Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
12 views

Squid do not log proxy error

How to configure squid to not log errors? I tried: acl respError rep_header X-Squid-Error .+ log_access deny respError But I got this warning: ACL::checklistMatches WARNING: 'respError' ACL is ...
0
votes
0answers
11 views

Squid log auth method

Is there any way to log the authentication method of a client request to squid proxy? I have 3 methods: - negotate (kerberos) - ntlm - basic But in squid proxy logs (access log) I can not see this ...
0
votes
1answer
13 views

IIS Advanced logging: enable for a website but disable for a virtual dir below it

I've been googling for hours, but can't seem to find any info on this... Is there a way I can enable "IIS Advanced Logging" for a website, but disable for a child virtual directory? I tried ...
1
vote
0answers
50 views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
0
votes
0answers
22 views

Another Place to Edit Error Reporting Aside from php.ini, httpd.conf, or apache2.conf

Is there another place to edit error reporting aside from php.ini, httpd.conf, or apache2.conf (I am using Apache 2.2.15 so it uses httpd.conf). The issue is not php.ini or httpd.conf since they are ...
0
votes
0answers
51 views

Log Outgoing cURL Requests From PHP?

I currently have PHP set up to log all sent mail messages to a log file, using the following configuration in my php.ini: mail.log = /var/log/phpmail.log And it works incredibly well. It gives me a ...
2
votes
1answer
63 views

Is someone trying to hack into my VPS? [duplicate]

I was browsing my logs on papertail and I saw this. Jun 03 03:26:01 /USR/SBIN/CRON: (root) CMD (test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )) Jun 03 ...
0
votes
0answers
33 views

Issue with SSH on RHEL while monitoring logs from SpectorSoft Server Manager

I have 3 servers running RHEL hosting a number of Java applications where each of them generates a log file which I am monitoring from a Windows-based machine with the use of SpectorSoft Server ...
0
votes
1answer
35 views

Logstash matching ceph client and server separation

So I have a fresh logstash install and I am trying to deploy logstash to get a handle on the logs. I am going through and will eventually segment the logstash filters based on subsystem and ...
0
votes
0answers
15 views

Reconstructing a session (or user-flow) in splunk

I'm trying to recreate the process that a user goes through with regards to a specific set of endpoints and I want to see the order in which these call events occur. For the time being, I can use ...
1
vote
1answer
111 views

Change systemd unit tag send to journalctl/syslog

Is it possible to change what tag systemd managed service uses for logging? For example, my custom service report-daemon.service defined as # ... [Service] ExecStart=/usr/bin/php # ... # ... shows ...
0
votes
1answer
181 views

Boot time log: 'Failed to start Postfix Mail Transport Agent'

centos 7.1 postfix 2.10.1 After restarting server in /var/log/messages during boot time Postfix noted only in these 4 lines (all actions during 1 second): systemd: Starting Postfix Mail Transport ...
1
vote
0answers
11 views

Is it possible to limit what is logged in ODBC logging in IIS 6.0?

I am using ODBC logging in IIS 6.0. I cannot change that. Is there a way to limit it's logging to just the actual pages requested as opposed to every single tiny thing requested on a page? I don't ...
0
votes
2answers
69 views

Log rotation on NginX in Configuration file

I've tried this tutorial to rotate log file without external software, but it seems it doesn't work, my configuration on the server { block: if ($time_iso8601 ~ ...
0
votes
1answer
55 views

What should be the right logs permissions for NGINX on CentOS?

on /var/log/nginx/ I have access and error logs. Some are .log errors and others have .gz I think I messed up with the permissions. Some files are created by root/root, other files are created using ...
2
votes
0answers
81 views

How to find size of atomic write for nginx access log buffer?

This link says: The buffer size must not exceed the size of an atomic write to a disk file. For FreeBSD this size is unlimited. How can I find size of atomic write on my server? Is there any ...
0
votes
0answers
57 views

How to log changes made in a particular file to syslog

How to log changes made in a particular file using syslog-ng. The log must contain the timestamp, hostname, user who modified the file and action performed. Is there any option other than audit in ...
0
votes
1answer
36 views

nginx log request before processing

I have nginx server serving a lot of big files. I can see plenty of connections on the server. As it iw know, file to the accesslog is written after the request is completed. Is there any way to log ...
0
votes
1answer
30 views

Maintaining rsync log file

I have a cron running rsync for backup purposes, and rsync logs the output to a file via --log-file. This script will keep on running for a quite long time and I am worried that the log file will keep ...
0
votes
1answer
67 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
0
votes
1answer
39 views

Logging into file doesn't write anything

I have got some script, which I want run after start computer. I set it in group policy and script is running after PC start (I checked it), but I have in script some logging to which doesn't work. I ...
3
votes
1answer
94 views

How to stop SQL Server from logging informational lines to SQLFT log files?

I checked on a SQL Server 2012 instance recently only to see that the HDD is full and after investigating what happened it was Full Text Search informational lines filling the log files and disk space ...
0
votes
0answers
20 views

Logging ALL actions inside SSMS

Any time one of the following actions occur in SSMS, I would like it to be logged in a SQL table/file. I tried different stuff but nothing seems to be perfect. I might use some funny terminology, ...
1
vote
1answer
69 views

Some (but not all) stuff still logged to /var/log/nginx/error.log despite being configured to log elsewhere

here is scee.conf - pid ./pid; error_log ./error_log debug; events { worker_connections 1024; } http { access_log ./access_log; server { listen 31415; } } I run it using nginx -c ...
2
votes
1answer
103 views

script not found or unable to stat: /var/www/html/r.php

I have just seen a new series of error in the /var/log/apache2/error.log [Thu May 07 17:12:35.433760 2015] [:error] [pid 3488] [client 190.79.132.215:51660] script '/var/www/html/r.php' not found or ...
0
votes
1answer
41 views

HAProxy log outgoing requests

Currently, my HAProxy logs have information about the incoming requests: HTTP version, method, host, path, and headers. I am trying to debug my HAProxy config, and need to know what the resulting ...
1
vote
2answers
36 views

Apache Server Log File Issue

I'm a programmer for a company and their server specs are off limits to me due to IT restrictions. I know it's an Apache server running off a Linux environment. I have permissions to add/remove files ...
0
votes
0answers
30 views

SFTP and rsyslog: log activities of specified users only?

After a lot of anguish, I finally managed to get chrooted SFTP logging working in Ubuntu 14.04. Relevant bits from /etc/ssh/sshd_config: Subsystem sftp internal-sftp Match Group sftp-only ...
0
votes
1answer
72 views

How to allow more than two simultanous sessions on Azure

One of our servers is on Azure and we are remotely connecting to it. Unfortunately Azure allows only two users to be logged in at the same time. When the third user tries to log in, he is given the ...
2
votes
0answers
54 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...
0
votes
1answer
61 views

Debugging random SQL login failure from Web Server

This is a very basic level question, but it could really benefit from some extra help in the diagnosis. We have a 2005 SQL Server Named: SERVERNAME-PROD We have a Web Apps Server that's running IIS ...
0
votes
0answers
76 views

Adding timestamps to supervisord logs

Is it possible to let supervisord add timestamps to the outputs in stdout_logfile and stderr_logfile? I couldn't find it anything about that in the documentation.
2
votes
1answer
48 views

How to log administrator activities in Red Hat Enterprise? [closed]

Is it better to use auditd or sudo logs to log root and other user activities on a Red hat enterprise machine?
1
vote
0answers
50 views

IDS (or similar) to query ELK logs and send alarms on strange situations [closed]

I have an ELK stack (that receives logs from mostly web services,web applications). I'd like to not only store and visualize some stats about the logs(features of ELK) but also to use them to detect ...
0
votes
0answers
10 views

Logging in IIS 7.5/8.0

I have an IIS 8.0 Server setup running ASP .NET applications. In addition to the normal logging like, Begin Request, End Request, Requests /Sec, etc., I also want to log some perfmon counters like ASP ...
0
votes
1answer
36 views

Graylog ignoring all HTTP logs

I've integrated our PHP web application using Monolog recently and added support for logging into Graylog. Until very recently I've used the Graylog VM and I've successfully logged all the information ...
1
vote
1answer
38 views

Logging data posted to a specific URL in Apache

I have been asked to create a logging solution for an AngularJS application on a large e-commerce site. The solution itself has been created but actual transmission of the log data to the server has ...
1
vote
2answers
46 views

Modifying LogFormat in Apache

I need to modify the LogFormat in Apache in order to add the X-Forwarded-For header and log clients' real IPs. I attempted to edit that in httpd.conf file but I then found two separate parts for the ...
1
vote
2answers
66 views

building a SIEM, should I send logs or get them from the gathering machine?

I am working in a Linux environment, I would like to gather all the logs from the machine pool on a unique machine X. There are several log files I need to move and I am not sure about the way I ...
0
votes
0answers
19 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
1
vote
1answer
56 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
1
vote
2answers
49 views

nginx log when specific referrer is present

Because someone steals content from our website, I need to create additional log file, that logs only if http_referrer contains specific domain. Currently I have this: if ($http_referer ~* ...
0
votes
1answer
105 views

What's in the DNS Debug Log Message Fields

I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find ...
0
votes
1answer
31 views

How to monitor/log wireless events including failed authorization attempts?

Is it possible to log wireless events including failed authorization attempts? I have two access points and also would like to see, which one is serving which client and see when client is connected ...
4
votes
0answers
31 views

MongoDB Oplog Security

We are using a MongoDB replica set for sharing sessions and other (potentially sensitive) data in a web farm. All the data we store uses TTL indexes to expire documents after a relatively short ...
0
votes
2answers
41 views

Is there a way to backup logs to tape without mounting a NAS?

The traditional way to send logs to tape backup as I understand it is to mount a NAS which has the ability to do tape backups (or maybe send to a syslog server which in turn mounts a NAS). Is there a ...
-1
votes
2answers
36 views

shell command to find common IPs on a specific url from error_log [closed]

Is there a shell command to group all the most common IPs that requested a specific file via GET (or that came from a url)? For example with this command I can group requests from ip: cat ...
4
votes
0answers
39 views

IIS 7.5 not rolling over logs hourly

I have six IIS 7.5 web servers deployed using a Shared Configuration. The properties for the logging in the configuration are set to log Per Site, W3C, and on an hourly schedule: For five of the ...
1
vote
1answer
519 views

Windows Domain Controller Authentication Logon Logging and Forensics

This question does not take Windows Server 2003 and older OSes into consideration. I know that for local logon (event ID 4624) also the logon type is logged (interactive, remote, etc.). Is there a ...
1
vote
1answer
51 views

What does READ_CONTROL mean in the Security event log?

I have been asked to create audit record of file accesses. By the log is simply overwhelming. A single double click of a text file opening in notepad creates more than 10 log entries with Event Id ...