Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
1answer
2k views

Logging Timeout'd Request in Apache 2.X

I am migrating some applications from Apache 1.3 to 2.2. We used to run some tests where attacker opens some HTTP connection to our server, and do nothing. Apache 1.3 would log the following 408 ...
1
vote
1answer
9k views

How to configure logwatch to monitor a custom log file

Ubuntu Server 9.10 Hi Guys, Could someone point me to some instructions for how to get logwatch to monitor a custom log file? I have a dropbox solution that documents uploads/downloads to a log ...
0
votes
5answers
1k views

tool for analyzing apache logs

we are having issues with high connection and first byte times from our apache web server. I need a tool to go through and analyze the logs and tell me whether we were receiving high traffic at the ...
0
votes
1answer
359 views

rsyslog from Heroku drain creates empty log files

I'm sending logs from my Heroku app to an rsyslog server, but the resulting log files seem to come up empty. The rsyslog configuration for receiving remote messages is as follows: $template ...
0
votes
5answers
3k views

iptables logging not working?

OS: Ubuntu 10.04 Logging daemon: rsyslog For some reason i'm not getting any iptables logs, even thought i don't look through them very often i'd still like to get it working for the sake of it ...
8
votes
1answer
2k views

No more logging after upgrade to Debian Wheezy

Syslog, auth.log, kern.log and messages log files are not updated anymore after upgrading to Debian Wheezy (Debian Squeeze was previously running). How could I fix it?
8
votes
1answer
3k views

Is there a way to view an HP ProLiant server IML log from within ESXi?

I'm investigating a system outage on an HP ProLiant DL360 G7 server running VMware ESXi 5.1. While I'm a huge advocate of installing the HP-specific management agents for ESXi or using the ...
5
votes
1answer
393 views

When does IIS log a request?

This sounds silly, but when do they log requests? I have a web application, and about 500 HTTP proxies that will load up that application. But problem is sometimes (and this morning a lot), the proxy ...
4
votes
3answers
2k views

How do I secure my Asterisk server?

Our asterisk server was compromised. some calls were made to Asia countries last weekend. Thought we have improved our network configuration, we still want to determine how the intrusion was done, we ...
4
votes
1answer
1k views

Newsyslog wildcards - rotate all logs in a directory

I am running FreeBSD 8.1. I am trying to make newsyslog rotate logs defined by a dynamic path: # logfilename [owner:group] mode count size when flags [/pid_file] [sig_num] ...
4
votes
2answers
2k views

Why are external domains appearing in my apache logs?

I've got several log entries that refer to an external domain - mainly a Russian search engine (http://www.yandex.ru/) How are these appearing in my logs? 82.146.58.53 - - [10/Jun/2010:00:49:11 ...
3
votes
2answers
4k views

init script that logs output of the script

How can this be done? I know it's pretty simple and includes appending something like & or &> to the actual command that starts the init script. But, what is the best approach and how can ...
3
votes
1answer
9k views

Log LDAP access of the Active directory

I am looking for a method to log ldap access of a Active Directory domain controller. I want to be able to log the username and source IP address access to both 389, and 636(encrypted). A simple ...
3
votes
1answer
7k views

Why is Syslog Not Writing Logs To The Designated Files?

I've been trying to route Apache's logs through Syslog (for some reason log rotation had stopped, and using Syslog and logrotate seemed a reasonable solution). I have sent Apache's error logs to ...
2
votes
1answer
202 views

Per-user vhost logging

I have a working per-user virtual host configuration with Apache, but I would like each user to have access to the logs for his virtual hosts. Obviously the ErrorLog and CustomLog directives don't ...
2
votes
1answer
270 views

using syslog-ng and patterndb, how do I specify an “empty” pattern?

When I receive kernel traces in my logs, the last line is empty. I'd like to filter/ignore these empty kernel messages using syslog-ng and patterndb. Here is the pattern I have so far that is not ...
2
votes
2answers
967 views

Preventing logrotate's dateext from overwriting files

I'm working with a system where I would like to use the dateext function of logrotate (or some other way) to add the date to a logfile when it is rotated. However in this system it is important that ...
2
votes
1answer
455 views

Server installation logging / logbook / diary?

Are there some ways field-tested ways to keep a kind of logbook for a server? Including: software installations (and de-installations) custom configurations (e.g. of a webserver, ssh daemon, etc.) ...
2
votes
3answers
834 views

Postfix custom log

Is there any way to customize postfix logging? I'm trying to get some reports out of it and I find it almost impossible to parse on it's default. Probably a XML like logging would be perfect. Thanks. ...
2
votes
3answers
5k views

Why did my CentOS 5 production server reboot?

I have a CentOS 5.2 box running my production web server (Apache 2 + Mongrel_cluster) for a Ruby on Rails project. The machine is hosted by GoDaddy.com and is a "virtual private server". The system ...
1
vote
4answers
1k views

Rsyslog not logging from remote server

I am trying to set up a centralized log server. I have central server (A) receiving logs via a remote server (B) on port 514. I know it is receiving these. Here are a few entries from a tcpdump on ...
1
vote
1answer
872 views

Timzone incorrect for log files only?

I have a small server running centos 6.4 and it is working quite nicely for some time. One thing that still bugs me is that the time in my log files is different then the time the 'date' command ...
1
vote
4answers
638 views

Make cron log rsync only if there was transfer

I have this crontab running every 5 minutes: date >> ~/18/rsync.log rsync -vaz user@r18:~/assets ~/18 >> ~/18/rsync.log 2>&1 It adds this to the log file every 5 minutes: Thu ...
1
vote
1answer
660 views

Logging DNS requests on a windows DNS resolver

How can i log DNS requests sent by clients to a windows DNS resolver without using the debug log file technique? It can be a windows 2008+ only solution edit 1 - some additional background: i ...
1
vote
1answer
476 views

Mysql remote connections logging

I need to allow remote connections to my mysql server running on latest stable CentOS. I don't like this idea at all so I want at least to collect as much relevant information as possible. To be ...
1
vote
2answers
668 views

httpd access log, ip logged is reversed proxy how to find actual proxy

Check access log and found out that the IP that was logged from users came from the reversed proxy server. The setup is like this www.abc.com -> reversed proxy to my server 123.123.123.123 Is ...
1
vote
2answers
521 views

How do I ensure no duplicates when using LogParser to load IIS logs into SQL Server every fifteen minutes?

I would like to set up a scheduled task to run every fifteen minutes on a work web server that will run LogParser on today's IIS log file and insert it into a SQL Server database table. How would I ...
1
vote
5answers
805 views

log rotation tool that keeps only a specified amount of logs and discards everything else

I'm looking for a cronolog-like tool that will keep only last n lines or last x minutes of logs piped to it and discard everything else Is there such a beast? UPDATE: I know about logrotate and it ...
1
vote
3answers
3k views

Logging behind a reverse proxy?

I am currently running Varnish as a reverse proxy in front of our development website, testing before deployment into production. One of the things I've had to come to grips with is logging: in a ...
0
votes
2answers
122 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
0
votes
1answer
633 views

piping nginx and php-fpm logs to MySQL

I got a number of nginx + php-fpm application servers running under LB. I would like to centralize the logs into external mysql database. I was wondering if there is a way of achieving this ? I ...
0
votes
1answer
309 views

What is a good third-party SMTP software for custom logging?

I am currently using IIS 6 SMTP to send out some of our mail and I unfortunately amn't finding the logging performed by it to be verbose enough - nor am I able to customise it to the level I would ...
0
votes
1answer
458 views

delay on tomcat writing to logs in windows server 2008

I recently moved a tomcat app from tomcat 5 on windows server 2003 to tomcat 6 under windows server 2008. Now there is a delay writing to the log files. This is for both stdout and acceess logs. For ...
-1
votes
1answer
129 views

Application log storage/review tool

My boss is wanting me to wrap applications on a few servers with shell scripts (or inline code for those we develop ourselves) to log basic data (user, date/time, commandline) to a central server so ...
-1
votes
2answers
561 views

How to delete all debian squeeze logs?

What is the easiest way to clear all the /var/log/ logs so that it just looks like a fresh system? I know that the fresh system also have logs, but I don't acctualy need the old ones....