Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
1answer
59 views

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. ...
2
votes
1answer
49 views

How can I log a message to the systemd journal from the command line?

Reading Where does logger log its messages to in Arch Linux?, it seems that syslog() messages and the 'logger' command line app only talk to the systemd journal if a socket for message forwarding is ...
4
votes
1answer
246 views

Why my nginx server receives requests targeting ads.yahoo.com?

I have a nginx proxy facing public internet. A few days ago, I started to receive a torrential amount of requests, targeting URLs that are invalid for my domain. An excerpt from nginx access.log: ...
0
votes
0answers
10 views

Changing an Apache CustomLog configuration line from within a conf.d file?

My Apache 2.2 httpd.conf file contains the following line: CustomLog logs/access_log common I want to instead use: CustomLog logs/access_log "a different log format that I prefer" But I only ...
0
votes
1answer
37 views

mysql.slow.log is not created even though it's configured in /etc/my.cnf , what could be the reason?

This is the relevant section from /etc/my.cnf: [mysqld] slow-query-log = ON long_query_time = 2 log_slow_queries = /var/log/mysql-slow.log The problem is that file is ...
2
votes
0answers
55 views

Cannot find upstart logs in syslog despite a log-priority of debug (ubuntu 13.04 & mint 16)

I've set upstart log level to "debug" sudo initctl log-priority debug But I still cannot see anything in /var/log/syslog. sudo initctl emit hello # no log sudo initctl start my-broken-service # ...
0
votes
0answers
24 views

Understanding parse, bind, execute entries in PostgreSQL logs

I am new to PostgreSQL logging and have a few questions. PostgreSQL is used as a database for a couple of comercial products (both on the same server). This is run on a Windows 2008 R2 server (as I ...
0
votes
0answers
14 views

rsyslog.conf only partly honored

I followed this description on how to enable audit for Samba (entry of Aug 10, 2009) and wanted to get all additionally enabled logging in a special log file (/var/log/samba/log.audit). The mentioned ...
2
votes
2answers
179 views

Block bots by their Java referrer or User-Agent string?

I have been getting a lot of web hits in my logs that crawl most top level pages of my site and show a referrer as a Java version. I see different variants of the Java versions in the referrer, i.e. ...
0
votes
1answer
7 views

Get referrer of requests currently listed by status module

Our server has on normal time 20 request/second, which can be seen constantly on server-status (status module) Sometimes we have 800 requests/second, and all these requests are shown on ...
0
votes
0answers
7 views

Scribe Log Auto Stopping?

We are running Scribe Log Service to collect Logs from Application Servers. (https://github.com/facebook/scribe/wiki/Scribe-Configuration) Scribe Log run smoothly for a long time. But Yesterday, I ...
0
votes
0answers
33 views

Why is SystemMaxFileSize in journald.conf not being honoured?

I have the following settings in journald.conf SystemMaxUse=100M #SystemKeepFree= SystemMaxFileSize=10M According to the documentation, SystemMaxUse controls how much disk space the journal may use ...
0
votes
0answers
9 views

How to suppress request string logging in App Engine to secure passwords

I am designing an app for Google App Engine. In my initial set up, I have the user submit their username and password to my app via AJAX. I then hash it and compare that to a stored hash without ...
1
vote
1answer
35 views

How to log both HTTP and HTTPS requests to the same file

Using recent Apache on Linux. It's inconvenient to have the two different kinds of requests sent to two different log files since I like to watch the log file scroll by live via the shell. I also ...
0
votes
1answer
20 views

How to check last FTP logins using SSH?

I've just bought a new VPS (its operating system is CentOS). As this is my first experience with VPS, I don't know everything about managing and ... One of my customers told me his website is not ...
-3
votes
1answer
78 views

Configure Protocols using iptables log file with ndpi [closed]

I am using iptables with ndpi to filter my network and add two rules to my iptables rules they are iptables -I INPUT -m ndpi --http -j LOG iptables -I INPUT -m ndpi --google -j LOG In my log file ...
1
vote
1answer
51 views

Why or who did reboot my server

One of our servers rebooted last night reboot system boot 2.6.32-5-amd64 Wed Jan 15 03:24 - 16:07 (1+12:42) Our hoster didn't do it, nor did I. syslog does not show any error Jan 15 03:17:01 ...
0
votes
1answer
24 views

Is there a way to detect what is modifying Active Directory user properties?

We use a display name format of first initial and surname, e.g. J Smith. Recently, something is changing this to show their full name. Is there any way to look through some logs to find out which ...
0
votes
1answer
88 views

How can I make apache give the config file path and line number for a 403 error

I'm running Apache 2.4.7 on debian unstable. I'm getting 403 errors when I try to run supysonic using the mod_wsgi module. I turned the LogLevel for wsgi and authz_core up to trace6, but I'm still ...
0
votes
1answer
97 views

Apache2 server (behind Zyxel USG 100 NAT/Firewall) with vhost does not log real clients ip addresses

SOLVED To allow the Zyxel USG 100's NAT to forward untouched packets to my web server i edited the policy route of the Zyxel. Zyxel -> Configuration -> Network ->Routing -> Policy Route ...
0
votes
1answer
24 views

Logging not getting disabled

Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has ...
1
vote
2answers
104 views

logging/capturing STDERR/STDOUT on Amazon EC2

I'm looking for a solution that would allow me to automatically capture the STDOUT/STDERR of a process running on Amazon EC2, and send it (remotely) to another server. Sound simple, except: I will ...
2
votes
0answers
17 views

Globally recording Bash history: Dealing with long-running commands [duplicate]

For security reasons, I'm trying to remotely log all commands that users enter into the shell. I've got it to work by using this in my global bashrc: PROMPT_COMMAND='history -a >(tee -a ...
0
votes
0answers
20 views

How do I get logman.exe to write to this path which contains an environment variable? [duplicate]

Looking at the registry keys which logman.exe uses to track its current log jobs (at HKLM:\SYSTEM\CurrentControlSet\Control\WMI\Autologger), I noticed that a number of the "default" Windows log ...
2
votes
1answer
109 views

How can I use perfmon/logman to set up logging on a master (Windows) VM, writing to another machine on the network?

I know how to set up logging to write to a remote location in the general case - just specify the output filename using the full UNC path (e.g. \\HOST-PC\directory\logoutput.etl) when creating the log ...
0
votes
0answers
32 views

What kind of messages are dropped when $OmitLocalLogging is on?

The new systemd journal was introduced some time ago. The following configuration is added in rsyslog to integrate this new module: $ModLoad imjournal # provides access to the systemd journal ...
0
votes
1answer
66 views

tried to spam postfix, doesn't log IP address

I've had some serious spam issues with my local postfix installation, until I found out that there was a postfix user wich was allowed to relay mails (I still don't know why this was possible in the ...
2
votes
1answer
46 views

Log Archiving Solution

What is the best solution for log archiving ? I have two application server (tomcat6) and I need to keep application log files for 7 years. Shipping, zipping and writing them on Bluray or DVD is time ...
0
votes
0answers
168 views

Message Structure Different Between Log Shipper — Logstash and nxlog

I have a Windows Server 2008 (ugh) system that I'm pulling messages from with Logstash and nxlog. With nxlog as the log shipper, messages as they appear in the log file are sent to the parser: ...
0
votes
1answer
150 views

Log Rotation Causing nxlog Failure

I'm using nxlog to watch two vCenter log files on a Windows Server 2008 system and I have a very simple config to ship messages to Logstash. Nxlog began failing yesterday after a file was rotated. ...
2
votes
4answers
145 views

Use logger in shell script

How can I use logger in a shell script? If I run ntpd -qnp pool.ntp.org 2> >(logger) in console, it works as expected. If I put it into a shell script #!/bin/sh ntpd -qnp pool.ntp.org ...
1
vote
1answer
58 views

Can I automate emailing of critical errors with systemd journal?

Fedora OS introduces journalctl as the new way to log error messages. I learn about this recently when I performed an upgrade. var/log/messages and many other log files are now combined into a ...
0
votes
1answer
31 views

ap_log_perror unable to read loglevel from configuration file?

Loglevel error I am giving this in the configuration file,httpd.conf,when i am using the function ap_log_rerror,it is capturing only log messages that are having error or above loglevels,but when i ...
0
votes
0answers
32 views

Making changes in Loglevel httpd.conf of apache server?

I am working on windows-7 Visual studio 2008,According to Apache: Configure "LogLevel debug" for certain modules only? i am making changes in the loglevel of configuration file I am giving ...
1
vote
1answer
157 views

NXLOG File Input Search Patterns

I'm trying to use nxlog to forward vCenter messages to Logstash with the im_file input module and a pattern to specify the exact file(s) to watch. What would normally be simple is now needlessly ...
0
votes
1answer
15 views

Logging redirects and rewrites

I'm using the following blacklist .htaccess directives in apache v2.2 (on mediatemple): http://perishablepress.com/5g-blacklist-2013/ I want to get a sense of how often these directives are ...
0
votes
2answers
36 views

how to prevent crontab logs from registring in syslog?

I have separate my crontab log into cron.log file by uncommenting the below ling in /etc/syslog.conf, But it register in syslog too. cron.* /var/log/cron.log How ...
2
votes
0answers
50 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
0
votes
0answers
40 views

view dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
0
votes
0answers
373 views

Should I Set pm.start_servers to Highest Value or Not?

I have the following settings on my PHP-FPM: pm.max_children = 256 pm.start_servers = 50 pm.min_spare_servers = 40 pm.max_spare_servers = 128 Even if I set it to higher value, I still get the ...
1
vote
1answer
72 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
0
votes
1answer
33 views

HAProxy: log-separate-errors shows all requests as error

I configured haproxy with option log-separate-errors to be able to log errorneous requests in a separate logfile. However, using that option, all requests are then being sent to the logfile, even ...
6
votes
2answers
166 views

How do server administrators like their server logs?

I'm a software developer and I'm building an HTTP server. Since I have no experience in hosting and managing servers, I have problems with balancing logging performance with usability. For example, ...
-2
votes
1answer
42 views

How to differentiate virtualhosts in Apache's log files?

I wanted to make a simple access statistic based on apache's access log, but I found out that I can't tell vhosts in the log file apart. I don't really want to make separate log files for each vhost, ...
1
vote
2answers
110 views

Log ssh sessions to rsyslog

How can I setup rsyslog to log commands typed in a ssh session? Just in case someone unauthorized ever accesses the system, I'd like to know what he did.
0
votes
0answers
28 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
1
vote
1answer
64 views

Pipe program output to rsyslog

I have a process running that writes it's output to a file, like this. processx > /var/log/processx.log 2>&1 How would I write/pipe/forward this to rsyslog instead (including the ...
0
votes
1answer
73 views

What is the function of the cimserver daemon?

I noticed in /var/log/messsages a process 'cimserver' was logging some interesting messages: Nov 27 15:33:37 lb-web-standby cimserver[2250]: Failed to deliver an indication: Cannot connect to ...
3
votes
3answers
271 views

Log commands executed over ssh

I would like to log all commands executed over SSH. Say, ssh something@server.com COMMAND I want to log "COMMAND" on server.com I did search extensively but could not find anything. There is ...
-1
votes
2answers
52 views

Python script to log name, date, and command of every command users have entered

I want to create a script, possibly in python, open to suggestions, it logs every command typed on the server. so it would log, user, timestamp and command. Is this possible?