Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
0answers
66 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
1
vote
0answers
79 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
0
votes
0answers
444 views

Should I Set pm.start_servers to Highest Value or Not?

I have the following settings on my PHP-FPM: pm.max_children = 256 pm.start_servers = 50 pm.min_spare_servers = 40 pm.max_spare_servers = 128 Even if I set it to higher value, I still get the ...
1
vote
1answer
85 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
0
votes
1answer
103 views

HAProxy: log-separate-errors shows all requests as error

I configured haproxy with option log-separate-errors to be able to log errorneous requests in a separate logfile. However, using that option, all requests are then being sent to the logfile, even ...
6
votes
2answers
169 views

How do server administrators like their server logs?

I'm a software developer and I'm building an HTTP server. Since I have no experience in hosting and managing servers, I have problems with balancing logging performance with usability. For example, ...
-2
votes
1answer
43 views

How to differentiate virtualhosts in Apache's log files?

I wanted to make a simple access statistic based on apache's access log, but I found out that I can't tell vhosts in the log file apart. I don't really want to make separate log files for each vhost, ...
2
votes
2answers
194 views

Log ssh sessions to rsyslog

How can I setup rsyslog to log commands typed in a ssh session? Just in case someone unauthorized ever accesses the system, I'd like to know what he did.
0
votes
0answers
51 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
1
vote
1answer
124 views

Pipe program output to rsyslog

I have a process running that writes it's output to a file, like this. processx > /var/log/processx.log 2>&1 How would I write/pipe/forward this to rsyslog instead (including the ...
0
votes
1answer
335 views

What is the function of the cimserver daemon?

I noticed in /var/log/messsages a process 'cimserver' was logging some interesting messages: Nov 27 15:33:37 lb-web-standby cimserver[2250]: Failed to deliver an indication: Cannot connect to ...
3
votes
3answers
622 views

Log commands executed over ssh

I would like to log all commands executed over SSH. Say, ssh something@server.com COMMAND I want to log "COMMAND" on server.com I did search extensively but could not find anything. There is ...
-1
votes
2answers
72 views

Python script to log name, date, and command of every command users have entered

I want to create a script, possibly in python, open to suggestions, it logs every command typed on the server. so it would log, user, timestamp and command. Is this possible?
1
vote
0answers
114 views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
1
vote
2answers
48 views

Rotatelogs rotating log files mid log entry

I have a c++ tool that outputs to STDOUT via printf i.e. printf ("%s\n", logline); I then pipe that to rotatelogs i.e. tool | rotatelogs /tmp/logs/log_%s 60 Everything works great, but ...
0
votes
1answer
41 views

preventing log_on_success in xinetd

I'd like to prevent a particular xinetd check from logging START/EXIT messages as it's a lot of logging I don't need. Is ther a way to set log_on_success = NONE or something? I'm able to find ways of ...
1
vote
1answer
101 views

Buffered nginx/varnish access logging to remote server

I need a way to measure how many times different files have been accessed and when. My setup consists of several low capacity servers spread out over the world running Varnish behind Nginx (for SSL ...
0
votes
1answer
292 views

Find out if user logged in to OWA / read his emails

Is there a way to find out, what is the last time a user logged in to OWA? (Actually, it would be even better to find out, if he read his emails, but I don't think that's possible.) If there are logs ...
0
votes
0answers
78 views

Archive IIS logs batch script

I have created the following script: forfiles -p "C:\Users\My_user\Desktop\wwwLogs" -s -m *.log -d -7 -c "cmd /c 7z a -mcu -t7z -r C:\Users\My_user\GNS3\myzip.7z @file" & forfiles -p ...
0
votes
1answer
33 views

syslog, kernel.warning and iptables innerworking

Im tinkering with my iptables logging at the moment. So I got my syslog to use another log file with tips from the web. basically you end up changing some chains and rules plus aan extra line in the ...
0
votes
2answers
733 views

Remove Iptables log from kern.log syslog messages

I'm having trouble with Iptables logs, i'm not able to get them out from kern.log, syslog and message files. I added two rules in rsyslog.conf which redirect my messages to an "iptables.log" file but ...
0
votes
0answers
61 views

Does OpenSSH server log any connection attempts?

When I logged to my VPS server I noticed an established connection on port 22. The IP address was not mine. The connection lasted about a minute and then was closed. I could not find any logs ...
1
vote
0answers
17 views

Tomcat Logging Multiple Days Behind

I have been noticing on our largish production deployment of Tomcat that some logs display this issue of being "multiple days behind" in the logging output. We have a 3rd-party vendor application ...
0
votes
0answers
20 views

nginx: access_log both compressed and uncompressed

In my "vhost" declaration I have: access_log /WEBSITE_DIR/logs/access.log.gz combined gzip; Problem is I get 2 files, an access.log.gz and an access.log Why? I want just the .log.gz one..
2
votes
1answer
84 views

log bash command centralized server or any auditd saas [duplicate]

I'm looking for a way to track our sysmin work, in the servers. Lets say sysmin 1 and sysmin 2 have access to any server but we need to make sure and track anything that they do in our server. ...
0
votes
0answers
70 views

Sleeping for a random interval in postrotate in logrotate

I'm having trouble with the following logrotate config. It doesn't seem to want to release that file once it has done it's rotate and I'm wondering it the sleep is messing with the restart. ...
0
votes
1answer
182 views

launchctl won't load php-fpm with this LaunchAgent

I'm trying to start php-fpm with launchctl. Running directly from the command line is no problem: $ /usr/sbin/php-fpm -p /Users/dmitry -e Here's the contents of ...
0
votes
0answers
75 views

Logrotate config for a laravel application

I have a laravel application which writes the log file names like log-apache2handler-2013-11-17.txt In my logrotate script, I am doing *.txt however this filename is going to change everyday, so by ...
2
votes
1answer
214 views

How to prevent logging of duplicated error messages in rsyslog?

After performing a software update, I got hundreds of errors that read like this: 2013-11-11 19:00:00 err user audispd - queue is full - dropping event Not sure if this is a bug, but it is rapidly ...
0
votes
1answer
711 views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
2
votes
2answers
53 views

View headers of HTML requests to apache

Is there a good way of viewing a detailed version of incoming requests to apache? At the minimum I'd like to check for the existence of a specific header and check its value. Requests are not coming ...
0
votes
1answer
81 views

Adding a transaction ID to ruby-on-rails logs

We have a RoR app (rails version 3.2.15 right now). As it has been getting busier, the log-files it's producing are becoming less and less useful for troubleshooting. When they come in like this, it's ...
5
votes
1answer
118 views

How does logrotate handle concurrency?

In the case that logrotate runs the same time as the log file is being updated, what will happen? Will the new log be rotated into a historical log file? Or it will stay in the current log file? ...
0
votes
1answer
70 views

weird POST request in IIS logs

I noticed weird log entries (unless there's something i don't understand) in my IIS (7.5) logs. it's an online dictionary with requests ( user friendly url rewriting ) and most of them are GET. ...
0
votes
0answers
138 views

Multiple syslog-ng destination loghosts

I am currently forwarding logs to one remote destination loghost. filter f_windows { program("Security-Audit*"); }; log { source(r_sys); filter(f_windows); destination(d_windows); }; log { ...
1
vote
1answer
52 views

Logging sshfs reads + writes - Possible?

We use sshfs in quite a few situations. We were wondering if there was a way to log the read / writes made to the sshfs mounts we have so we could optimize things on our local side (eg: tweaking ...
0
votes
0answers
18 views

Logging Apparently Not Working - Can't Set Configure Replication

I'm using a tutorial to set up a master (single) slave setup. When I run the command show master status; I get Empty set (0.00 sec). I have done a lot of research and believe that the log file I have ...
1
vote
1answer
66 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
0
votes
1answer
43 views

Logging remote commands sent during SSH session, so the log would be unencrypted

I connect to server A (running OpenSSH server in Linux OS) using Putty: localhost% putty.exe A How to cause the SSH server to log the commands sent from localhost in unencrypted manner. Thanks
0
votes
0answers
37 views

How can I use `SetEnvIf` to clear an Apache2 environment variable?

In my apache2 configuration I've got these lines: SetEnv log_everything # Create the environment variables based on access requests SetEnvIf Request_URI "^/orders/.*$" download_access ...
0
votes
1answer
51 views

Logging violations of rules in limits.conf

I am trying to log the details of the programs that where failed due to the limit cap defined in the limits.conf. My initial plan was to do it using the audit system. The idea was to track the system ...
0
votes
1answer
671 views

Apache logs other user read permissions [closed]

We have several developers who maintain the system and I want them to easily read the log files in /var/log/httpd without needing root access. I set the read permission for 'other' users but when I ...
0
votes
4answers
498 views

remote server log viewer/analyzer

I have an rsyslog server running Ubuntu 12.04 which stores logs from different clients also running Ubuntu 12.04. Now I want to view those logs from my machine which also runs Ubuntu 12.04. One way ...
3
votes
1answer
3k views

logstash (or graylog?) vs nxLog to collect event logs and csv logs

I am current investigating the possibility to consolidate logs from multiple servers using logstash (or graylog2). I am still a bit confused about the difference logstash and graylog. So far I ...
0
votes
1answer
113 views

Centralized logging server failover

I'm planning a centralized log server for 200+ Linux boxes, rsyslog on both the client and server side. Here are my requirements: Do not log anything locally on Linux boxes and send everything to ...
0
votes
2answers
56 views

Recommended Setup

I have been running into issue with my MSSQL Database setup with speed. Here is my scenario. About 100M Rows Average: 1k Updates Per Second Hard Drives: RAID 10 SSD MDF --Active Time: 0 Log ...
0
votes
1answer
87 views

Suspicious Process*User:www-data EXE:/usr/sbin/php5-fpm

I have csf installed on Debian server which uses nginx+php5-fpm and see a lot of these lfd[23293]: Suspicious Process PID:16998 PPID:16122 User:www-data Uptime:824 secs EXE:/usr/sbin/php5-fpm ...
1
vote
4answers
147 views

Count requests from access log for the last 7 days

I would like to parse an access log file and have returned the amount of requests for the last 7 days. I have this command cut -d'"' -f3 /var/log/apache/access.log | cut -d' ' -f2 | sort | uniq -c | ...
0
votes
0answers
84 views

How to enable Likewise-open debugging / logging?

I have a Problem using Likewise to join a Ubuntu Server 12.04 LTS Server to a Domain an Login in users via ssh using sso. I have searched the internet but so far did not find anything about how to ...
2
votes
0answers
165 views

Amazon EC2 Ubuntu and upstart logging permissions

I have set up this upstart script on a Amazon Ec2 Ubuntu 12.04 TLS instance for executing a node.js application. The script uses setuid and setgid. It works fine without using setuid and setgid but ...