Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
0answers
46 views

gzip_ratio not printing in nginx logs

I'm configuring the nginx access_log to output in JSON format to use with other tools. The data I want includes info about the compression. I have gzip on, but the only thing I'm getting for the ...
2
votes
1answer
378 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
0
votes
1answer
42 views

Make error_log readable by apache

Setup: CentOS 6.6, Apache 2.2.15, php 5.5.21 I 'm building a php script that displays the content of the /var/log/httpd/error_log file. Unfortunately, it does not work. The error message states: ...
2
votes
1answer
26 views

Splitting MySQL General Query Log by Clients

I would like to know a solution to splitting very large MySQL general query logs by specific clients that have accessed the server. Ideally a separate log will be created for each client. Thanks
1
vote
2answers
156 views

How can I get metrics such as incoming and outcoming traffic with Apache servers?

Suppose a network consisting of hubs A, B, C, D ... and X. I am looking for ways to visualize how users use the network such as incoming, outgoing and other metrics. In Apache logs, I can see some ...
2
votes
3answers
2k views

Akamai log processing

I'm digging through Akamai logs, downloading excel sheets, and then manually joining them so that I can do sorting of data to find top videos and referrers. Are there any tools you know of to help ...
1
vote
3answers
2k views

Apache error logs - how to view as web page (for internal intranet server) when root access only usually?

I'd like to be able to display the error_log as a web page so that a colleague (without root access) can view this for troubleshooting their PHP development. On my CentOS 5.x machine the error log is ...
6
votes
4answers
216 views

How should applications be developed for easy deployment?

I work for a company that deliver distributed control systems for various industries. We find that IT Admin skills vary to a great degree both in terms of skills and interest. We have everything from ...
1
vote
1answer
66 views

Rotate log files with timestamp in file name

I have a log directory that my app writes into. It creates a log file like this: 2015-01-22-10-full-activity.log 2015-01-22-11-full-activity.log 2015-01-22-12-full-activity.log ...
0
votes
0answers
90 views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
0
votes
0answers
15 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
0
votes
1answer
53 views

Is Lync chat, or Persistent Chat a viable alternative to email based alerts? [closed]

I'm dealing with an envrionment that mostly uses email for alerting. The issue I have is that all emails must be journaled by policy. In addition, each email is replicated via SMTP using SMTP ...
0
votes
0answers
75 views

tomcat not logging to catalina.out

We have a server running a tomcat app that's not logging to catalina.out, we've checked the filesystem permissions, everything looks fine there. the logging.properties is the same (md5sum) as on ...
0
votes
1answer
26 views

Detailed logging of OS X [closed]

The company I work at is going from small business to medium along with new HR requirements. We mainly have OS X workstations. I'd like a solution where all of these workstations log to a local ...
2
votes
1answer
452 views

How to get php-fpm to log to stdout / stderr when running in a docker container

I have php-fpm in a docker container and in the Dockerfile I edit the fpm config file (/etc/php5/fpm/pool.d/www.conf) to set up access logs to go to /var/log/fpm-access.log and error logs to go to ...
1
vote
2answers
58 views

Why does my Apache access log timestamp sometimes go backwards?

I noticed that in my Apache log (actually Oracle's branded HTTP Server, which is really Apache) the timestamp of the lines sometimes goes down, instead of up. Here is an example: 1.2.3.4 - - ...
0
votes
1answer
30 views

How do I find out when a MySQL root password was last changed?

I have looked for solutions to this. I am able to change it, but I need to find out when it was last done and preferably also seeing who was logged in when it was done. Need proof for a security ...
1
vote
1answer
192 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
3
votes
3answers
495 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
2
votes
4answers
471 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
0
votes
1answer
40 views

amavis log email hash

I want to log a hash value of all emails handled by my mail-server. I found in amavis README.customize.gz the following line: The substitution text for the following simple macros is built-in: [...] ...
1
vote
1answer
639 views

Nginx: How to use docker log collector when nginx is running under supervisord

The official nginx docker image (Dockerfile) uses the following trick to hand off its logs to stdout and stderr so that they are captured by the docker log collector and viewable using docker logs ...
0
votes
0answers
67 views

Apache: Regex to log only last IP in X-Forwarded-For

I'm attempting to set up Apache 2.2's logging to record the last IP passed to it by the X-Forwarded-For header. I want to record the last IP from the X-Forwarded-For header if it exists and the ...
0
votes
2answers
174 views

Log Analyzer for IIS logs

I have plenty of programs that will parse IIS access logs and save them in a relational database (MS SQL or MySQL). I am looking for a good interface that will allow me to query those logs. For ...
0
votes
0answers
10 views

Side effect of warning ip address could not be resolved name or service not known mysql [duplicate]

I setup Master Slave replication on two servers. It is working fine. But when I was reading error logs I found out the following warning - warning ip address could not be resolved name or service not ...
0
votes
2answers
47 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
0
votes
2answers
365 views

Output php mail calls to log file

This question relates to the question found here: Find the php script thats sending mails Trying to do the exact same thing but can't get the log to output what I need. Not too experienced with ...
0
votes
0answers
26 views

BIND logging to find “resolved address”

Currently my logging is set up like this : logging { channel query_log { file "/var/log/named/query.log"; severity info; }; category queries { query_log; }; Which results in: client ...
1
vote
1answer
66 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
2
votes
3answers
28 views

Use iptables to log connections except for two addresses

We would like to use iptables to log all network connections except if the connecting address is A.B.C.D or the connecting address is E.F.G.H. These two addresses cannot be combined into a single CIDR ...
0
votes
0answers
67 views

Python logger stops logging

On an application server (CentOs 6.4), python's native logger will stop writing to a log file after about 48 hours of continuous operation. This started occurring when we added fluentd (td-agent) to ...
0
votes
2answers
125 views

How to pipe all log files entries to a database on linux?

I am thinking about building an application that would read my different server log files, save the parsed data to a database, and then remove the line from the log file. This is my programer side ...
2
votes
1answer
153 views

Why is logrotate deleting my logs?

This is my conf: /var/log/apache2/*.log { weekly missingok rotate 52 compress delaycompress notifempty create 640 root adm ...
0
votes
1answer
34 views

sshd log file entries from the past mixed in with currently occurring entries [duplicate]

I have sshd log entries from the past seemingly randomly mixed in (in time) with the presently occurring log entries. No remote hosts log to this server, rsyslog serves only this box. External ...
1
vote
3answers
861 views

Apache logs full URL rather than URI

My Apache web server logged following messages to access.log: 46.22.173.131 - - [23/Dec/2014:15:34:54 +0100] "GET http://pl.wikipedia.org/wiki/Special:Search?search=&go=Go HTTP/1.1" 302 482 "-" ...
0
votes
1answer
47 views

Include executed cron command when outputting to log

Is there a way I can include the command that was executed in the output when I'm logging to a file? For example: * * * * * date && /path/to/php /path/to/script.php >> cron.log ...
3
votes
2answers
2k views

Get varnishlog to log only 503 errors into file

I tried everything: service varnishlog start - logs everything varnishlog -D -c -m TxStatus:503 > /var/log/varnish/varnish.log - doesn't seem to be doing anything varnishlog -c -m TxStatus:503 ...
0
votes
2answers
188 views

Unexplained spike in web traffic

Question I am suspicious of an unexplained 1600% increase in traffic and massive slow-down that lasted about 10 minutes. I'm not sure if it was an attempted DoS attack, dictionary login attack, etc. ...
2
votes
1answer
107 views

How to make Ossec aware of logrotate

I installed Ossec in a monitor/agent configuration on a few servers of mine. Everything works greats. The only thing that annoy me is that I keep receiving alerts after logrotate rotates the log I ...
0
votes
1answer
103 views

Syslog-ng loghost - filter not-match

I've got a problem with receiving remote logs from syslog-ng OSE to syslog-ng OSE. I am configuring loghost and at now - i how no idea what i am doing wrong. It seems like filters are not working for ...
1
vote
3answers
2k views

Mongodb - proper way to rotate logs

Mongo docs say that I can: use -SIGUSR1 signal and get the old log renamed and current switched use logrotate from OS I want the OS's logrotate ability to zip old files and remove oldest, but see ...
1
vote
1answer
97 views

What kind of service is runit's svlogd expecting?

The runit manual states that in the configuration one can use an option to submit logs to: ua.b.c.d[:port] tells svlogd to transmit the first len characters of selected log messages to the ...
1
vote
1answer
3k views

Troubleshooting intermittent Apache 400 Bad Request errors

I'm trying to debug an issue in my app and looking for suggestions or troubleshooting tips. My app consists of a mobile app submitting data over HTTPS to apache (which is using mod_proxy to forward ...
15
votes
4answers
568 views

Need a technique to coerce sysadmins to log the reason for accessing a prod server

My company requires that any time a user logs into a production server the reason that person logged in and the changes the user intends to make must be logged. My team wants to do this, but its easy ...
0
votes
2answers
52 views

Automatic archiving of log files [closed]

I look at my various log files, and I believe the operating system will periodically archive the log by appending a datestamp to it. I've created some custom logs in my httpd.conf file, however, ...
0
votes
1answer
86 views

Centralised log monitoring for linux servers [closed]

I've read several QA on this site about monitoring servers, but I found out, that none of them centralises all the logs I want to watch. To describe my situation: 10 linux hosts Using logwatch to ...
0
votes
0answers
282 views

Logging user and power activity Synology DiskStation (v5)

Is there any practical way of logging user activity and power state changes on a Synology NAS? I'm not looking for anything very extensively detailed, but I would like to log e.g. Video Station usage ...
3
votes
6answers
345 views

How to monitor your “entire” website?

I've perused through the forums here and was wondering what the best practice was in terms of monitoring the status of your "entire" website? (not just the homepage) In terms of priority, if your ...
0
votes
0answers
44 views

HPUX Apache 2.2.15 not starting?

Ive been looking for 2 days anything similar or related to the error that im getting for my apache. Im using 2.2.15 which is the version allowed by my company policies to install in an hpux server, ...
2
votes
1answer
112 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...