Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
1answer
81 views

IIS FTP server- log of file names transferred

The log files for my ftp server on iis 7.5 show DataChannelOpened and Closed events, but do not log what actual file was transferred. Is it possible to find this out, or add it to the logging?
1
vote
1answer
119 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
1
vote
1answer
102 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
1
vote
1answer
41 views

Nginx keeps logging on main access_log

I have setup nginx in my server as a reverse proxy to haproxy. I have configured my own log_format and assigned it to every virtual host I have. However I have not turned off main access_log in ...
1
vote
1answer
333 views

dovecot floods logs with “disconnected”-messages

Sometimes dovecot fills the logs with a couple of messages like the following every second: dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=999.99.99.99, ...
1
vote
1answer
234 views

mysql logging activity from specific user or ip

I have mysql server. The server is accessed by my application, and by external auditor (person using mysql workbench). The auditor has specific user and password and dedicated IP and it is granted ...
1
vote
1answer
176 views

Apache with multiple domains, single IP, VirtualHost is catching the wrong traffic

I have a SOAP web service I am providing on a apache web server. There are 6 different clients (IPs) that request data and 3 of them are hitting the wrong domain. I am trying to find a way to log ...
1
vote
1answer
137 views

Confusing traffic in netstat, nothing in logs

Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I ...
1
vote
1answer
224 views

View event details in “Events Detail View” in Windows Server 2012

Is there a way to actually view the details of an event in the "Events Detail View" that's provided by the Windows Server 2012 Server Manager?
1
vote
1answer
137 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
1answer
422 views

Change properties of tomcat on-the-fly

When we make some changes to .properties file in tomcat, the server should be restarted. The question is why the server needs to be restarted ? What should I do if I want to make on-the-fly changes ...
1
vote
1answer
661 views

Did not find how to add 'additivity' for a logger in Jboss AS 7

We have migrated from Jboss 4 to Jboss 7. In Jboss 4 we used log4j.xml and have added 'additivity' property to child loggers so that the log messages do not propogate to its parents, but I do not know ...
1
vote
1answer
233 views

Access Logs - Useragent changes after first request

Has anyone noticed Internet Explorer useragents changing in their access logs? - - 12.345.6.789 - - [24/Feb/2012:15:59:59 -0800] "GET HTTP/1.1" 200 4759 "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT ...
1
vote
1answer
89 views

Watch logfile for absence of a string

I'm trying to watch Apache logs for the absence of an event that should occur hourly. For instance it could be a string like: 123.123.123.123 GET /backup.tar.gz It looks like existing code does not ...
1
vote
1answer
474 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
1
vote
1answer
99 views

IIS 6.0 logging an unknown value for IP address

My IIS 6.0 webserver is logging many thousands of entries that contain "UNKNOWN" in the the IP address field, that is the; Client IP Address (c-ip) option in IIS logging properties. I would say that ...
1
vote
1answer
311 views

How to get the Log file name that we are monitoring using Zabbix?

I am trying to get the log file's name that we are monitoring using zabbix. Is there a way to do this? I created one item in zabbix to monitor log file like this: ...
1
vote
1answer
678 views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...
1
vote
1answer
156 views

Recording all broker transactions in ActiveMQ

I would like to record all transactions that happen in ActiveMQ. When someone writes to a queue or reads from it, I would like to log that. Is there a way to turn on this kind of logging, or is there ...
1
vote
1answer
57 views

iSCSI and WAL for database (oracle 11g) performance

I am thinking about building a database system with iSCSI. But now I am thinking about the WAL. WAL shouldn't lag. WAL is implemented with a ring buffer, isn't it? So if I only care about the ...
1
vote
1answer
227 views

How can I force IIS7 to log the actual default document of a directory rather than a “/”?

Logging under IIS7 seems to have changed in that access to a parent directory with a default document is now logged differently than IIS6. The s-uri-stem field appears to ignore whatever documents ...
1
vote
1answer
120 views

ISA and IIS logs

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server ...
1
vote
1answer
186 views

windows 7 firewall logging PID

i enabled my windows 7 firewall to by default block all outbound connections by default. i configure each and every program that needs network access in the 'Windows Firewall with Advanced Security' ...
1
vote
1answer
262 views

Debugging Authentication attempts against Active Directory

I have various services configured to authenticate against Active Directory. It would be very helpful if they all logged authentication failures, but they don't. This makes debugging even a simple ...
1
vote
1answer
461 views

Enable logging for a website via a script

I'm looking for a way to enable or disable logging for an IIS 6 web site via adsutil.vbs. Does anyone know which property I need to set? Thanks Neil
1
vote
1answer
218 views

Complete stack traces from Hyperic

I've setup Hyperic to run on our CI-machine, and every once in a while it reacts to some random stack trace and sends of an alert. So far so good, we've caught a lot of intermittent bugs that way. ...
0
votes
1answer
16 views

Remote email send save log

I have a problem that I believe has no solution. A customer has a financial program that authenticates to the SMTP server and send emails. However, these outgoing emails are not saved in the "Sent" ...
0
votes
1answer
41 views

Syslog-ng loghost - filter not-match

I've got a problem with receiving remote logs from syslog-ng OSE to syslog-ng OSE. I am configuring loghost and at now - i how no idea what i am doing wrong. It seems like filters are not working for ...
0
votes
1answer
40 views

Sudo-io log output shows garbled text

We have set up in our servers sudoers config the following configuration in order to log the console output for auditoring purposes Defaults:%administrators log_output Defaults logfile=/var/log/sudo ...
0
votes
1answer
88 views

Haproxy not logging requests?

So, I configured Haproxy so the logging would go through rsyslog and, for now, be all dumped in one file. It's definetly logging, as I get those "starting" messages on startup, but no HTTP requests ...
0
votes
1answer
115 views

Haproxy logging not work

Cant understand, how it logging? Now my log is empty and haproxy doesnt write anything to file. Sometimes it logs some info, Logging works with syslog-ng, if i set in haproxy conf timeout client about ...
0
votes
1answer
36 views

Diagnosing where all the queries are coming from

We have an issue where a site on a shared hosting account is going over the allowed query limit per user; that is set at 100k queries/hr. The site shouldn't be generating that amount of queries TBH ...
0
votes
1answer
32 views

Logging only written on old [filename].1 log files

My log is not written on the correct log file for example syslog, mail.log, mysql.log, auth.log but for some reason the latest event are written on these old log files syslog.1, auth.log.1, mail.log.1 ...
0
votes
1answer
53 views

Daily postgresql cron error log file

I am getting these emails daily: /etc/cron.daily/logrotate: error: error accessing /var/log/postgresql: No such file or directory error: postgresql-common:1 glob failed for /var/log/postgresql/.log ...
0
votes
1answer
91 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
0
votes
1answer
282 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
56 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
0
votes
1answer
65 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
0
votes
1answer
69 views

How to best monitor/log problems on eth0?

I have manually configured an email server - very simple config and I have done no fancy networking. I simply opened up only the relevant ports via iptables. Once every 10-15 days however, eth0 ...
0
votes
1answer
850 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
1answer
30 views

Exim sends system user mails rathen than logging them in /var/mail

I setuped an Exim4 server to send mail for my website hosted on the same server. I configured my server to have a mydomain.com hostname. Sites and mails for site are working fine. The problem I have ...
0
votes
1answer
46 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
1answer
82 views

Analyze tons of Apache logs

I'm having an issue analyzing Apache logs - because there's a ton of them. Like first 5 days of March have resulted in about 50Gb of log files ( uncompressed ). How to analyze these? What tools to ...
0
votes
1answer
79 views

Snort logging mode - How to define subnets

I am using snort to log all traffic on an interface snort -i eth1 -l /interface/log/dir -b -U -m 112 With this command I manage to get ALL data which makes my log files very large. Is there any ...
0
votes
1answer
669 views

Compress and remove logs from jboss on linux with cron

I need to compress and remove log files after some time from serwer. I have never write scripts before. So far i have script logs.sh: #!/bin/bash LOGS=/usr/local/jboss/server/default/log/ ...
0
votes
1answer
111 views

mysql.slow.log is not created even though it's configured in /etc/my.cnf , what could be the reason?

This is the relevant section from /etc/my.cnf: [mysqld] slow-query-log = ON long_query_time = 2 log_slow_queries = /var/log/mysql-slow.log The problem is that file is ...
0
votes
1answer
10 views

Get referrer of requests currently listed by status module

Our server has on normal time 20 request/second, which can be seen constantly on server-status (status module) Sometimes we have 800 requests/second, and all these requests are shown on ...
0
votes
1answer
54 views

How to check last FTP logins using SSH?

I've just bought a new VPS (its operating system is CentOS). As this is my first experience with VPS, I don't know everything about managing and ... One of my customers told me his website is not ...
0
votes
1answer
342 views

Apache2 server (behind Zyxel USG 100 NAT/Firewall) with vhost does not log real clients ip addresses

SOLVED To allow the Zyxel USG 100's NAT to forward untouched packets to my web server i edited the policy route of the Zyxel. Zyxel -> Configuration -> Network ->Routing -> Policy Route ...
0
votes
1answer
34 views

Logging not getting disabled

Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has ...