Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
1answer
196 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
1
vote
2answers
93 views

Sent mail/login log for roundcube webmail

Does roundcube webmail have a log for logins, or for sent mail? I searched everywhere but could only located the "error log" directory in roundcube, not one for logins or for sent mail. I'm trying to ...
1
vote
2answers
2k views

How to log ssh client connection/command?

I would like to know how i could log SSH command lines a user is using on a server. For exemple, if the user Alex on my server is doing the following set of commands : $ cd /tmp $ touch myfile $ ssh ...
1
vote
1answer
54 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
0answers
134 views

Using OSSEC to monitor windows services

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
0
votes
1answer
81 views

My local MySQL server was temporary down for unknown reasons

My local MySQL server 5.5.38 (on CentOS 6.5) has been temporary down and the mysql log file was filled with this kind of details: This could be because you hit a bug. It is also possible that this ...
0
votes
2answers
142 views

URL logging on DNS server?

Following this setup http://www.g-loaded.eu/2010/09/18/caching-nameserver-using-dnsmasq/ I was able to configure a DNS resolver server using dnsmasq for my network. The setup works correctly and logs ...
0
votes
0answers
103 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
1answer
47 views

GET Request for /server-status every second [closed]

I'm using an Linux server running Apache and Plesk and in the access_log, I'm seeing the following every 1 second; 127.0.0.1 - - [08/Sep/2014:14:20:06 +0000] "GET /server-status HTTP/1.1" 200 15843 ...
0
votes
2answers
86 views

Block certain GET request in Apache log

Since recently I have a VPS. Now it seems that there is a domain not owned by me that has DNS records pointing to my IP. Because of this my Apache (2.4) logs are flooded with some kind of GIT request. ...
2
votes
2answers
103 views

Method to log amount of transmitted data per each IP address in linux

I am looking for a method in linux to log the amount of data transmitted (received and sent separately) for every single IP address to which the data was sent to or received from. These statistics ...
0
votes
1answer
215 views

How To Tell Apache To Not Log Certain Requests In Its Access Log

I am trying to set a SetEnvIf variable in apache2 and exclude it in CustomLog in order to stop my logs from filling up. I want to match a regex and also specific IPs. I tried to follow the ...
1
vote
2answers
292 views

How do you configure runit logging

I am having trouble with setting service with proper logging using running. Here is a brief overview of files and scripts I created according to runit's documentation and other resources I found in ...
0
votes
2answers
209 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
-1
votes
1answer
95 views

Timer_EntityBody IIS Error

I'm getting the Timer_EntityBody error in my HTTP error log. I'm familiar with what it means what I'm not familiar with is what does the preceding 4 mean in: - 4 Timer_EntityBody
0
votes
0answers
125 views

No Logged in php5-fpm.log File

I'm using ubuntu 14.04 and by default, php5-fpm.log is enabled under /etc/php5/fpm/php-fpm.conf. But I don't see any logged specially warnings like the following: WARNING: [pool web8] child 76743, ...
1
vote
1answer
97 views

Tomcat: Log the equivalent of SSL_CLIENT_S_DN

In Apache HTTPD it is possible to create custom request logs which include the value of SSL_CLIENT_S_DN. Since the site requires mutual authentication (client certificates) this provides a good audit ...
0
votes
1answer
84 views

execute command in ErrorLog and log to a file in parallel

I try to use apache2gelf to send my error.log information to a graylog2 server. To use that tool I have to change the ErrorLog setting to: ErrorLog "|| /path/to/errorlog2gelf.py --vhost example.com" ...
0
votes
0answers
84 views

IIS 7 Advanced Logging Filters

I'm trying to separate normal from mobile traffic using Filtering in IIS Advanced Logging, but it is not working. I have one definition with: ('User Agent' Equals '.*android.*') and the "Enable as ...
0
votes
2answers
36 views

Access logs of sftp on centos

Is it possible to log the sftp logged in informations (Who accessed, when and from where ) Like which sftp user have logged on to the file server , This may also contain information such as ip ...
0
votes
1answer
171 views

Apache2 internal server error not being logged

I'm doing some web development with the Laravel framework, and I have my jQuery set up so that it sends a request on click of a button to a PHP file, which then returns the result back to my jQuery. ...
3
votes
1answer
349 views

Need help grepping postfix log

I'm trying to search for an unknown string (Message ID) in a log based on a known string (recipient address), and then grep the unknown string to output the entire relevant log information. I'm able ...
3
votes
0answers
400 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
0
votes
2answers
580 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
35 views

Does enabling more IIS logging fields consume resources?

It seems that IIS7 doesn't enable the bytes sent and bytes received fields in its logs by default. I would like to enable them so I could watch bandwidth consumption of individual sites, but my ...
-2
votes
2answers
96 views

FTP and SFTP logs track in CentOS

How it is possible to track the changes made to a directory using tools like FileZilla or XFTP ? because we found some files suddenly got missed from server, in history also nothing was found so ...
1
vote
1answer
101 views

logrotate: neither rotate nor compress empty files

i have just set up an (r)syslog server to receive the logs of various clients, which works fine. only logrotate is still not behaving as intending. i want logrotate to create a new logfile for each ...
0
votes
1answer
33 views

What is a name of a technique of deduplicating and summarising of logs?

So for example, you have a stream of logs coming in somewhere (a syslog server, forwarded Windows event logs, "Typical Poor Sysadmin's Mailbox", a Splunk indexer, whatever...) Imagine this stream of ...
0
votes
0answers
42 views

How do i set regex variable as env variable and use it to conditionally log?

This is what I have in my apache conf. I am setting the first part of the request uri as env varibale. It is always going to be client1 or client2. Now based on that I need to log differently (pass ...
1
vote
1answer
454 views

Monit cannot connect to Solr/Jetty instance

I have my Solr/Jetty up and running well on Ubuntu 12.04. I am trying to hookup my monit conf to monitor it, but it is having trouble connecting to the service. I have Solr running on port 8983 and ...
0
votes
0answers
107 views

Nginx shows no user agent string

I have been dealing with an issue on one of my servers for quite a while now. In short, the server receives massive spikes in load - up to 50 - but the site gets almost no traffic. I know this can be ...
6
votes
1answer
2k views

How can I let nginx log the used SSL/TLS protocol and ciphersuite?

My goal is to ensure proper security for clients connecting to my nginx. I'm following Mozilla's guide to configure TLS properly on my nginx installation, but I don't have an overview of the actual ...
3
votes
0answers
163 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
0
votes
2answers
160 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
3
votes
2answers
345 views

mod_fcgid: can't apply process slot after software upgrade

I'm on a shared hosting plan with a Wiki and a Bulletin Board installation. After upgrading the Wiki to the latest release my users are not able to upload files with the integrated "media manager" ...
0
votes
0answers
224 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
0
votes
0answers
53 views

One rsyslog machine accepting encrypted and non encrypted logs on different ports

I'm trying to setup an rsyslog server to accept input from 2 different ports, one encrypted for our non internal servers, and one open for our internal servers. The reason for needing this is that ...
1
vote
0answers
325 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
1answer
63 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
3
votes
1answer
3k views

How to catch Exceptions with PowerShell

I am getting this error. Get-WmiObject : The RPC server is unavailable. (Exception from HRESULT: 0x800706BA) At F:\Code\powershell\network_shutdown\TurnNetworkOff.ps1:19 char:26 + ...
1
vote
1answer
1k views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
-1
votes
2answers
61 views

Get domains accessed through a specific port [closed]

I'm developing a product and at a certain point I need to get domain names used to access some service on a specific port. Let's suppose I've a computers network with Internet access through a Linux ...
2
votes
1answer
121 views

IPTables custom log failing

I'm currently trying to split out some of my IPTables logging from kern.log into a file called iptables.log. Basically, I have several different adapters and I'm logging requests to port 80 on each ...
0
votes
0answers
97 views

Strip spaces from Squid access log {X-Forwarded-for} output

Is there a way that I can strip the spaces from the comma separated list of IP addresses in the header printed by X-forwarded-for? For example in my logformat I have used: %{X-Forwarded-for}>h ...
2
votes
1answer
102 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
1
vote
1answer
40 views

Simple web tool for viewing log

I'm developing a server deployment script that installs a bunch of stuff and generates a log in the process. I'd like users of the script to be able to view what's happening, on a web page, in real ...
2
votes
0answers
56 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
0
votes
0answers
79 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
2
votes
1answer
180 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
0
votes
0answers
237 views

Apache error log with django application showing “strange” error

My django code was previously in /var/www and all worked just fine. Yesterday, I decided to move the code in /root and keep the static files in /var/www for security purposes. I am using Django 1.6.5 ...