stackoverflow (http://stackoverflow.com/questions/1508734/disable-java-log-...
2
votes
6answers
7k views

Get list of user-agents from nginx log

I have nginx log file, and I want to find out market share for each major version of browsers. I am not interested in minor versions and operating systems. I would like to get something like this: ...
1
vote
1answer
390 views

Logging and Log-viewing tool for cloud?

I have an app which simply logs to a file. I am planning to deploy this app on cloud. If I deploy it on AmazonEC2 instances (multiple), I would want to monitor logs of every instance. Something which ...
0
votes
5answers
4k views

iptables logging not working?

OS: Ubuntu 10.04 Logging daemon: rsyslog For some reason i'm not getting any iptables logs, even thought i don't look through them very often i'd still like to get it working for the sake of it ...
14
votes
2answers
8k views

No more logging after upgrade to Debian Wheezy

Syslog, auth.log, kern.log and messages log files are not updated anymore after upgrading to Debian Wheezy (Debian Squeeze was previously running). How could I fix it?
8
votes
1answer
3k views

Empty/Null Apache request entries in access log

This entry got logged in a Apache access log: IP ADDRESS - - [00/00/0000:00:00:00 -0000] " " 301 - "-" "-" It was detected by LogWatch as a null HTTP Response and also got marked as a successful ...
7
votes
6answers
4k views

Monitor the shell activity of a user on your Unix system?

Trust, but verify. Let's say I want to hire someone a sysadmin, and give them root access to my Unix system. I want to disable X windows for them, only allow shell usage (through SSH, maybe), so that ...
6
votes
1answer
135 views

Determine when someone last logged in to a server from a key

I'm trying to track the last time a user logged into a Linux server with a certain key. So user secure has 5 keys in ~/.ssh/authorized_keys, how can I track when each key was used and what IP was used ...
5
votes
2answers
22k views

Log LDAP access of the Active directory

I am looking for a method to log ldap access of a Active Directory domain controller. I want to be able to log the username and source IP address access to both 389, and 636(encrypted). A simple ...
5
votes
4answers
939 views

Log monitoring toolsets for Unix? [closed]

What are some good tools for monitoring logs on a system? I am currently using logsentry, which basically just runs grep on logs, ignores regexps I tell it to ignore, and mails me everything else, but ...
5
votes
3answers
8k views

Separate Nginx access log file for certain requests only

As far as I can see Nginx supports by default 2 log files: error_log (tracks issues related to the Nginx server itself) and access_log (tracks requests processed by Nginx). Whilst it is possible to ...
3
votes
3answers
5k views

Log commands executed over ssh

I would like to log all commands executed over SSH. Say, ssh something@server.com COMMAND I want to log "COMMAND" on server.com I did search extensively but could not find anything. There is ...
3
votes
3answers
7k views

Why did my CentOS 5 production server reboot?

I have a CentOS 5.2 box running my production web server (Apache 2 + Mongrel_cluster) for a Ruby on Rails project. The machine is hosted by GoDaddy.com and is a "virtual private server". The system ...
3
votes
1answer
1k views

Need help grepping postfix log

I'm trying to search for an unknown string (Message ID) in a log based on a known string (recipient address), and then grep the unknown string to output the entire relevant log information. I'm able ...
2
votes
3answers
159 views

Cron job unified logging

I have a series of cron jobs on a server machine. I know I can redirect their stdout/stderr output to a file. If I redirect several cronjob outputs to the same file, will that work even if some of the ...
2
votes
1answer
12k views

How to configure logwatch to monitor a custom log file

Ubuntu Server 9.10 Hi Guys, Could someone point me to some instructions for how to get logwatch to monitor a custom log file? I have a dropbox solution that documents uploads/downloads to a log ...
2
votes
1answer
1k views

nginx don't log requests of a specific ip adress

I'm trying to don't log requests made from a specific ip address like this: location = / { index index.php; if ( $remote_addr = "spe.ci.fic.ip" ) { access_log off; } } But ...
1
vote
3answers
3k views

Disable access logging for domains. (Using CentOS & Apache)

I am trying to disable access logging for domains on my dedicated server for over 10 HOURS. I read over 70 pages while I'm searching. I asked on Parallel's forum, I asked stackoverflow in another way.....
1
vote
1answer
2k views

Logging DNS requests on a windows DNS resolver

How can i log DNS requests sent by clients to a windows DNS resolver without using the debug log file technique? It can be a windows 2008+ only solution edit 1 - some additional background: i ...
1
vote
1answer
284 views

Tomcat: Log the equivalent of SSL_CLIENT_S_DN

In Apache HTTPD it is possible to create custom request logs which include the value of SSL_CLIENT_S_DN. Since the site requires mutual authentication (client certificates) this provides a good audit ...
1
vote
1answer
3k views

Logging Timeout'd Request in Apache 2.X

I am migrating some applications from Apache 1.3 to 2.2. We used to run some tests where attacker opens some HTTP connection to our server, and do nothing. Apache 1.3 would log the following 408 code,...
0
votes
1answer
435 views

rsyslog from Heroku drain creates empty log files

I'm sending logs from my Heroku app to an rsyslog server, but the resulting log files seem to come up empty. The rsyslog configuration for receiving remote messages is as follows: $template ...
9
votes
1answer
6k views

Is there a way to view an HP ProLiant server IML log from within ESXi?

I'm investigating a system outage on an HP ProLiant DL360 G7 server running VMware ESXi 5.1. While I'm a huge advocate of installing the HP-specific management agents for ESXi or using the ...
8
votes
2answers
2k views

Why are external domains appearing in my apache logs?

I've got several log entries that refer to an external domain - mainly a Russian search engine (http://www.yandex.ru/) How are these appearing in my logs? 82.146.58.53 - - [10/Jun/2010:00:49:11 +...
5
votes
2answers
12k views

Why is Syslog Not Writing Logs To The Designated Files?

I've been trying to route Apache's logs through Syslog (for some reason log rotation had stopped, and using Syslog and logrotate seemed a reasonable solution). I have sent Apache's error logs to ...
5
votes
1answer
2k views

Newsyslog wildcards - rotate all logs in a directory

I am running FreeBSD 8.1. I am trying to make newsyslog rotate logs defined by a dynamic path: # logfilename [owner:group] mode count size when flags [/pid_file] [sig_num] /path/logs/*....
5
votes
1answer
879 views

When does IIS log a request?

This sounds silly, but when do they log requests? I have a web application, and about 500 HTTP proxies that will load up that application. But problem is sometimes (and this morning a lot), the proxy (...
3
votes
1answer
217 views

Windows Events for Remote Desktop logon failure

According to ref the logon types 10 and 3 in windows events are represnting Logon Type 10 = RemoteInteractive Logon & Logon Type 3 = Network Logon But when i tried to connect a Windows machine ...
3
votes
2answers
4k views

Timzone incorrect for log files only?

I have a small server running centos 6.4 and it is working quite nicely for some time. One thing that still bugs me is that the time in my log files is different then the time the 'date' command ...
3
votes
2answers
9k views

init script that logs output of the script

How can this be done? I know it's pretty simple and includes appending something like & or &> to the actual command that starts the init script. But, what is the best approach and how can ...
3
votes
3answers
504 views

apache log analyzer with IP information is needed

I am not sure if here is the right place for asking my question or not... anyway... I need a apache log analyzer that shows number of each IP request separately. I want to view what IPs have visited ...
2
votes
1answer
297 views

using syslog-ng and patterndb, how do I specify an “empty” pattern?

When I receive kernel traces in my logs, the last line is empty. I'd like to filter/ignore these empty kernel messages using syslog-ng and patterndb. Here is the pattern I have so far that is not ...
2
votes
3answers
2k views

nginx with real_ip — log both client remote_addr and proxies address

I have an nginx instance set up behind multiple load balancing proxies, and I am using real_ip to get the clients IP address in remote_addr for processing by my Python application. However in my logs ...
2
votes
1answer
3k views

Can't configure PHP error log

I'm running apache2 with php5 on Linux Mint 13 Maya. I have defined a virtual host and these two entries there: ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined ...
2
votes
3answers
1k views

Postfix custom log

Is there any way to customize postfix logging? I'm trying to get some reports out of it and I find it almost impossible to parse on it's default. Probably a XML like logging would be perfect. Thanks.
2
votes
2answers
1k views

Preventing logrotate's dateext from overwriting files

I'm working with a system where I would like to use the dateext function of logrotate (or some other way) to add the date to a logfile when it is rotated. However in this system it is important that ...
2
votes
1answer
2k views

How to allow more than two simultanous sessions on Azure

One of our servers is on Azure and we are remotely connecting to it. Unfortunately Azure allows only two users to be logged in at the same time. When the third user tries to log in, he is given the ...
2
votes
1answer
457 views

nginx not logging errors to log files

I recently moved my CentOS 7 machine from Apache to nginx, and I am still working out the differences. One issue I have noticed for only one of my server blocks is that access and error log files are ...
2
votes
1answer
585 views

Server installation logging / logbook / diary?

Are there some ways field-tested ways to keep a kind of logbook for a server? Including: software installations (and de-installations) custom configurations (e.g. of a webserver, ssh daemon, etc.) ...
2
votes
1answer
343 views

Per-user vhost logging

I have a working per-user virtual host configuration with Apache, but I would like each user to have access to the logs for his virtual hosts. Obviously the ErrorLog and CustomLog directives don't ...
1
vote
1answer
1k views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
1
vote
5answers
877 views

log rotation tool that keeps only a specified amount of logs and discards everything else

I'm looking for a cronolog-like tool that will keep only last n lines or last x minutes of logs piped to it and discard everything else Is there such a beast? UPDATE: I know about logrotate and it ...
1
vote
4answers
2k views

Apache access log to stdout

Is there any way to intercept Apache (1 or 2) access logs to stdout without : modifying the config files restarting the service Currently my apache config file specifies "CustomLog /dev/null ...