Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
40 views

One rsyslog machine accepting encrypted and non encrypted logs on different ports

I'm trying to setup an rsyslog server to accept input from 2 different ports, one encrypted for our non internal servers, and one open for our internal servers. The reason for needing this is that ...
1
vote
0answers
244 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
1answer
59 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
3
votes
1answer
2k views

How to catch Exceptions with PowerShell

I am getting this error. Get-WmiObject : The RPC server is unavailable. (Exception from HRESULT: 0x800706BA) At F:\Code\powershell\network_shutdown\TurnNetworkOff.ps1:19 char:26 + ...
1
vote
1answer
848 views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
-1
votes
2answers
59 views

Get domains accessed through a specific port [closed]

I'm developing a product and at a certain point I need to get domain names used to access some service on a specific port. Let's suppose I've a computers network with Internet access through a Linux ...
2
votes
1answer
98 views

IPTables custom log failing

I'm currently trying to split out some of my IPTables logging from kern.log into a file called iptables.log. Basically, I have several different adapters and I'm logging requests to port 80 on each ...
0
votes
0answers
69 views

Strip spaces from Squid access log {X-Forwarded-for} output

Is there a way that I can strip the spaces from the comma separated list of IP addresses in the header printed by X-forwarded-for? For example in my logformat I have used: %{X-Forwarded-for}>h ...
2
votes
1answer
88 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
0
votes
0answers
42 views

What can cause Apache to spend 30s to serve a request that normally takes less than 1s?

I am reviewing my Apache access log and came across this line: %T Method Request Protocol Status %I %b %O User-Agent 30 GET ...
1
vote
1answer
33 views

Simple web tool for viewing log

I'm developing a server deployment script that installs a bunch of stuff and generates a log in the process. I'd like users of the script to be able to view what's happening, on a web page, in real ...
2
votes
0answers
47 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
0
votes
0answers
68 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
2
votes
1answer
161 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
0
votes
0answers
225 views

Apache error log with django application showing “strange” error

My django code was previously in /var/www and all worked just fine. Yesterday, I decided to move the code in /root and keep the static files in /var/www for security purposes. I am using Django 1.6.5 ...
0
votes
1answer
85 views

Web access log analyzer for hosting providers

I have a nginx server set, it proxies request based on Host field. I have a common log for it, because per-host logging is done at the server, to which I do proxy_pass. So, is there any solution to ...
3
votes
3answers
407 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
0
votes
1answer
450 views

Weird stuff in server error log?

I have a PHP script that shuts down server processes based on their PIDs. It seems like it works well, however, I found this weird stuff in Apache's error log. Any idea on what it's saying? [Thu Jul ...
0
votes
0answers
62 views

Ubuntu apache error log not showing remote ips

If I view my apache error log located in /var/log/apache2/error.log it wont show the remote ip from the client who generated the error. Now it looks like: [Sun Jul 20 13:07:55 2014] [error] [client ...
0
votes
0answers
68 views

Server Error Logs - Folders and Files not found

I am receiving constant errors in the error_log which look like the following: [Tue Jul 22 10:28:18 2014] [error] [client 2001:8d8:906:7900::c:4cb5] File does not exist: ...
0
votes
0answers
263 views

Apache2 vhost config not working (Debian 7)

My Apache 2.4.9 vhost configuration is not working any more on Debian 7. I didn't make any changes and it seems to have broken. Going to my site shows the following in /var/log/apache2/error.log ...
0
votes
0answers
60 views

SQL Server 2014 Standard 2014 no access and bad preformance

My company looks after a server which is running SQL Server 2014 Standard Edition. The main application database on the server is replicated out to about 20 subscribers. The server has only been in ...
1
vote
1answer
384 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
0
votes
1answer
558 views

PHP error logging with AWS and EC2 [closed]

I'm setting up my site to run on AWS EC2. In some presentation for AWS services I saw that there are ways to store your PHP error logs in AWS S3 and analyze it with specific tools. Can't find this ...
2
votes
1answer
70 views

auditctl - logging when a user logs out

Is it possible to log when a user logs out of a session on Linux using Auditctl? My current audit.rules relating to users are: -w /etc/login.defs -p xwa -k login -w /etc/securetty -p xwa -k login -w ...
3
votes
1answer
1k views

Using Logstash as shipper?

We are shipping logs from servers and using THE logstash on each server for shipping. So we read logs from the glob "/root/Desktop/Logstash-Input/**/*_log". input { file{ ...
0
votes
0answers
13 views

Samhain log monitoring rules

The Samhain system offers a log correlation facility, but I can't find any rule sets written for it, or any references to the correlation facility. Are there any Logmon rulesets I can use with my ...
2
votes
1answer
193 views

How to make “\n” a new line in terminal?

I'm trying to view the HHVM log in a friendly way - currently it just comes out as a giant block of text. I've noticed there are various instances of "\n" in there. How can I get my terminal (gnome ...
2
votes
2answers
250 views

How to split logs according to patterns?

I would like to be able to split log files according to a pattern found in them. For example process all logs and look for /(\w+)\s to match /myresource but exclude /myresource/anythingelse, to ...
1
vote
1answer
833 views

Apache logging not working

After upgrading from 2.2.7 to Apache 2.4.9 seems that logging doesn't work properly. Only things which are logged are modsecurity and fcgid events, but nothing from Apache like file not found errors. ...
3
votes
1answer
40 views

Is there a way to determine the log format if given a “.log” file?

Is there a way to determine the kind of log (so that it can be parse correctly) if I have no prior information about the type (for eg. syslog, apache log, IIS log) of log it is? I am trying to write a ...
2
votes
3answers
102 views

Common login script

Few weeks ago I thought it would be a good idea to write a script which should send me an email whenever some user would log in into my server. So I came to a perfectly working script ...
-2
votes
1answer
1k views

Bash script to install packages and report to log file [closed]

I want to be able to log result of running bash script to file. Script itself is pretty simple, its used to install basic packages on fresh install machines and it scheme looks like this sudo apt-get ...
0
votes
2answers
284 views

View realtime list of connections to Postfix

I am running Postfix on a linux box with a couple hundred local users with mailboxes. Is there a way to monitor all incoming connections (SMTP) to the Postfix service? I.e. a live stream of "IP ...
0
votes
1answer
45 views

Rotate whole /var/log

I want to rotate the whole /var/log folder on my server every day so I have the /var/log folder and compressed files like "log.1.gz" which contains the whole directory. I can't found anything on the ...
-1
votes
2answers
79 views

How to monitor and list modified files server wide for brief periods of time?

I would like to, from time to time, enable server-wide file monitoring that will show me all files being modified, updated and created while I have it running and thus simply spewing forth a list of ...
0
votes
1answer
66 views

Apache https error log

We have a website running on Apache. Users can access part of it by HTTP and the other part by HTTPS. Apache is logging HTTP errors but not HTTPS errors. However, both log access. How can I solve ...
1
vote
1answer
1k views

When cron is completed How to get email notification and log in a file (both)

I am a Newbie to linux. I'm trying to figure out things. Can someone kindly help me how to combine these two commands? (1) Normally cron can results can be directed to a log file by editing crontab ...
1
vote
1answer
30 views

apache2: log requests from LAN to separate logfile

I would like to separate apache 2.2 log entries in 2 log files: requests from LAN (192.168.0.0/16) should go in a lan-access.log, and the rest in the default access.log How can I achieve that? I've ...
1
vote
1answer
119 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
0
votes
1answer
88 views

Prevent empty apache requests in access.log

In my access.log file I found a hundreds of lines of empty request like this mydomain.com:80 [ip-address] - - [02/Jul/2014:09:11:20 -0500] "GET / HTTP/1.0" 200 25491 "-" "-" mydomain.com:80 ...
2
votes
2answers
631 views

Trying to log with runit only returns 'unable to open supervise/ok'

Installed runit in Debian 7.4 in a Vagrant. My run script is working, but the moment I create a service/pants/log/ directory I start getting the following error: unable to open supervise/ok. My ...
0
votes
1answer
199 views

Strange GET requests on Apache and a lot of 404 errors every day

It's been about a month since I have been receiving strange requests to my website. It's self hosted on a VPS and some of those requests are noted by Google Analytics too. I really tried to figure ...
0
votes
0answers
76 views

Is it possible to use pgFouine with a log_line_prefix other than '%t [%p]: [%l-1] '?

I have a postgres serverlog with this setting: log_line_prefix = '%t - %u - %d - %r - %p - ' I would like to analyze this log using pgFounine, but pgFouine seems to require this setting: ...
1
vote
1answer
349 views

Correlating data within Kibana

I'm looking at aggregating data within the whole ELK stack (Elasticsearch/Logstash/Kibana) and I'm getting lots of good data from my windows systems. It's working very well, but when i get Windows ...
0
votes
0answers
94 views

ELSA configuration

I have an ELSA install I'm trying to get working on Scientific Linux 6.4, importing logs from a local OSSEC server (i.e. they're on the same server). I've followed the documentation such as it is, and ...
0
votes
0answers
36 views

No access or error logging on OpenSuse

I've got an Amazon ec2 instance running OpenSuse and I'm getting a white page of death on some of my php scripts but there's no error log in var/log/apache2. To my surprise, there's also no access ...
0
votes
1answer
58 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
-1
votes
1answer
133 views

Alerting on threshold crossing?

We are using logstash + elasticsearch + Kibana to parse, store and view our logs respectively. Now, we want a notification/alert when a threshold for a particular log or threshold for a particular ...
0
votes
0answers
15 views

How to get log of the addres that mod_rewrite is redirecting to?

I have defined a rewrite rule that is creating an 404. But I can't find any additional information about where the Apache is really looking for the file so it can't find it and also I don't see ...