Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

5
votes
1answer
176 views

iptables is occasionally logging MAC addresses. Why?

I have logging enabled on specific iptables packet drops. The rules I'm using are IP/port related only and this is what I can easily see in the logs, however occasionally I do get MAC address ...
5
votes
1answer
1k views

Apparmor denies ntpd access to its own logs

ntpd complains that it cannot access its own logs # ntpd -qgddd ... 11 Sep 16:23:00 ntpd[7262]: can't open /var/log/ntpstats/peerstats.20130911: Permission denied ... 11 Sep 16:23:01 ntpd[7262]: ...
4
votes
1answer
99 views

IIS 7.5 not rolling over logs hourly

I have six IIS 7.5 web servers deployed using a Shared Configuration. The properties for the logging in the configuration are set to log Per Site, W3C, and on an hourly schedule: For five of the ...
4
votes
1answer
1k views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar /opt/...
4
votes
1answer
147 views

How can I configure IIS to save log files in a given folder without creating a W3SVCXXX folder under it?

You can configure IIS to save its logs in any folder you want; however, even if you configure this setting at the site level, it will always create another folder under the one you choose, called ...
4
votes
1answer
1k views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
4
votes
1answer
468 views

Find out what fields are available to IIS 7 Advanced Logging from Modules

You can install the Advanced Logging module for IIS 7. Once installed you have the option to define new fields from several different sources. One of those sources is other modules. What I am unable ...
0
votes
0answers
18 views

How to make name resolving faster when querying a huge iptables log file

My daily iptables log files are 1-1.5 GB, which as you see is a huge size. And the amount of logs will get more and more each day. I often need to extract source and destination ip addresses, resolve ...
0
votes
0answers
18 views

Log specific info from request in Apache

I need to login whether X-PDONE-SESSION-ID come on each request being made to my server or doesn't. First I have enabled mod_forensic_log and I setup this at my virtual host logging: <VirtualHost *...
0
votes
0answers
67 views

Solaris run rsync after logadm

I'm trying to get this logadm configuration running. '/dir1/*/*/alert*.log' -C 8 -c -s 10m -t '$file_%Y-%m-%d' -z 0 -a '/usr/bin/rsync -qp /dir1/*/*/alert*.gz root@192.168.0.10::alert_logs/$(...
0
votes
0answers
55 views

how to set up logging-files ubuntu 14.04

Im having some trouble to correctly configure my mail logs. How can i configure the following needs? I have a mail server and the log result should be 7 different files mail.sunday, mail.monday, mail....
0
votes
0answers
115 views

Fetch logstash-forwarded auth logs from elasticsearch database

In my logstash-forwarder, i have configured to ship /var/log/auth.log messages under the files section as, { "paths": [ "/var/log/syslog", "/var/log/auth.log" ], "...
0
votes
0answers
12 views

How to log any connection request from statically banned IPs with shorewall?

So I'm banning IPs with shorewall drop IP. How do I get shorewall to log connexion requests from those IPs ?
0
votes
0answers
41 views

prevent rsyslog to duplicate logs

my rsyslog writes on secure and on messages i have this *.info;mail.none;authpriv.none;cron.none /var/log/messages authpriv.* /var/log/...
0
votes
0answers
133 views

Acount Logon events not getting on domain controller

We have windows domain running with 2012R2 DC, We have enabled logging through GPO for all member servers and DCs, but I dont see any Account logon/logoff events (4624/4634) being logged, neither on ...
0
votes
0answers
209 views

rsyslog syntax error on non existent line

I get a syntax error message for my rsyslog configuration file at line 61. But my configuration only got 60 lines. I checked the last line in my configuration and it seems correct since it is the ...
0
votes
0answers
48 views

Using goaccess to figure out cause of increased traffic

I have an Ubuntu server hosted by Linode. A few days ago I got a notification that my Disk IO rate was higher than normal. I am trying to determine what they root cause of this is and whether I need ...
0
votes
0answers
76 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
0
votes
0answers
369 views

Logrotate: Error creating outfile, file already exists

I run logrotate in a daily cron, today I got an e-mail about a file already existing error: error creating output file path/to/search.log.2014-10-03.1412289722.gz: File exists But I'm not sure why ...
0
votes
0answers
21 views

How to set IIS Logging to best fit this scenario

I need to monitor a IIS 7 App Pool (WCF is running on it) and I would like to read messages like: Request A Received. Pool is down. Starting Pool. Request B Received. Pool going up. Request C ...
0
votes
0answers
82 views

Issue with SSH on RHEL while monitoring logs from SpectorSoft Server Manager

I have 3 servers running RHEL hosting a number of Java applications where each of them generates a log file which I am monitoring from a Windows-based machine with the use of SpectorSoft Server ...
0
votes
0answers
157 views

How to log changes made in a particular file to syslog

How to log changes made in a particular file using syslog-ng. The log must contain the timestamp, hostname, user who modified the file and action performed. Is there any option other than audit in ...
0
votes
0answers
283 views

Adding timestamps to supervisord logs

Is it possible to let supervisord add timestamps to the outputs in stdout_logfile and stderr_logfile? I couldn't find it anything about that in the documentation.
0
votes
0answers
24 views

How can I detect mail servername used from my clients to my server?

I have a web and mail server with Ubuntu 10.04, Apache 2, courier, postfix, Ispconfig 3 and multiple sites hosted. The clients use mail from Outlook with a config like this: @domain1.com use pop and ...
0
votes
0answers
118 views

Why would kern.log stop logging after crash & reboot

Server: Ubuntu 12.04 I recently noticed that my servers kern.log had stopped logging. I've not separated iptables from the kern.log so it used to be very active, however recently it's been logging ...
0
votes
0answers
70 views

Folder keeps getting deleted and I can't find out why

I have a Joomla based website running on CentOS, Apache, PHP, MySQL. I am using plupload file uploader to upload the files. I'm uploading the files to /tmp/uploads directory where they are processed ...
0
votes
0answers
1k views

Lockfile creation failed

I got a plain-text logfile (not lock file) in /var/log what I cannot open with: lockfile creation failed: exceeded maximum number of lock attempts I wonder what causes this and how can I unlock it ...
0
votes
0answers
763 views

Logging user and power activity Synology DiskStation (v5)

Is there any practical way of logging user activity and power state changes on a Synology NAS? I'm not looking for anything very extensively detailed, but I would like to log e.g. Video Station usage ...
0
votes
0answers
118 views

HPUX Apache 2.2.15 not starting?

Ive been looking for 2 days anything similar or related to the error that im getting for my apache. Im using 2.2.15 which is the version allowed by my company policies to install in an hpux server, ...
0
votes
0answers
170 views

Solaris SSH Server Log Destinaton IP Address

To stay compliant, it's required that my Solaris 10 SSH server log the destination IP address in addition to the existing port logging. Is it possible to add the destination IP address in the authlog? ...
0
votes
0answers
1k views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
0answers
512 views

MySQL exits without any output

Having a strange issue. Some time ago MySQL exited suddenly when I was creating a table (I think), and I shelved the issue until now. It seems to start, but nothing happens and it exits: 141031 18:...
0
votes
0answers
190 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
0answers
171 views

Nginx shows no user agent string

I have been dealing with an issue on one of my servers for quite a while now. In short, the server receives massive spikes in load - up to 50 - but the site gets almost no traffic. I know this can be ...
0
votes
0answers
534 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
0
votes
0answers
553 views

Apache2 vhost config not working (Debian 7)

My Apache 2.4.9 vhost configuration is not working any more on Debian 7. I didn't make any changes and it seems to have broken. Going to my site shows the following in /var/log/apache2/error.log ...
0
votes
0answers
78 views

SQL Server 2014 Standard 2014 no access and bad preformance

My company looks after a server which is running SQL Server 2014 Standard Edition. The main application database on the server is replicated out to about 20 subscribers. The server has only been in ...
0
votes
0answers
44 views

No access or error logging on OpenSuse

I've got an Amazon ec2 instance running OpenSuse and I'm getting a white page of death on some of my php scripts but there's no error log in var/log/apache2. To my surprise, there's also no access log....
0
votes
0answers
97 views

Unable to connect to linux server

I tried to connect to my Linux server as root via ssh, and then when it asks me for a password I get this error message : login:status code retuned 0xc00000b5 NT_SATUS_IO_TIMEOUT CIFS VFS:send error ...
0
votes
0answers
197 views

OpenTSDB Web interface showing nothing other than header and footer

NOTE: I moved the question from stackoverflow to serverfault as this question didn't attract attention. I have a temporary OpenTSDB and hbase hosted on a aws micro server. http://54.72.180.169:4242/ ...
0
votes
0answers
19 views

How can we log file download successes and failures from IIS7?

We have a dedicated server: IIS7 Windows Server 2012 R2 Standard This servers sole use is to serve files ~120MB in size. We're looking for the simplest way to log how many downloads were: ...
0
votes
0answers
28 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
0
votes
0answers
105 views

Making changes in Loglevel httpd.conf of apache server?

I am working on windows-7 Visual studio 2008,According to Apache: Configure "LogLevel debug" for certain modules only? i am making changes in the loglevel of configuration file I am giving ...
0
votes
0answers
707 views

Should I Set pm.start_servers to Highest Value or Not?

I have the following settings on my PHP-FPM: pm.max_children = 256 pm.start_servers = 50 pm.min_spare_servers = 40 pm.max_spare_servers = 128 Even if I set it to higher value, I still get the ...
0
votes
0answers
183 views

fork/vfork are failing but return an out of bounds errno

I have a piece of software running on a 64 bit Cent 5.8 Final box, kernel 2.6.18. This piece of software using fork and vfork. Recently some failures occurred, and in my logging I can see that fork ...
0
votes
0answers
70 views

nginx: access_log both compressed and uncompressed

In my "vhost" declaration I have: access_log /WEBSITE_DIR/logs/access.log.gz combined gzip; Problem is I get 2 files, an access.log.gz and an access.log Why? I want just the .log.gz one..
0
votes
0answers
50 views

Active Directory Access logging

We are running Active Directory on windows server 2012 and are looking to create a report of users daily usage by logging the login time and log out time of each user. The aim is to database these ...
0
votes
0answers
51 views

windows log logon activity: is it safe to rely on windows audit?

I found a guide that teaches, through turning on the Audit of the System Log on Activity via gpedit.msc, how to read the logon activity via eventvwr.msc Is this way of monitoring fully comprehensive? ...
0
votes
0answers
68 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
-1
votes
0answers
7 views

How to output progress indicator in a better way for vagrant?

I've the provisioning vagrant script which is downloading certain assets using wget and curl, however when it's doing it (vagrant provision), it displays a lot of information into standard error (red ...