Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

3
votes
2answers
355 views

Postfix - searching emails (logstash, greylog or other solution)

We are currently having ~100 servers and all of them are using remote syslog, so we have aggregated all logs on one server. The most questioned problem from our support team is: Has an email from ...
0
votes
1answer
45 views

Include the request URI in catalina.out?

Running Tomcat 7. I have errors in catalina.out that I can't troubleshoot because I'm not sure which web request is causing them. Is there any way to capture more details about a given exception ...
1
vote
2answers
155 views

What does the SMTP status 250 BONHAM COOLED BY FIRE mean?

I noticed this in my email server logs recently: status=sent (250 OK BONHAM COOLED BY FIRE ...) I searched, and the only reference I could find anywhere else on the internet was in this ...
2
votes
2answers
920 views

Make a Docker application write to stdout

I'm deploying a 3rd-party application in compliance with the 12 factor advisory, and one of the points tell that application logs should be printed to stdout/stderr: then clustering software can ...
1
vote
1answer
427 views

How do I get cURL errors to go into the correct log file?

I have a website running using Apache 2.2.22, PHP 5.3.10, and cURL 7.2.00. The relevant portions of the apache config is below, and you will notice that errors are sent to www.example.com_error.log. ...
0
votes
1answer
52 views

How to best monitor/log problems on eth0?

I have manually configured an email server - very simple config and I have done no fancy networking. I simply opened up only the relevant ports via iptables. Once every 10-15 days however, eth0 ...
2
votes
0answers
51 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
1
vote
1answer
30 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
0
votes
2answers
2k views

Ubuntu 14.04 System Logging

I've set up an Ubuntu 14.04 Server (from an Ubuntu 12.04 Server) but today I wanted to look in the auth.log but this file is not used. It seems that ´syslog´ was deleted. How does Ubuntu 14.04 log? I ...
2
votes
1answer
42 views

IIS W3C Log (Abnormally?)

Three of our intranet IIS servers are behind F5 Load Balancer. I grabbed the W3c log from one of the servers for a typical day, and there turned out to be about 100k entries. What I feel uneasy is ...
0
votes
1answer
402 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
0answers
62 views

Some PHP application errors logged in Apache ssl_engine.log and not in error_log

We have a Linux server running Apache and some PHP application errors are logged as errors in /var/log/apache2/ssl_engine.log, but they don't appear in /var/log/apache2/error_log. They are not SSL ...
0
votes
4answers
532 views

Monitoring important log files on multiple linux hosts?

I have a few servers running on AWS and have Nagios/Icinga doing the monitoring of all critical services. We're trying to figure out the best way to monitor all logs - system, DB, PHP, Apache, etc - ...
0
votes
0answers
65 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
3
votes
1answer
323 views

Hiding linux kernel messages from console

I have a machine running a custom build of Linux kernel 3.2.12-rt based on Debian Squeeze. I'm getting kernel messages printed to the console. I don't want it to do that. I know why it's doing ...
0
votes
0answers
22 views

ErrorLog not outputing errors

I recently cleaned up my conf files and updated the server, now i'm not getting any error messages for things like missing pages. However, the access log still works. Here is my conf file. ...
0
votes
1answer
25 views

IIS Logs even unauthenticated users

I'm planning to get some information by processing IIS Log files (after I imported them into SQL Server database). Now, even if user gives wrong username/password, but request to a file that exists ...
0
votes
0answers
455 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
0
votes
1answer
25 views

Exim sends system user mails rathen than logging them in /var/mail

I setuped an Exim4 server to send mail for my website hosted on the same server. I configured my server to have a mydomain.com hostname. Sites and mails for site are working fine. The problem I have ...
1
vote
1answer
56 views

LAMP does not save any php logs

I have a brand new vps server with Ubuntu 14.04, i686, Apache 2.4.7, php 5.5.9 here's my virtual host: <VirtualHost *:80> ServerName example.com DocumentRoot "/home/drake/www/" ...
-1
votes
1answer
108 views

Application log storage/review tool

My boss is wanting me to wrap applications on a few servers with shell scripts (or inline code for those we develop ourselves) to log basic data (user, date/time, commandline) to a central server so ...
1
vote
1answer
320 views

Shorewall: logging to custom file

I am running an Ubuntu Server 14.04 system with a shorewall firewall. Shorewall is essentially a front end to iptables, and it is iptables that does the logging via Netfilter (my understanding so ...
0
votes
1answer
23 views

Log not readable after rotation by daemontools

I have a log, which looks perfectly fine. However, after the log rotation by daemontools, it is no longer human readable. What could be the problem?
0
votes
1answer
44 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
1answer
47 views

Postfix - E-mails missing, no message in the log

I'm setting up a postfix + dovecot mail server for myself on a VPS. I plan to host a couple of domains with it and be able to manage the users via MySQL. It currently works as I would like to but it ...
0
votes
0answers
124 views

Ubuntu 12.04 crash analysis - strange binary data on all open files at the moment of crash

A couple of hours ago we got a system crash on Ubuntu 12.04. We checked all the log files and there is nothing suspicious to blame to. Last stuff that was logged was some dovecot activity. There are ...
0
votes
1answer
76 views

Bind Requested DNS Server IP Log

I have a DNS Server which runs on a virtual linux box with several IPs. Bind provides some pretty detailed debug logs, however, one piece of information that doesn't seem to be logged is the requested ...
1
vote
0answers
244 views

How to configure nDPI for iptables

I am new to nDPI, I have installed nDPI but when I add rules like; iptables -I OUTPUT -m ndpi --http -j REJECT it shows error iptables v1.4.7: Couldn't load match ...
0
votes
3answers
137 views

store log files in the cloud, when servers are not in the cloud

We're looking at a long-term migration towards the cloud. The plan is to start small, and gradually move less essential parts of the infrastructure into the cloud. All good so far. Part of this ...
-1
votes
1answer
141 views

Howto join ssl_access_log and access_log? [closed]

Recently I discovered in my /var/log/httpd files called ssl_access_log and ssl_error_log. Now I always looked and scanned the regular access_log and error_log. Questions are? Do ssl_error_log and ...
0
votes
0answers
84 views

OpenTSDB Web interface showing nothing other than header and footer

NOTE: I moved the question from stackoverflow to serverfault as this question didn't attract attention. I have a temporary OpenTSDB and hbase hosted on a aws micro server. http://54.72.180.169:4242/ ...
0
votes
1answer
476 views

Filter python messages with regex in syslog-ng

I have syslog-ng (v3.4.7) configured to catch almost all messages in their respective logs, but recently I've included some python scripts in crontab and their output just goes to messages or debug ...
0
votes
2answers
137 views

Logging detailed network activity on Windows Server 2008

One of my clients is experiencing internet delays and outages within their small network. They've verified with their cable company that the issue is not related to any cable company outages. The ...
0
votes
0answers
13 views

“Safely remove Device” logs

I would like to know if Windows Server 2003 logs somewhere when a device has plugged/unplugged. A network card disappeared from one of our virtual machines and I believe it was because somebody ...
0
votes
2answers
80 views

Tracking OpenVPN user login

Situatio is that each user login is loged in log file. Each Server start log file is erased and created new. Is any way to log user logins into antoher file or other place that when server start it ...
1
vote
1answer
101 views

Access log of nginx: why are foreign URLs logged?

My access log is full of such entries: 178.207.40.219 - - [03/Apr/2014:17:34:37 +0200] "GET http://win.mail.ru/cgi-bin/auth?Login=nutyck@bk.ru&Domain=mail.ru&Password=241716 HTTP/1.1" 403 168 ...
0
votes
1answer
595 views

make nginx not log “no user/password was provided for basic authentication” in error logs

I've added password protection to a lot of my domain via nginx by adding: auth_basic "Restricted"; auth_basic_user_file /usr/ssl/htpasswd; to the nginx vhosts. I log all errors ...
0
votes
1answer
44 views

How to log mail client with Dovecot / Postfix

Does anyone know if it's possible to have Dovecot or Postfix output the mail client of a user? In Dovecot's variables list, I cannot find anything in that direction.
0
votes
0answers
120 views

Logparser - Getting average response time from microseconds

I have one month's worth of web server log files in the following format: #Fields: date time cs-uri-stem cs-uri-query c-ip cs(Referer) sc-status sc-bytes time-taken 2014-03-12 17:34:02 ...
0
votes
2answers
85 views

How do I see if user connected to mysql over ssh tunnel?

I imagined command last, would also give me mysql over ssh tunnels list. But I was wrong. Is there a place where this tunnels are logged? Ubuntu server 12.04.
0
votes
1answer
36 views

%systemdrive%\windows\temp deletion rules

What are the rules for which the files in %systemdrive%\windows\temp are removed? I am not referring to rules that System Administrator add to system. I am referring to the built-in processes that ...
0
votes
0answers
94 views

Tomcat 7 log file date format

Tomcat7 log entries use a date format: Mar 30, 2014 11:50:32 AM How do I change it use the format: 2014-03-30 11:50:32 This would make it much easier for Zabbix to parse the log file for ...
1
vote
1answer
116 views

How do I configure Linux to log when ulimits are hit?

For example, say I'm hitting nproc. I would expect a log message to appear /var/log/messages or similar, but it looks like that needs to be configured. How do I do that? I can't find anything relevant ...
0
votes
0answers
29 views

Apache microseconds logs

So, I'm trying to understand how the apache microseconds log format is working - I configured a custom log for my apache vhost including %D for microseconds and from my tests it seems that is working ...
2
votes
3answers
445 views

Parseable NGINX accesslog files with delimiters

The default NGINX format is this: log_format combined '$remote_addr - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" ...
0
votes
0answers
57 views

Rsyslog with Nginx virtual hosts

I have an Nginx server with several virtual hosts, each of them generating log files. I'm sending all these logs to a remote server but don't know how to create one log file per virtual on this ...
3
votes
1answer
63 views

How can I configure IIS to save log files in a given folder without creating a W3SVCXXX folder under it?

You can configure IIS to save its logs in any folder you want; however, even if you configure this setting at the site level, it will always create another folder under the one you choose, called ...
0
votes
0answers
11 views

How can we log file download successes and failures from IIS7?

We have a dedicated server: IIS7 Windows Server 2012 R2 Standard This servers sole use is to serve files ~120MB in size. We're looking for the simplest way to log how many downloads were: ...
0
votes
2answers
78 views

Excluding clients from web logs?

Is it possible to exclude certain IP addresses from Nginx's access.log, for example where lots of the requests come from a monitoring server?
2
votes
2answers
73 views

How to log remotely without syslog

I have a bunch of logs which are not created using syslog. I would like to export them to another host. If possible using syslog or rsyslog. A pipe? how can I do that?