Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

4
votes
1answer
386 views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
4
votes
1answer
417 views

Find out what fields are available to IIS 7 Advanced Logging from Modules

You can install the Advanced Logging module for IIS 7. Once installed you have the option to define new fields from several different sources. One of those sources is other modules. What I am unable ...
3
votes
1answer
109 views

How to do proper error handling in a push setup?

I am currently building a lab environment to get a feeling on what DSC can accomplish and where the limits are. We have a requirement to push out one-shot configurations to group of nodes based on ...
3
votes
1answer
117 views

How can I configure IIS to save log files in a given folder without creating a W3SVCXXX folder under it?

You can configure IIS to save its logs in any folder you want; however, even if you configure this setting at the site level, it will always create another folder under the one you choose, called ...
3
votes
1answer
952 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
3
votes
1answer
64 views

Issue Frequency Tracker

I do system administration for small networks (typically 5 to 30 PCs, with a server on-site). I'm having an issue at one client that is a recurring issue with a particular software package. There are ...
3
votes
1answer
399 views

reconstructing shell session from a typescript

There is a bunch of tools like 'script', 'screen', 'ttyrec' which allow record content of shell sessions. By design these tool records everything displayed on pty, including control characters. ...
3
votes
1answer
555 views

IIS6 Log time recording problems

On three separate occasions on two separate servers at nearly the same times, 6.9 hours seemingly went by without any data being written to the IIS logs, but, on closer inspection, it appears that it ...
2
votes
1answer
19 views

sles/opensuse os installation log

Is it possible to keep installation log off all events, tasks, say running commands, etc.. while installing SLES/openSUSE (or maybe another linux)? It's not a problem lookup info in already running ...
2
votes
1answer
43 views

Splitting MySQL General Query Log by Clients

I would like to know a solution to splitting very large MySQL general query logs by specific clients that have accessed the server. Ideally a separate log will be created for each client. Thanks
2
votes
1answer
209 views

How to make Ossec aware of logrotate

I installed Ossec in a monitor/agent configuration on a few servers of mine. Everything works greats. The only thing that annoy me is that I keep receiving alerts after logrotate rotates the log I ...
2
votes
1answer
153 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
2
votes
1answer
228 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
2
votes
1answer
761 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
2
votes
1answer
577 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
2
votes
1answer
105 views

What does -fixcolnames do in log parser 2.2?

I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command: logparser "Select * into IISCounters ...
2
votes
1answer
612 views

How backup files with logrotate and Amazon S3?

I would like to create a new standard of two things: how long would be generated and be rotated the logs generated by my applications ? how to transfer the logs to Amazon S3, as a backup server ?. ...
2
votes
1answer
171 views

Enable HAProxy logging in Amazon Gentoo

I am attempting to enable HAProxy logging in Gentoo 1.12.11.1 on an Amazon EC2 Server (managed through EngineYard). I have modified the syslog.conf file as follows: local0.* ...
2
votes
1answer
186 views

Incomplete Apache logging

I have a problem with Apache running on a Linux server. This error undefined index on PHP, for example. The problem is that my Apache server doesn't log entire error messages. Some lines from the ...
2
votes
1answer
57 views

Log to a single file in IIS6 (as with IIS7)

IIS7 allows me to configure the server so that all sites log to a single file. This is extremely convenient because i can do all of my analysis in one place. I can not figure out how to do the same ...
2
votes
1answer
215 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
2
votes
1answer
189 views

Logcheck: wildcards which include non-latin characters

On my mail server, I have a custom logcheck rule as follows, which is intended to filter messages from deliver: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ deliver\.*\): msgid=.*: saved mail to.*$ ...
2
votes
1answer
509 views

slow query logging in mysql server

I have installed MySQL Community Edition 5.1.41 on a windows 2000 server. In my.ini file I have enabled slow query logging and have redirected the output to a table.I have set the long_query_time to ...
2
votes
1answer
336 views

A linux tftpd server that can log the incoming requests to stdout/stderr

I find it crazy that this doesn't work out of the box, but neither atftpd nor tftpd-hpa seem to have any way to log to the console. I've run them in the foreground with verbosity right up but clearly ...
1
vote
1answer
55 views

Audit Logs for Environment Path Changes

Something (or someone) keeps changing our environment path variables on several of our servers. I have the Audit Policy (under local sec pol) set to Success, Failure for all but Process Tracking ...
1
vote
1answer
93 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
1
vote
1answer
70 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
1
vote
1answer
26 views

Possible to have FQDN in Debian Logfiles?

Is it possible to have instead the hostname the fqdn inside debian log files? Example: Now its: Mar 2 18:00:12 www rsyslogd: [origin software="rsyslogd" swVersion="5.8.11" x-pid="2442" ...
1
vote
1answer
124 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
1
vote
1answer
111 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
1
vote
1answer
252 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
1
vote
1answer
80 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
1answer
80 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
202 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
1
vote
1answer
63 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
1
vote
1answer
2k views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
1
vote
1answer
951 views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com ...
1
vote
1answer
117 views

Rsyslog: stopping after 1047 file descriptors opened on a centralized log server using TCP

We have heroku drains dumping to 1 log server. There are a lot of instances (~100) sending their logs to this server using TCP. The Server filters the logs based on hostname and puts them into a ...
1
vote
1answer
100 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
276 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
1
vote
1answer
151 views

IIS FTP server- log of file names transferred

The log files for my ftp server on iis 7.5 show DataChannelOpened and Closed events, but do not log what actual file was transferred. Is it possible to find this out, or add it to the logging?
1
vote
1answer
161 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
1
vote
1answer
159 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
1
vote
1answer
229 views

How to log a request to apache access log if it's cached by Varnish

I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on. No I just simply tell Varnish to do not cache specific urls: if (req.url ~ "(foo|bar)") ...
1
vote
1answer
301 views

Neo4j Web Server Hangs: Logging Issue?

I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs. lsof -i | grep 7474 states ...
0
votes
0answers
51 views

windows log logon activity: is it safe to rely on windows audit?

I found a guide that teaches, through turning on the Audit of the System Log on Activity via gpedit.msc, how to read the logon activity via eventvwr.msc Is this way of monitoring fully comprehensive? ...
0
votes
0answers
327 views

How to get range time a log file in shell script

How to get range time using awk command? I have two variables $from and $to with format (hh:mm:ss) I want to get the range time between two variables. For example: get all range time between: ...
0
votes
0answers
64 views

VMware ESX/i syslog content

I am working on an expansion of our monitoring footprint, and we are currently looking at including data from our visualized environment. As our monitoring license is based on logged volumes, and we ...
0
votes
0answers
116 views

404 errors for php files not logged in error_log

When I open a url with a non-existent php file on my site, for example : http://site.com/nonexist.php it logs a 404 error into the apache error log, but it doesn't show the requested url, it just ...
0
votes
0answers
166 views

Filter rsyslog message by message id?

I'm trying to filter out some windows logs, that from program named Security-Auditing and with a message id 4624, but it doesn't work: if $programname == 'Security-Alert' and $msgid == '4624' then ...