Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

3
votes
2answers
12k views

Confirm that mysqli extension is not installed

Recently I discovered that mysqli extension is not installed in my server Centos version 2.6. I confirm it because I change the driver of db connection from mysqli to mysql and now works fine. So, is ...
0
votes
0answers
38 views

fail2ban doesnt read log if file being used

My environment is Ubuntu 14.04, LAMP stack all from apt. implemented fail2ban and configured jail.local with backend = auto [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
1
vote
2answers
2k views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com -...
0
votes
2answers
356 views

What rule can I use in ModSecurity to log POST payload for a specific site?

I need to inspect POST payload for a specific website (the server is rather busy and I wouldn't turn on POST logging for the entire server). The server is LiteSpeed 5.0.7. SecRequestBodyAccess is set ...
0
votes
1answer
22 views

mod_security: What's the point of action auditlog?

I'm fiddling around with mod_security to log POST request payloads for a specific URI. As stated in this response http://serverfault.com/a/729079/292993 to a similar question mod_security's ...
0
votes
1answer
44 views

mod_security: How to log POST requests for specific URI?

I'm trying to set up mod_security to log POST requests payload for a specific URI, as it seems that a customers webpage is used as a spam relay and these requests corrupt the server side cache. I ...
2
votes
0answers
36 views

How to reliably capture Linux kernel log messages in case of a system debilitating crash (BUG, panic)?

I'd like to have access to the lines/tracebacks/whatever whispered by the kernel right before dying. This has proven problematic, because all interfaces I have access to become disabled. Post-reboot, ...
0
votes
2answers
119 views

IPTables: How to log and set a specific log file

Is it possible log all dropped connections by IPTables and set a iptables.log file for logging in /var/log/?
0
votes
0answers
45 views

mail.log file is growing too quickly

my mail.log file is currently growing out of all proportion. It's logged over 15Gb of content today and most of that seems to be down to spamassassin. There are a few questions that I can't ...
0
votes
0answers
10 views

How do I change the log format for IIS8 ODBC Logging

With IIS8 (and 7) you can log directly to a database using ODBC logging. Unfortunately I can't find a way to customize which fields are logged using this method. In particular the referral link is not ...
10
votes
3answers
6k views

nginx logging to access.log.1 instead of access.log, logrotate failing?

I have an nginx instance that is set to log access to /var/log/nginx/access.log and errors to /var/log/nginx/errors.log, but as soon as logrotate runs each week, the file gets moves to *.log.1 and the ...
0
votes
0answers
20 views

Generate guid in IIS logs

I am using Advanced Logging in IIS. I have a requirement where I need to generate GUID(correlation Id) for every log entry into the log. Is this possible in IIS, as I don't see GUID type columns in ...
0
votes
0answers
59 views

fcoemon: error response from lldpad: error

I have created and configured the red hat cluster and as I was just going through logs to see if every thing is fine, thats when I saw these errors. Not sure whats with these errors. Please advise. ...
2
votes
4answers
255 views

Problems with googlebot

Googlebot is constantly trying to index URLs that don't exist in our server, so it gets a 404 error all the time. We don't have any reference to that web site (I think it's a blog from Nigeria) so I ...
-1
votes
1answer
39 views

is there a way to findout about a file history (create date / create directory / moved directory ) ? [duplicate]

so i found a shell deep in a directory of my website . my website doesn't have a upload section and i use a well known framework and it covers sql injection ( i use codeigniter active record to work ...
0
votes
0answers
53 views

Huge citadel log files

I noticed today that my mysql server was not starting up anymore. Checking the error logs, it showed that it didn't have enough disk space. I thought that's really weird since there's nothing on my ...
3
votes
4answers
22k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
-1
votes
1answer
49 views

What is the difference between combined and combinedio Log Formats in Apache?

Essentially, the question is in the title. I am familiar with what the combined log format provides, however, I don't understand the difference when compared to the combinedio format. What do the %i ...
0
votes
1answer
41 views

logrotate frequency - when and from when

if have lograte in my daily cron /etc/cron.daily/logrotate -- assume cron.daily is run at 1.05am daily and if my logrotate config has a weekly settings Does it means that my logrotate will ...
0
votes
1answer
32 views

Modsecurity Whitelist and keep logging

I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time. SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" !ARGS:/^...
0
votes
0answers
29 views

Apache2: How to log the entire status line (including reason phrase)?

Apache logs the status code of the response if %s is in the log format, but I also need to log the reason phrase (the text to the right of the status code). How can I get Apache2 to log the entire ...
0
votes
1answer
31 views

Pass arguements as parameter to -filterXPath get-wineventLogs

Hi I made powershell script in which I am taking three arguements(in param block) and passing them as parameters to -FilterXPath. But I am not able to get the result. $eventID=7036 $ServiceName=PW ...
0
votes
1answer
120 views

NXLog TCP Module Not Working

I am trying to use NXLog to forward logs from a file on one computer to a file on another computer. I am new to NXLog but feel like I now have a good handle on it after consulting the documentation. ...
4
votes
6answers
10k views

Nginx not logging PHP errors

When accessing some PHP scripts on my website, I'm getting the dreaded 500 error message. I'd like to know what's wrong to fix it, but Nginx isn't logging any PHP errors in the log file I have ...
0
votes
1answer
68 views

Cobian Backup: Incorrect parameter error

I have some Cobian Backup tasks to copy a file to an external hard drive. To prevent it from being compromised, the drive will not be mounted until the task is launched. We use the following ...
0
votes
1answer
2k views

CSF Log Watching

I run suphp so the uid of scripts is for the user not the webserver. My log files are also in /home/$user/logs/error.log CSF only monitors /var/log/apache2/error.log However because of my setup i ...
0
votes
1answer
29 views

What informations can be retrieved about a mail that was not delivered?

During the migration from our old mail server to Zimbra 8.6, we created a number of Distribution Lists, however, for some reason (our fault probably), one of those list which was supposed to hold 4 ...
5
votes
4answers
8k views

Mongodb - proper way to rotate logs

Mongo docs say that I can: use -SIGUSR1 signal and get the old log renamed and current switched use logrotate from OS I want the OS's logrotate ability to zip old files and remove oldest, but see ...
2
votes
3answers
931 views

Log parser for ftp server

Can anyone suggest good log reporting software for Proftpd? I am looking for something at least as good as http://xferlogdb.sourceforge.net where log is fed into the database and dynamic web pages ...
1
vote
1answer
247 views

Proftpd user-auth with mod_sql/mod_sql_passwd

I'm reading up how to interface ProFTPd with MySQL for an implementation I'm working on, I noticed it seems like all the example code or instructions I see have the user login field in MySQL set as "...
2
votes
1answer
118 views

Linux ftp server supporting millisecond timestamps in transferlog

I'm looking for an ftp server for linux that will satisfy the following constraints Should be able to log when a file transfer (STOR command) is initiated. Should be able to log the time taken for ...
0
votes
1answer
44 views

Tomcat crashing with no error

I am running tomcat 7 on debian 7.9 dedicated server with several applications running on it and last time tomcat behavior is really strange. First after tomcat starts it takes all the assigned RAM (...
3
votes
1answer
1k views

Successful su for user by root in /var/log/auth.log

I have this sorts of entries in my /var/log/auth.log: Apr 3 12:32:23 machine_name su[1521]: Successful su for user1 by root Apr 3 12:32:23 machine_name su[1654]: Successful su for user2 by root Apr ...
0
votes
0answers
25 views

IIS Log File Naming Scheme and Rollover

In IIS, you can configure logging to use different formats and different rollover schemes. You can also configure logging to be per-site (the default) or centralized (a single log for all configured ...
0
votes
1answer
21 views

Usage data from log file

Is there any way I can tell from the apache log files how many users are using an application and how often the use it? I kind of want the information that you would normally get from google ...
2
votes
1answer
157 views

Disable Nginx Logging for “forbidden by rule”

In my Nginx config I have some IP blocks in place, to fight off spammers & bots. This is very effective, but as a result, my error logs get filled up super fast with error messages like these: ...
0
votes
0answers
28 views

How to forward logs and offenses from solarwinds to another server

There are several solarwinds servers in my Network. I want to aggregate some important logs and status from all of these different servers in a third party log server. I'v just searched but I didn't ...
2
votes
0answers
58 views

Analyzing squid3 access.log log files with a all-in-one shell script

I'm just going to write a shell script that me the essential functions such as SARG offers. Sort by URLs with most hits (Top100 in 10min out of 10k) Sum of status / error codes As well as sorting by ...
0
votes
0answers
24 views

rsyslog not filtering message field

Trying to remove ALL cron log stuff from auth/syslog but I cannot get it. Here is a snippet of my rsyslog. Not sure how to get this to format right, it keeps wanting to mess with my paste. But here ...
1
vote
0answers
31 views

Tomcat 7: how to log x509 cert dn with AccessLogValve

I have Tomcat7 running on RHEL6 with mutual authentication using x509 certificates for the entire container. From the user point of view in the browser, everything seems to work fine with a cert ...
7
votes
4answers
16k views

Is it possible to create Custom Error Log in Apache 2?

I'd like to prepend the vhost name in my ErrorLog and then pipe it into a program I wrote. Is it possible to write Custom Error log format as it is with Access log?
0
votes
2answers
172 views

Windows 2003 Ntfs error Event 55 every 15 minutes

I have Windows 2003 with four errors every 15 minutes in my EventLog. The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume I ran chkdsk and ...
0
votes
1answer
20 views

Apache 2.4 + PHP CGI SAPI: separate access_log of requests hitting PHP processing?

It's hard to tell from Apache general access_log which requests are processed by PHP, because direct file hits muddy the waters. PHP FPM SAPI has a super useful access_log directive, but how do I get ...
0
votes
1answer
68 views

centos 7 : nginx givers error when enabling log

In CentOS 7, if I put the following line in my nginx.conf: error_log /usr/share/nginx/wordpress.itzgeek.com/logs/error.log; I get the following error when restarting nginx: nginx: [emerg] open() "/...
2
votes
1answer
85 views

Why isn't my SELinux logging anything?

I have a sneaking suspicion it has something to do with me mucking about with my rsyslog.conf, but I'm not 100% sure about that. I am running Centos 7, and SELinux has been working A-OK. However, I ...
2
votes
1answer
487 views

Amazon EC2 Ubuntu and upstart logging permissions

I have set up this upstart script on a Amazon Ec2 Ubuntu 12.04 TLS instance for executing a node.js application. The script uses setuid and setgid. It works fine without using setuid and setgid but ...
1
vote
1answer
77 views

Apache piped logging failing

I am trying to write a simple apache piped logging directive and I am getting a failure. I just want to grep out 200 response codes for centralizing my log files to ELK. This is the custom log format ...
0
votes
1answer
264 views

Sudo-io log output shows garbled text

We have set up in our servers sudoers config the following configuration in order to log the console output for auditing purposes Defaults:%administrators log_output Defaults logfile=/var/log/sudo ...
17
votes
5answers
632 views

Need a technique to coerce sysadmins to log the reason for accessing a prod server

My company requires that any time a user logs into a production server the reason that person logged in and the changes the user intends to make must be logged. My team wants to do this, but its easy ...
0
votes
0answers
126 views

SFTP logging chrooted users in OS X 10.11

I have been trying to piece together the exact setup for logging SFTP user activity for chroot jailed users on OS X 10.11 (El Capitan) from various links but I'm currently stuck. I have gotten as far ...