Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

16
votes
4answers
13k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
0
votes
1answer
379 views

Logstash: Failed to flush outgoing items

First of all, I'm a total newbie to logstash. Despite the fact that I've managed to achieve some basic logging (trying to parse an apache log file without the build in COMBINEDAPACHELOG). However, I ...
3
votes
1answer
614 views

Remote rsyslog only writing logging data to /var/log/syslog and not custom logfiles

I'm having a problem setting up rsyslog to log remote logging data to a specific file. I have two Windows Server 2008 boxes that each have a C# application using NLog.Targets.Syslog which log their ...
0
votes
1answer
748 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
4
votes
4answers
11k views

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by ...
1
vote
2answers
288 views

Checkpoint FW1 logging

When I view the logs created for my checkpoint fw1, does it log connections on receiving the syn, or does it wait till the three way handshake completes? If it logs after the syn, is there anyway of ...
4
votes
6answers
4k views

How to find “growing” files inside a linux system

I have a server that is constantly losing disk space so I reckon there must be some logs that I'm not aware of. What is a good way to locate files that are constantly increasing in size?
0
votes
2answers
235 views

How do I view my website stats via cmd line? [closed]

I use Wordpress for my website. Is it possible to use SSH or such to view the stats on my website? Via cPanel, I can see latest visitors, logs and errors. I just want to be able to view them via ...
1
vote
0answers
17 views

Flush IIS7 logs manually on remote machine

I know how to flush IIS7 logs when I'm logged on some machine: netsh http flush logbuffer How can I do it on another machine?
0
votes
0answers
31 views

Cryptic NGINX access log entries [duplicate]

While reading my nginx access and error logs I stumbled upon some rather unusual entries. 127.0.0.1 - - [11/Feb/2015:15:08:25 +0100] ...
1
vote
1answer
110 views

Fluentd not writing apache access log to mongodb

I'm following the instructions from this link to write apache access logs to mongo db- http://docs.fluentd.org/articles/apache-to-mongodb. But nothing is getting written to mongo DB. I'm checking ...
0
votes
0answers
195 views

Lockfile creation failed

I got a plain-text logfile (not lock file) in /var/log what I cannot open with: lockfile creation failed: exceeded maximum number of lock attempts I wonder what causes this and how can I unlock it ...
5
votes
2answers
8k views

Why is Syslog Not Writing Logs To The Designated Files?

I've been trying to route Apache's logs through Syslog (for some reason log rotation had stopped, and using Syslog and logrotate seemed a reasonable solution). I have sent Apache's error logs to ...
2
votes
2answers
398 views

How do you configure runit logging

I am having trouble with setting service with proper logging using running. Here is a brief overview of files and scripts I created according to runit's documentation and other resources I found in ...
6
votes
4answers
2k views

How to log the URL scheme (http / https) in Apache?

nginx has the $scheme variable usable in its log_format lines. %H is the request protocol (e.g. "HTTP/1.1"). How can I do the same with Apache?
0
votes
3answers
55 views

Log which combines log files from three different servers

We have a three-server config with each server running nginx, and rails via Mongrel. Each rails installation has its own set of log files, in it's own 'log' folder, which is just a regular folder on ...
7
votes
3answers
5k views

Secure logstash and elasticsearch

I'm considering running logstash on my prod server (simple install. http://logstash.net/docs/1.1.13/tutorials/getting-started-simple) and set kibana to access logs. My concern is: how to secure my ...
0
votes
1answer
19 views

Find the VirtualHost that got hight traffic from multiple log files

Sometimes my Apache server get high load. I have a lot of VirtualHost, each one having its own log file. The structure is like this /var/www/httpd-logs/virtualhost.com.access.log What command could ...
2
votes
0answers
50 views

gzip_ratio not printing in nginx logs

I'm configuring the nginx access_log to output in JSON format to use with other tools. The data I want includes info about the compression. I have gzip on, but the only thing I'm getting for the ...
2
votes
1answer
413 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
0
votes
1answer
43 views

Make error_log readable by apache

Setup: CentOS 6.6, Apache 2.2.15, php 5.5.21 I 'm building a php script that displays the content of the /var/log/httpd/error_log file. Unfortunately, it does not work. The error message states: ...
2
votes
1answer
26 views

Splitting MySQL General Query Log by Clients

I would like to know a solution to splitting very large MySQL general query logs by specific clients that have accessed the server. Ideally a separate log will be created for each client. Thanks
1
vote
2answers
158 views

How can I get metrics such as incoming and outcoming traffic with Apache servers?

Suppose a network consisting of hubs A, B, C, D ... and X. I am looking for ways to visualize how users use the network such as incoming, outgoing and other metrics. In Apache logs, I can see some ...
2
votes
3answers
2k views

Akamai log processing

I'm digging through Akamai logs, downloading excel sheets, and then manually joining them so that I can do sorting of data to find top videos and referrers. Are there any tools you know of to help ...
1
vote
3answers
2k views

Apache error logs - how to view as web page (for internal intranet server) when root access only usually?

I'd like to be able to display the error_log as a web page so that a colleague (without root access) can view this for troubleshooting their PHP development. On my CentOS 5.x machine the error log is ...
6
votes
4answers
216 views

How should applications be developed for easy deployment?

I work for a company that deliver distributed control systems for various industries. We find that IT Admin skills vary to a great degree both in terms of skills and interest. We have everything from ...
1
vote
1answer
78 views

Rotate log files with timestamp in file name

I have a log directory that my app writes into. It creates a log file like this: 2015-01-22-10-full-activity.log 2015-01-22-11-full-activity.log 2015-01-22-12-full-activity.log ...
0
votes
0answers
103 views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
0
votes
0answers
17 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
0
votes
1answer
55 views

Is Lync chat, or Persistent Chat a viable alternative to email based alerts? [closed]

I'm dealing with an envrionment that mostly uses email for alerting. The issue I have is that all emails must be journaled by policy. In addition, each email is replicated via SMTP using SMTP ...
0
votes
0answers
81 views

tomcat not logging to catalina.out

We have a server running a tomcat app that's not logging to catalina.out, we've checked the filesystem permissions, everything looks fine there. the logging.properties is the same (md5sum) as on ...
0
votes
1answer
27 views

Detailed logging of OS X [closed]

The company I work at is going from small business to medium along with new HR requirements. We mainly have OS X workstations. I'd like a solution where all of these workstations log to a local ...
2
votes
1answer
547 views

How to get php-fpm to log to stdout / stderr when running in a docker container

I have php-fpm in a docker container and in the Dockerfile I edit the fpm config file (/etc/php5/fpm/pool.d/www.conf) to set up access logs to go to /var/log/fpm-access.log and error logs to go to ...
1
vote
2answers
74 views

Why does my Apache access log timestamp sometimes go backwards?

I noticed that in my Apache log (actually Oracle's branded HTTP Server, which is really Apache) the timestamp of the lines sometimes goes down, instead of up. Here is an example: 1.2.3.4 - - ...
0
votes
1answer
33 views

How do I find out when a MySQL root password was last changed?

I have looked for solutions to this. I am able to change it, but I need to find out when it was last done and preferably also seeing who was logged in when it was done. Need proof for a security ...
1
vote
1answer
203 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
3
votes
3answers
501 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
2
votes
4answers
488 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
0
votes
1answer
41 views

amavis log email hash

I want to log a hash value of all emails handled by my mail-server. I found in amavis README.customize.gz the following line: The substitution text for the following simple macros is built-in: [...] ...
1
vote
1answer
774 views

Nginx: How to use docker log collector when nginx is running under supervisord

The official nginx docker image (Dockerfile) uses the following trick to hand off its logs to stdout and stderr so that they are captured by the docker log collector and viewable using docker logs ...
0
votes
0answers
71 views

Apache: Regex to log only last IP in X-Forwarded-For

I'm attempting to set up Apache 2.2's logging to record the last IP passed to it by the X-Forwarded-For header. I want to record the last IP from the X-Forwarded-For header if it exists and the ...
0
votes
2answers
174 views

Log Analyzer for IIS logs

I have plenty of programs that will parse IIS access logs and save them in a relational database (MS SQL or MySQL). I am looking for a good interface that will allow me to query those logs. For ...
0
votes
0answers
10 views

Side effect of warning ip address could not be resolved name or service not known mysql [duplicate]

I setup Master Slave replication on two servers. It is working fine. But when I was reading error logs I found out the following warning - warning ip address could not be resolved name or service not ...
0
votes
2answers
53 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
0
votes
2answers
367 views

Output php mail calls to log file

This question relates to the question found here: Find the php script thats sending mails Trying to do the exact same thing but can't get the log to output what I need. Not too experienced with ...
0
votes
0answers
29 views

BIND logging to find “resolved address”

Currently my logging is set up like this : logging { channel query_log { file "/var/log/named/query.log"; severity info; }; category queries { query_log; }; Which results in: client ...
1
vote
1answer
69 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
2
votes
3answers
28 views

Use iptables to log connections except for two addresses

We would like to use iptables to log all network connections except if the connecting address is A.B.C.D or the connecting address is E.F.G.H. These two addresses cannot be combined into a single CIDR ...
0
votes
0answers
69 views

Python logger stops logging

On an application server (CentOs 6.4), python's native logger will stop writing to a log file after about 48 hours of continuous operation. This started occurring when we added fluentd (td-agent) to ...
0
votes
2answers
132 views

How to pipe all log files entries to a database on linux?

I am thinking about building an application that would read my different server log files, save the parsed data to a database, and then remove the line from the log file. This is my programer side ...