Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
24 views

Warnings in Tiger auditing reports (process is listening on socket)

I get email logs like the ones below emailed daily from my server. I don't really know what does it mean and thinking about disabling them, but I guess this is not a good idea and it's better to learn ...
0
votes
0answers
25 views

Why would kern.log stop logging after crash & reboot

Server: Ubuntu 12.04 I recently noticed that my servers kern.log had stopped logging. I've not separated iptables from the kern.log so it used to be very active, however recently it's been logging ...
0
votes
2answers
51 views

ssh pass original user to environment on server [closed]

First off, i do not know wether passing the information to the environment is the best approach, so i will start by detailing what i actually want to achieve. on a corporate scale, there are servers ...
0
votes
0answers
21 views

Folder keeps getting deleted and I can't find out why

I have a Joomla based website running on CentOS, Apache, PHP, MySQL. I am using plupload file uploader to upload the files. I'm uploading the files to /tmp/uploads directory where they are processed ...
0
votes
1answer
44 views

Do DFS logs contain folder permission changes?

I have a DFS server sharing files and want to see when an admin gave read/write/full control to a user in a DFS share. Is there any way I can view this? I have checked in C:\Windows\Debug but the log ...
2
votes
1answer
244 views

nginx error log Grok pattern

I am having trouble getting the following nginx error log message to parse in the grok debugger. I have a feeling there is a stupid trick that I should use but can't figure out what it may be. ...
0
votes
1answer
30 views

Runit logging not working

I created a service with runit. Service starts and falls without logging. I need information about STDOUT of service for error detection (service starts without runit properly). I created a ...
0
votes
0answers
44 views

systemd logcheck rule not working

given is this logcheck rule: ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ systemd-logind\[[[:digit:]]+\]: New session [[:digit:]]+ of user [^[:space:]]+\.$ and this log entry: Mar 19 09:16:09 horst ...
2
votes
1answer
90 views

logging SSLv3-handshaking failure on nginx

I have website server by Nginx in FreeBSD. Last week we decided to drop support for SSLv3 connection for our site. However I wondering if nginx has logs of all client who can't do SSL-handshake ...
0
votes
1answer
114 views

Ubuntu 14.04.2 LTS - RSysLog 8.8.0 - omusrmsg not working

I have been trying for two days to get RSysLog to alert all [or specified] users of certain Facilities/Priorities hitting RSysLog. rsyslog.d/50-default.conf: ... *.emerg ...
0
votes
1answer
61 views

Read only permissions on some Linux logs

I would like to limit a certain user (let's call it logger) to be able to only read some (not all) logfile (web, php framework, radius,etc).I am not sure how to do it the "best" way. So far I have a ...
0
votes
1answer
52 views

How can solve this error in nginx logs?

nginx version: nginx/1.6.2 /usr/logs/nginx-error.log [ uest: "GET /server-status HTTP/1.1", host: "127.0.0.1" 2015/03/14 05:21:24 [error] 23068#0: *8616047 openat() ...
2
votes
1answer
43 views

How to log a hash of the session cookie with Apache HTTPD?

So, I want to log an information that is equivalent to a session cookie (called session_id) in the Apache logs. I do not want to simply put the cookie in the log format (%{sid}i) because a compromise ...
-2
votes
1answer
42 views

sql server: best practice for log backup in full recovery mode [closed]

I have a development sql 2014 environment. I need to put all db in full recovery mode in order to test availability groups, so I need to manage logs to avoid excessive growth. I don't need to keep log ...
0
votes
1answer
33 views

Lighttpd stops writing to access.log

I have this issue with my lighttpd installation where logging to access.log will cease once the default log-rotating software erases my access.log after copying it to access.log-YYYYMMDD. I have to ...
1
vote
0answers
89 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
17 views

Possible to have FQDN in Debian Logfiles?

Is it possible to have instead the hostname the fqdn inside debian log files? Example: Now its: Mar 2 18:00:12 www rsyslogd: [origin software="rsyslogd" swVersion="5.8.11" x-pid="2442" ...
0
votes
0answers
192 views

sending tomcat catalina.out to syslog

we're on tomcat 6.4 on centos. I've been trying to get the catalina.out logs in tomcat to syslog. For reasons it's very important that I don't send the raw logs, they have to be tagged with OURTOMCAT: ...
0
votes
0answers
67 views

Can't setup Apache CustomLog to directly import in Piwik

I configured apache just like this article (https://github.com/piwik/piwik/tree/master/misc/log-analytics#setup-apache-customlog-that-directly-imports-in-piwik) explains but nothing happens during ...
0
votes
0answers
10 views

Error Reporting for File Copy Process

I have a rather complex process in place which runs a java program to retrieve service records from our CRM and export them into an excel spreadsheet, which gets placed onto a server in our data ...
0
votes
0answers
104 views

IIS 7, LogStash and flushing IIS logs

I'm using LogStash to import IIS logs into ElasticSearch. It's done by pointing the LogStash to the folder with IIS logs which contains several log files each per day. Currently I don't use the ...
0
votes
1answer
49 views

how to monitor multiple log files?

I have to monitor multiple logs. By now I have a iTerm on my mac with several windows. So I have all logs on one sight. The idea is now to have a RaspberryPie with an extra monitor. By now after a ...
0
votes
1answer
257 views

Windows Event ID 4624 Repeating With Resource Not Available

We've recently started logging 4624 event IDs on our domain controllers to help track user activity. Overall this has been fine, but recently started getting these messages over and over again. ...
0
votes
2answers
21 views

Lighttpd error log increases too fast

I am using lighttpd v1.4.35 and I have developed a simple web page with some links to test. After some clicks I have noticed the error log is increasing too fast. In /etc/lighttpd/lighttpd.conf I ...
0
votes
1answer
23 views

How to set up a global CustomLog on Apache2 for every virtualhost

Actually I got some issue with file descriptors on Debian Wheezy with 3.2.13 kernel and Apache/2.2.16. I would like to reduce this limit, actually each virtualhost got a CustomLog and an ErrorLog, I ...
0
votes
1answer
391 views

Logstash: Failed to flush outgoing items

First of all, I'm a total newbie to logstash. Despite the fact that I've managed to achieve some basic logging (trying to parse an apache log file without the build in COMBINEDAPACHELOG). However, I ...
1
vote
2answers
86 views

My site is suddenly getting slammed, not legitimate traffic

I run a site with about 700 registered users. On a typical day, there are 30-50 hits. In the last three days, the traffic has increased insanely fast (according to Google Analytics). I got 7,287 hits ...
1
vote
0answers
17 views

Flush IIS7 logs manually on remote machine

I know how to flush IIS7 logs when I'm logged on some machine: netsh http flush logbuffer How can I do it on another machine?
0
votes
0answers
31 views

Cryptic NGINX access log entries [duplicate]

While reading my nginx access and error logs I stumbled upon some rather unusual entries. 127.0.0.1 - - [11/Feb/2015:15:08:25 +0100] ...
0
votes
0answers
196 views

Lockfile creation failed

I got a plain-text logfile (not lock file) in /var/log what I cannot open with: lockfile creation failed: exceeded maximum number of lock attempts I wonder what causes this and how can I unlock it ...
0
votes
3answers
55 views

Log which combines log files from three different servers

We have a three-server config with each server running nginx, and rails via Mongrel. Each rails installation has its own set of log files, in it's own 'log' folder, which is just a regular folder on ...
0
votes
1answer
19 views

Find the VirtualHost that got hight traffic from multiple log files

Sometimes my Apache server get high load. I have a lot of VirtualHost, each one having its own log file. The structure is like this /var/www/httpd-logs/virtualhost.com.access.log What command could ...
2
votes
0answers
50 views

gzip_ratio not printing in nginx logs

I'm configuring the nginx access_log to output in JSON format to use with other tools. The data I want includes info about the compression. I have gzip on, but the only thing I'm getting for the ...
0
votes
1answer
43 views

Make error_log readable by apache

Setup: CentOS 6.6, Apache 2.2.15, php 5.5.21 I 'm building a php script that displays the content of the /var/log/httpd/error_log file. Unfortunately, it does not work. The error message states: ...
1
vote
1answer
39 views

Drupal application load troubleshooting

I'm receiving some sporadic high server load on a Drupal application (really high. 8 cores, load average of 50). The load is normally sitting between 5-10. The Drupal application sits behind a ...
2
votes
1answer
26 views

Splitting MySQL General Query Log by Clients

I would like to know a solution to splitting very large MySQL general query logs by specific clients that have accessed the server. Ideally a separate log will be created for each client. Thanks
0
votes
0answers
103 views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
0
votes
0answers
17 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
1
vote
1answer
78 views

Rotate log files with timestamp in file name

I have a log directory that my app writes into. It creates a log file like this: 2015-01-22-10-full-activity.log 2015-01-22-11-full-activity.log 2015-01-22-12-full-activity.log ...
1
vote
1answer
247 views

tail -f not following log file in Docker container

I am seeing some strange behavior running the tail -f command inside a Docker container in CoreOS. There are a number of variables I can think of that may be contributing to the problem but I am not ...
0
votes
1answer
55 views

Is Lync chat, or Persistent Chat a viable alternative to email based alerts? [closed]

I'm dealing with an envrionment that mostly uses email for alerting. The issue I have is that all emails must be journaled by policy. In addition, each email is replicated via SMTP using SMTP ...
0
votes
0answers
81 views

tomcat not logging to catalina.out

We have a server running a tomcat app that's not logging to catalina.out, we've checked the filesystem permissions, everything looks fine there. the logging.properties is the same (md5sum) as on ...
0
votes
1answer
27 views

Detailed logging of OS X [closed]

The company I work at is going from small business to medium along with new HR requirements. We mainly have OS X workstations. I'd like a solution where all of these workstations log to a local ...
1
vote
2answers
75 views

Why does my Apache access log timestamp sometimes go backwards?

I noticed that in my Apache log (actually Oracle's branded HTTP Server, which is really Apache) the timestamp of the lines sometimes goes down, instead of up. Here is an example: 1.2.3.4 - - ...
1
vote
1answer
71 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
0
votes
1answer
33 views

How do I find out when a MySQL root password was last changed?

I have looked for solutions to this. I am able to change it, but I need to find out when it was last done and preferably also seeing who was logged in when it was done. Need proof for a security ...
1
vote
2answers
103 views

Elasticsearch index much larger than the actual size of the logs it indexed?

I noticed that elasticsearch consumed over 30GB of disk space over night. By comparison the total size of all the logs I wanted to index is only 5 GB...Well, not even that really, probably more like ...
0
votes
1answer
41 views

amavis log email hash

I want to log a hash value of all emails handled by my mail-server. I found in amavis README.customize.gz the following line: The substitution text for the following simple macros is built-in: [...] ...
-1
votes
1answer
163 views

Why doesn't logstash grab or index the files from the mapped drive?

I don't understand why logstash is so finicky with network resources. I shared a folder on another machine and then mapped it as Z: under Windows Explorer. I've verified the path and everything. I can ...
2
votes
1answer
552 views

How to get php-fpm to log to stdout / stderr when running in a docker container

I have php-fpm in a docker container and in the Dockerfile I edit the fpm config file (/etc/php5/fpm/pool.d/www.conf) to set up access logs to go to /var/log/fpm-access.log and error logs to go to ...