Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
1answer
66 views

Elasticsearch index much larger than the actual size of the logs it indexed?

I noticed that elasticsearch consumed over 30GB of disk space over night. By comparison the total size of all the logs I wanted to index is only 5 GB...Well, not even that really, probably more like ...
2
votes
1answer
71 views

How to make Ossec aware of logrotate

I installed Ossec in a monitor/agent configuration on a few servers of mine. Everything works greats. The only thing that annoy me is that I keep receiving alerts after logrotate rotates the log I ...
2
votes
1answer
94 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
2
votes
1answer
174 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
2
votes
1answer
325 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
2
votes
1answer
95 views

What does -fixcolnames do in log parser 2.2?

I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command: logparser "Select * into IISCounters ...
2
votes
1answer
468 views

How backup files with logrotate and Amazon S3?

I would like to create a new standard of two things: how long would be generated and be rotated the logs generated by my applications ? how to transfer the logs to Amazon S3, as a backup server ?. ...
2
votes
1answer
129 views

Enable HAProxy logging in Amazon Gentoo

I am attempting to enable HAProxy logging in Gentoo 1.12.11.1 on an Amazon EC2 Server (managed through EngineYard). I have modified the syslog.conf file as follows: local0.* ...
2
votes
1answer
172 views

Incomplete Apache logging

I have a problem with Apache running on a Linux server. This error undefined index on PHP, for example. The problem is that my Apache server doesn't log entire error messages. Some lines from the ...
2
votes
1answer
56 views

Log to a single file in IIS6 (as with IIS7)

IIS7 allows me to configure the server so that all sites log to a single file. This is extremely convenient because i can do all of my analysis in one place. I can not figure out how to do the same ...
2
votes
1answer
208 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
2
votes
1answer
178 views

Logcheck: wildcards which include non-latin characters

On my mail server, I have a custom logcheck rule as follows, which is intended to filter messages from deliver: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ deliver\.*\): msgid=.*: saved mail to.*$ ...
2
votes
1answer
484 views

slow query logging in mysql server

I have installed MySQL Community Edition 5.1.41 on a windows 2000 server. In my.ini file I have enabled slow query logging and have redirected the output to a table.I have set the long_query_time to ...
2
votes
1answer
313 views

A linux tftpd server that can log the incoming requests to stdout/stderr

I find it crazy that this doesn't work out of the box, but neither atftpd nor tftpd-hpa seem to have any way to log to the console. I've run them in the foreground with verbosity right up but clearly ...
1
vote
1answer
105 views

tail -f not following log file in Docker container

I am seeing some strange behavior running the tail -f command inside a Docker container in CoreOS. There are a number of variables I can think of that may be contributing to the problem but I am not ...
1
vote
1answer
58 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
1
vote
1answer
56 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
1
vote
1answer
93 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
1
vote
1answer
143 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
1
vote
1answer
50 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
1answer
60 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
424 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
1
vote
1answer
124 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
1
vote
1answer
41 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
1
vote
1answer
572 views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com ...
1
vote
1answer
89 views

Rsyslog: stopping after 1047 file descriptors opened on a centralized log server using TCP

We have heroku drains dumping to 1 log server. There are a lot of instances (~100) sending their logs to this server using TCP. The Server filters the logs based on hostname and puts them into a ...
1
vote
1answer
85 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
167 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
1
vote
1answer
94 views

IIS FTP server- log of file names transferred

The log files for my ftp server on iis 7.5 show DataChannelOpened and Closed events, but do not log what actual file was transferred. Is it possible to find this out, or add it to the logging?
1
vote
1answer
131 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
1
vote
1answer
116 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
1
vote
1answer
156 views

How to log a request to apache access log if it's cached by Varnish

I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on. No I just simply tell Varnish to do not cache specific urls: if (req.url ~ "(foo|bar)") ...
1
vote
1answer
42 views

Nginx keeps logging on main access_log

I have setup nginx in my server as a reverse proxy to haproxy. I have configured my own log_format and assigned it to every virtual host I have. However I have not turned off main access_log in ...
1
vote
1answer
358 views

dovecot floods logs with “disconnected”-messages

Sometimes dovecot fills the logs with a couple of messages like the following every second: dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=999.99.99.99, ...
1
vote
1answer
773 views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
1
vote
1answer
241 views

mysql logging activity from specific user or ip

I have mysql server. The server is accessed by my application, and by external auditor (person using mysql workbench). The auditor has specific user and password and dedicated IP and it is granted ...
1
vote
1answer
178 views

Apache with multiple domains, single IP, VirtualHost is catching the wrong traffic

I have a SOAP web service I am providing on a apache web server. There are 6 different clients (IPs) that request data and 3 of them are hitting the wrong domain. I am trying to find a way to log ...
1
vote
1answer
146 views

Confusing traffic in netstat, nothing in logs

Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I ...
1
vote
1answer
264 views

View event details in “Events Detail View” in Windows Server 2012

Is there a way to actually view the details of an event in the "Events Detail View" that's provided by the Windows Server 2012 Server Manager?
1
vote
1answer
142 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
1answer
306 views

How do i deal with proftpd message “error setting IPV6_V6ONLY: Protocol not available” in auth.log?

I get lots of errormessages in my /var/log/auth.log in this form: myserver.de (::ffff:11.22.33.44[::ffff:11.22.33.44]) - error setting IPV6_V6ONLY: Protocol not available How should I deal with ...
1
vote
1answer
249 views

What is the best way/tool to analyze raw data(network stats) from Simulation?

After running a simulation(using a simulator(QualNet)) of a simulated network I end up with ip stats stored in a database, I then extract the data to a csv file So now I have 750mb of raw network ...
1
vote
1answer
456 views

Change properties of tomcat on-the-fly

When we make some changes to .properties file in tomcat, the server should be restarted. The question is why the server needs to be restarted ? What should I do if I want to make on-the-fly changes ...
1
vote
1answer
697 views

Did not find how to add 'additivity' for a logger in Jboss AS 7

We have migrated from Jboss 4 to Jboss 7. In Jboss 4 we used log4j.xml and have added 'additivity' property to child loggers so that the log messages do not propogate to its parents, but I do not know ...
1
vote
1answer
239 views

Access Logs - Useragent changes after first request

Has anyone noticed Internet Explorer useragents changing in their access logs? - - 12.345.6.789 - - [24/Feb/2012:15:59:59 -0800] "GET HTTP/1.1" 200 4759 "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT ...
1
vote
1answer
89 views

Watch logfile for absence of a string

I'm trying to watch Apache logs for the absence of an event that should occur hourly. For instance it could be a string like: 123.123.123.123 GET /backup.tar.gz It looks like existing code does not ...
1
vote
1answer
507 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
1
vote
1answer
100 views

IIS 6.0 logging an unknown value for IP address

My IIS 6.0 webserver is logging many thousands of entries that contain "UNKNOWN" in the the IP address field, that is the; Client IP Address (c-ip) option in IIS logging properties. I would say that ...
1
vote
1answer
339 views

How to get the Log file name that we are monitoring using Zabbix?

I am trying to get the log file's name that we are monitoring using zabbix. Is there a way to do this? I created one item in zabbix to monitor log file like this: ...
1
vote
1answer
714 views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...