Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
1answer
61 views

When cron is completed How to get email notification and log in a file (both)

I am a Newbie to linux. I'm trying to figure out things. Can someone kindly help me how to combine these two commands? (1) Normally cron can results can be directed to a log file by editing crontab ...
1
vote
1answer
21 views

apache2: log requests from LAN to separate logfile

I would like to separate apache 2.2 log entries in 2 log files: requests from LAN (192.168.0.0/16) should go in a lan-access.log, and the rest in the default access.log How can I achieve that? I've ...
1
vote
1answer
49 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
0
votes
2answers
60 views

Trying to log with runit only returns 'unable to open supervise/ok'

Installed runit in Debian 7.4 in a Vagrant. My run script is working, but the moment I create a service/pants/log/ directory I start getting the following error: unable to open supervise/ok. My ...
0
votes
1answer
85 views

Strange GET requests on Apache and a lot of 404 errors every day

It's been about a month since I have been receiving strange requests to my website. It's self hosted on a VPS and some of those requests are noted by Google Analytics too. I really tried to figure ...
1
vote
0answers
51 views

Where does cPanel, Apache, or Nginx log php script access?

Synopsis Earlier today a website went down due to some database issues. After some investigation I found out that some tables were missing data. In order for me to rule out "accidental deletion" by ...
1
vote
1answer
102 views

Correlating data within Kibana

I'm looking at aggregating data within the whole ELK stack (Elasticsearch/Logstash/Kibana) and I'm getting lots of good data from my windows systems. It's working very well, but when i get Windows ...
0
votes
0answers
39 views

ELSA configuration

I have an ELSA install I'm trying to get working on Scientific Linux 6.4, importing logs from a local OSSEC server (i.e. they're on the same server). I've followed the documentation such as it is, and ...
0
votes
1answer
25 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
-1
votes
1answer
36 views

Alerting on threshold crossing?

We are using logstash + elasticsearch + Kibana to parse, store and view our logs respectively. Now, we want a notification/alert when a threshold for a particular log or threshold for a particular ...
0
votes
0answers
8 views

How to get log of the addres that mod_rewrite is redirecting to?

I have defined a rewrite rule that is creating an 404. But I can't find any additional information about where the Apache is really looking for the file so it can't find it and also I don't see ...
0
votes
1answer
40 views

Integrating Zenoss (mail data Logs) with MySql database table?

I have installed Zenoss monitoring tool on my pc and I want to store every outgoing email from the zenoss to a database. Does any one know how I can achieve this. FYI I just use this server to send ...
0
votes
2answers
46 views

Apache logging - root user changes groups

I have an issue where I get the following error when trying to download apache logs: rsync: send_files failed to open "/var/log/apache2/log-filename": Permission denied (13) The command I'm running ...
0
votes
2answers
88 views

how to manage the whole /var/log for centralization? [closed]

I have several servers (Linux, various distributions managed by different people) which logs I would like to centralize in splunk>. The logs are gathered in /var/logs but the sources either update ...
2
votes
1answer
40 views

How can I avoid logging file not founds commonly caused by vulnerability scanners?

My apache logs are pretty much full of 'admin.php' not found or unable to stat and similar statements for wp-login.php, default.php, and so on that are often sought after by vulnerability scanners. ...
0
votes
0answers
29 views

Adding extra header using middleware module in django

I was trying to log the user-name in the nginx logs. As I am not doing basic http authentication, adding $remote_user in log_format doesn't work. I will need my application to tell Nginx what the ...
4
votes
1answer
51 views

Storing username in nginx logs

Is there a way in which user-name or user-id can be stored in nginx logs. I tried inserting $remote_user in the log_format directive but it doesn't seem to work.
0
votes
1answer
32 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
1
vote
1answer
22 views

OpeVPN log connecting client IPs

I looking for the best solution to log all connecting client's ip to either a text file or a database who logs into my VPN server. Under the IP I mean the public WAN IP on the internet where they are ...
5
votes
2answers
240 views

Weird Apache Access Logs

I see repeated requests like these in my Apache Access Logs and they have been eating up all my CPU. I have a normal WordPress installation. All i changed in the Apache Configuration was changing the ...
2
votes
1answer
630 views

/phpTest/zologize/axa.php? Another botnet?

Staring at the log made me think, what is /phpTest/zologize/axa.php and why are bots looking for it? Previously, I had lots of /HNAP1/ requests. Requesting /HNAP1/ from IPs from log revealed, that all ...
0
votes
0answers
35 views

Python uWSGI logs have no read permissions

I am running a Python Flask server on uWSGI over an EC2 Ubuntu 14.04 LTS. The server is configured as follows: [uwsgi] http-socket = :9000 plugin = python wsgi-file = /path/to_wsgi.py ...
0
votes
0answers
110 views

Setup CENTOS Centralized AUDIT and RSYSLOG server

Attempting to use these links: Sending audit logs to SYSLOG server or http://wiki.rsyslog.com/index.php/Centralizing_the_audit_log I have been unable to get centralized AUDIT logging to work on my ...
1
vote
2answers
170 views

How to go about rotating logs which are arbitrary named and placed in deeply nested directories?

I have a couple of hosts which are basically a playground for developers. On these hosts, each of them has a directory under /tmp where he is free to do all he wants - store files, write logs etc. Of ...
3
votes
2answers
216 views

Postfix - searching emails (logstash, greylog or other solution)

We are currently having ~100 servers and all of them are using remote syslog, so we have aggregated all logs on one server. The most questioned problem from our support team is: Has an email from ...
0
votes
1answer
36 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
1
vote
2answers
124 views

What does the SMTP status 250 BONHAM COOLED BY FIRE mean?

I noticed this in my email server logs recently: status=sent (250 OK BONHAM COOLED BY FIRE ...) I searched, and the only reference I could find anywhere else on the internet was in this ...
1
vote
1answer
382 views

Make a Docker application write to stdout

I'm deploying a 3rd-party application in compliance with the 12 factor advisory, and one of the points tell that application logs should be printed to stdout/stderr: then clustering software can ...
1
vote
1answer
164 views

How do I get cURL errors to go into the correct log file?

I have a website running using Apache 2.2.22, PHP 5.3.10, and cURL 7.2.00. The relevant portions of the apache config is below, and you will notice that errors are sent to www.example.com_error.log. ...
0
votes
1answer
42 views

How to best monitor/log problems on eth0?

I have manually configured an email server - very simple config and I have done no fancy networking. I simply opened up only the relevant ports via iptables. Once every 10-15 days however, eth0 ...
2
votes
0answers
42 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
1
vote
1answer
26 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
0
votes
1answer
937 views

Ubuntu 14.04 System Logging

I've set up an Ubuntu 14.04 Server (from an Ubuntu 12.04 Server) but today I wanted to look in the auth.log but this file is not used. It seems that ´syslog´ was deleted. How does Ubuntu 14.04 log? I ...
1
vote
0answers
43 views

Why would someone repeatedly enter “-1” into a site search? [closed]

One of the websites I work on has been getting bombarded with site searches of "-1". The IP address appears to be coming from Eastern Europe and my first suspicion is that this is malicious. However ...
2
votes
1answer
39 views

IIS W3C Log (Abnormally?)

Three of our intranet IIS servers are behind F5 Load Balancer. I grabbed the W3c log from one of the servers for a typical day, and there turned out to be about 100k entries. What I feel uneasy is ...
0
votes
1answer
190 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
0answers
42 views

Some PHP application errors logged in Apache ssl_engine.log and not in error_log

We have a Linux server running Apache and some PHP application errors are logged as errors in /var/log/apache2/ssl_engine.log, but they don't appear in /var/log/apache2/error_log. They are not SSL ...
0
votes
4answers
273 views

Monitoring important log files on multiple linux hosts?

I have a few servers running on AWS and have Nagios/Icinga doing the monitoring of all critical services. We're trying to figure out the best way to monitor all logs - system, DB, PHP, Apache, etc - ...
0
votes
0answers
64 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
3
votes
1answer
188 views

Hiding linux kernel messages from console

I have a machine running a custom build of Linux kernel 3.2.12-rt based on Debian Squeeze. I'm getting kernel messages printed to the console. I don't want it to do that. I know why it's doing ...
0
votes
0answers
21 views

ErrorLog not outputing errors

I recently cleaned up my conf files and updated the server, now i'm not getting any error messages for things like missing pages. However, the access log still works. Here is my conf file. ...
0
votes
1answer
21 views

IIS Logs even unauthenticated users

I'm planning to get some information by processing IIS Log files (after I imported them into SQL Server database). Now, even if user gives wrong username/password, but request to a file that exists ...
0
votes
0answers
266 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
0
votes
1answer
20 views

Exim sends system user mails rathen than logging them in /var/mail

I setuped an Exim4 server to send mail for my website hosted on the same server. I configured my server to have a mydomain.com hostname. Sites and mails for site are working fine. The problem I have ...
1
vote
1answer
55 views

LAMP does not save any php logs

I have a brand new vps server with Ubuntu 14.04, i686, Apache 2.4.7, php 5.5.9 here's my virtual host: <VirtualHost *:80> ServerName example.com DocumentRoot "/home/drake/www/" ...
-1
votes
1answer
87 views

Application log storage/review tool

My boss is wanting me to wrap applications on a few servers with shell scripts (or inline code for those we develop ourselves) to log basic data (user, date/time, commandline) to a central server so ...
1
vote
1answer
199 views

Shorewall: logging to custom file

I am running an Ubuntu Server 14.04 system with a shorewall firewall. Shorewall is essentially a front end to iptables, and it is iptables that does the logging via Netfilter (my understanding so ...
0
votes
1answer
19 views

Log not readable after rotation by daemontools

I have a log, which looks perfectly fine. However, after the log rotation by daemontools, it is no longer human readable. What could be the problem?
0
votes
1answer
43 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
1answer
43 views

Postfix - E-mails missing, no message in the log

I'm setting up a postfix + dovecot mail server for myself on a VPS. I plan to host a couple of domains with it and be able to manage the users via MySQL. It currently works as I would like to but it ...