Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

5
votes
1answer
1k views

Apparmor denies ntpd access to its own logs

ntpd complains that it cannot access its own logs # ntpd -qgddd ... 11 Sep 16:23:00 ntpd[7262]: can't open /var/log/ntpstats/peerstats.20130911: Permission denied ... 11 Sep 16:23:01 ntpd[7262]: ...
4
votes
1answer
999 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
4
votes
1answer
718 views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
4
votes
1answer
441 views

Find out what fields are available to IIS 7 Advanced Logging from Modules

You can install the Advanced Logging module for IIS 7. Once installed you have the option to define new fields from several different sources. One of those sources is other modules. What I am unable ...
3
votes
1answer
189 views

How to find size of atomic write for nginx access log buffer?

This link says: The buffer size must not exceed the size of an atomic write to a disk file. For FreeBSD this size is unlimited. How can I find size of atomic write on my server? Is there any ...
3
votes
1answer
150 views

How to do proper error handling in a push setup?

I am currently building a lab environment to get a feeling on what DSC can accomplish and where the limits are. We have a requirement to push out one-shot configurations to group of nodes based on ...
3
votes
1answer
1k views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
3
votes
1answer
132 views

How can I configure IIS to save log files in a given folder without creating a W3SVCXXX folder under it?

You can configure IIS to save its logs in any folder you want; however, even if you configure this setting at the site level, it will always create another folder under the one you choose, called ...
3
votes
1answer
1k views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
3
votes
1answer
420 views

reconstructing shell session from a typescript

There is a bunch of tools like 'script', 'screen', 'ttyrec' which allow record content of shell sessions. By design these tool records everything displayed on pty, including control characters. ...
3
votes
1answer
560 views

IIS6 Log time recording problems

On three separate occasions on two separate servers at nearly the same times, 6.9 hours seemingly went by without any data being written to the IIS logs, but, on closer inspection, it appears that it ...
2
votes
1answer
71 views

How to log execution of a specific binary/script using auditd or other

I have the following situation in hand. I have one or more specific execuatble files in /usr/bin, I will call one /usr/bin/execute , and they may either be a compiled binary or a script file, such as ...
2
votes
1answer
26 views

Can Apache Access Logs be kept separated & also combined as well too?

My question may be a bit confusing, and sorry for that. Here is what i need: Well, i have (let's say) 3 Websites hosted on one Apache (which are defined inside each VirtualHost settings. Then i ...
2
votes
1answer
23 views

sles/opensuse os installation log

Is it possible to keep installation log off all events, tasks, say running commands, etc.. while installing SLES/openSUSE (or maybe another linux)? It's not a problem lookup info in already running ...
2
votes
1answer
75 views

Splitting MySQL General Query Log by Clients

I would like to know a solution to splitting very large MySQL general query logs by specific clients that have accessed the server. Ideally a separate log will be created for each client. Thanks
0
votes
0answers
51 views

Folder keeps getting deleted and I can't find out why

I have a Joomla based website running on CentOS, Apache, PHP, MySQL. I am using plupload file uploader to upload the files. I'm uploading the files to /tmp/uploads directory where they are processed ...
0
votes
0answers
523 views

sending tomcat catalina.out to syslog

we're on tomcat 6.4 on centos. I've been trying to get the catalina.out logs in tomcat to syslog. For reasons it's very important that I don't send the raw logs, they have to be tagged with OURTOMCAT: ...
0
votes
0answers
171 views

Can't setup Apache CustomLog to directly import in Piwik

I configured apache just like this article (https://github.com/piwik/piwik/tree/master/misc/log-analytics#setup-apache-customlog-that-directly-imports-in-piwik) explains but nothing happens during ...
0
votes
0answers
30 views

Error Reporting for File Copy Process

I have a rather complex process in place which runs a java program to retrieve service records from our CRM and export them into an excel spreadsheet, which gets placed onto a server in our data ...
0
votes
0answers
869 views

Lockfile creation failed

I got a plain-text logfile (not lock file) in /var/log what I cannot open with: lockfile creation failed: exceeded maximum number of lock attempts I wonder what causes this and how can I unlock it ...
0
votes
0answers
653 views

Logging user and power activity Synology DiskStation (v5)

Is there any practical way of logging user activity and power state changes on a Synology NAS? I'm not looking for anything very extensively detailed, but I would like to log e.g. Video Station usage ...
0
votes
0answers
95 views

HPUX Apache 2.2.15 not starting?

Ive been looking for 2 days anything similar or related to the error that im getting for my apache. Im using 2.2.15 which is the version allowed by my company policies to install in an hpux server, ...
0
votes
0answers
132 views

Solaris SSH Server Log Destinaton IP Address

To stay compliant, it's required that my Solaris 10 SSH server log the destination IP address in addition to the existing port logging. Is it possible to add the destination IP address in the authlog? ...
0
votes
0answers
967 views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
0answers
399 views

MySQL exits without any output

Having a strange issue. Some time ago MySQL exited suddenly when I was creating a table (I think), and I shelved the issue until now. It seems to start, but nothing happens and it exits: 141031 ...
0
votes
0answers
165 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
0answers
149 views

Nginx shows no user agent string

I have been dealing with an issue on one of my servers for quite a while now. In short, the server receives massive spikes in load - up to 50 - but the site gets almost no traffic. I know this can be ...
0
votes
0answers
446 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
0
votes
0answers
508 views

Apache2 vhost config not working (Debian 7)

My Apache 2.4.9 vhost configuration is not working any more on Debian 7. I didn't make any changes and it seems to have broken. Going to my site shows the following in /var/log/apache2/error.log ...
0
votes
0answers
74 views

SQL Server 2014 Standard 2014 no access and bad preformance

My company looks after a server which is running SQL Server 2014 Standard Edition. The main application database on the server is replicated out to about 20 subscribers. The server has only been in ...
0
votes
0answers
43 views

No access or error logging on OpenSuse

I've got an Amazon ec2 instance running OpenSuse and I'm getting a white page of death on some of my php scripts but there's no error log in var/log/apache2. To my surprise, there's also no access ...
0
votes
0answers
94 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
0
votes
0answers
177 views

OpenTSDB Web interface showing nothing other than header and footer

NOTE: I moved the question from stackoverflow to serverfault as this question didn't attract attention. I have a temporary OpenTSDB and hbase hosted on a aws micro server. http://54.72.180.169:4242/ ...
0
votes
0answers
18 views

How can we log file download successes and failures from IIS7?

We have a dedicated server: IIS7 Windows Server 2012 R2 Standard This servers sole use is to serve files ~120MB in size. We're looking for the simplest way to log how many downloads were: ...
0
votes
0answers
25 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
0
votes
0answers
98 views

Making changes in Loglevel httpd.conf of apache server?

I am working on windows-7 Visual studio 2008,According to Apache: Configure "LogLevel debug" for certain modules only? i am making changes in the loglevel of configuration file I am giving ...
0
votes
0answers
698 views

Should I Set pm.start_servers to Highest Value or Not?

I have the following settings on my PHP-FPM: pm.max_children = 256 pm.start_servers = 50 pm.min_spare_servers = 40 pm.max_spare_servers = 128 Even if I set it to higher value, I still get the ...
0
votes
0answers
157 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
0
votes
0answers
56 views

nginx: access_log both compressed and uncompressed

In my "vhost" declaration I have: access_log /WEBSITE_DIR/logs/access.log.gz combined gzip; Problem is I get 2 files, an access.log.gz and an access.log Why? I want just the .log.gz one..
0
votes
0answers
20 views

Logging Apparently Not Working - Can't Set Configure Replication

I'm using a tutorial to set up a master (single) slave setup. When I run the command show master status; I get Empty set (0.00 sec). I have done a lot of research and believe that the log file I have ...
0
votes
0answers
177 views

Rsyslog filter packets from input file before sending to remote rsyslog host

I have my rsyslog configured to send logs from a logfile to a remote host $InputFileName /var/log/app/app.log $InputFileTag app $InputFileSeverity info $InputFileFacility local7 ...
0
votes
0answers
69 views

How to configure logs in Squid3

I want to configure the access.log on squid so I can read the reports with SARG, but I don't really know how to to it, as uncommenting this line #Default: access_log /var/log/squid3/access.log squid ...
0
votes
0answers
284 views

Apache logs or tcpdump slow loris

i know about the question : How can I detect Slowloris? but that does not apply. Now i have a big server that receives more then 10.000 events on the IDS per each 10 minutes, and i have suffered in ...
0
votes
0answers
44 views

Active Directory Access logging

We are running Active Directory on windows server 2012 and are looking to create a report of users daily usage by logging the login time and log out time of each user. The aim is to database these ...
0
votes
0answers
109 views

Live access logging for many nginx websites

I'm running a couple of dozen sites on a server for a client. This number moves around pretty fluidly as they test ideas and we have a flexible configuration to host things. The problem comes in that ...
0
votes
0answers
51 views

windows log logon activity: is it safe to rely on windows audit?

I found a guide that teaches, through turning on the Audit of the System Log on Activity via gpedit.msc, how to read the logon activity via eventvwr.msc Is this way of monitoring fully comprehensive? ...
0
votes
0answers
403 views

How to get range time a log file in shell script

How to get range time using awk command? I have two variables $from and $to with format (hh:mm:ss) I want to get the range time between two variables. For example: get all range time between: ...
0
votes
0answers
67 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
0
votes
0answers
143 views

404 errors for php files not logged in error_log

When I open a url with a non-existent php file on my site, for example : http://site.com/nonexist.php it logs a 404 error into the apache error log, but it doesn't show the requested url, it just ...
0
votes
0answers
183 views

Filter rsyslog message by message id?

I'm trying to filter out some windows logs, that from program named Security-Auditing and with a message id 4624, but it doesn't work: if $programname == 'Security-Alert' and $msgid == '4624' then ...