Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
1answer
111 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
2
votes
1answer
187 views

Remote logging to specific directory structure with rsyslog

I'm currently in the process of having all of our various servers send their syslog messages to a central server. I'd like to have the following directory structure on the central server that logs ...
2
votes
1answer
378 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
2
votes
1answer
102 views

What does -fixcolnames do in log parser 2.2?

I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command: logparser "Select * into IISCounters ...
2
votes
1answer
515 views

How backup files with logrotate and Amazon S3?

I would like to create a new standard of two things: how long would be generated and be rotated the logs generated by my applications ? how to transfer the logs to Amazon S3, as a backup server ?. ...
2
votes
1answer
136 views

Enable HAProxy logging in Amazon Gentoo

I am attempting to enable HAProxy logging in Gentoo 1.12.11.1 on an Amazon EC2 Server (managed through EngineYard). I have modified the syslog.conf file as follows: local0.* ...
2
votes
1answer
177 views

Incomplete Apache logging

I have a problem with Apache running on a Linux server. This error undefined index on PHP, for example. The problem is that my Apache server doesn't log entire error messages. Some lines from the ...
2
votes
1answer
56 views

Log to a single file in IIS6 (as with IIS7)

IIS7 allows me to configure the server so that all sites log to a single file. This is extremely convenient because i can do all of my analysis in one place. I can not figure out how to do the same ...
2
votes
1answer
212 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
2
votes
1answer
181 views

Logcheck: wildcards which include non-latin characters

On my mail server, I have a custom logcheck rule as follows, which is intended to filter messages from deliver: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ deliver\.*\): msgid=.*: saved mail to.*$ ...
2
votes
1answer
489 views

slow query logging in mysql server

I have installed MySQL Community Edition 5.1.41 on a windows 2000 server. In my.ini file I have enabled slow query logging and have redirected the output to a table.I have set the long_query_time to ...
2
votes
1answer
319 views

A linux tftpd server that can log the incoming requests to stdout/stderr

I find it crazy that this doesn't work out of the box, but neither atftpd nor tftpd-hpa seem to have any way to log to the console. I've run them in the foreground with verbosity right up but clearly ...
1
vote
1answer
28 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
1
vote
1answer
67 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
1
vote
1answer
66 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
1
vote
1answer
98 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
1
vote
1answer
163 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
1
vote
1answer
55 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
1answer
64 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
496 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
1
vote
1answer
130 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
1
vote
1answer
42 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
1
vote
1answer
655 views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com ...
1
vote
1answer
94 views

Rsyslog: stopping after 1047 file descriptors opened on a centralized log server using TCP

We have heroku drains dumping to 1 log server. There are a lot of instances (~100) sending their logs to this server using TCP. The Server filters the logs based on hostname and puts them into a ...
1
vote
1answer
87 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
192 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
1
vote
1answer
103 views

IIS FTP server- log of file names transferred

The log files for my ftp server on iis 7.5 show DataChannelOpened and Closed events, but do not log what actual file was transferred. Is it possible to find this out, or add it to the logging?
1
vote
1answer
133 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
1
vote
1answer
126 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
1
vote
1answer
164 views

How to log a request to apache access log if it's cached by Varnish

I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on. No I just simply tell Varnish to do not cache specific urls: if (req.url ~ "(foo|bar)") ...
1
vote
1answer
44 views

Nginx keeps logging on main access_log

I have setup nginx in my server as a reverse proxy to haproxy. I have configured my own log_format and assigned it to every virtual host I have. However I have not turned off main access_log in ...
1
vote
1answer
827 views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
1
vote
1answer
249 views

mysql logging activity from specific user or ip

I have mysql server. The server is accessed by my application, and by external auditor (person using mysql workbench). The auditor has specific user and password and dedicated IP and it is granted ...
1
vote
1answer
182 views

Apache with multiple domains, single IP, VirtualHost is catching the wrong traffic

I have a SOAP web service I am providing on a apache web server. There are 6 different clients (IPs) that request data and 3 of them are hitting the wrong domain. I am trying to find a way to log ...
1
vote
1answer
147 views

Confusing traffic in netstat, nothing in logs

Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I ...
1
vote
1answer
283 views

View event details in “Events Detail View” in Windows Server 2012

Is there a way to actually view the details of an event in the "Events Detail View" that's provided by the Windows Server 2012 Server Manager?
1
vote
1answer
143 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
1answer
322 views

How do i deal with proftpd message “error setting IPV6_V6ONLY: Protocol not available” in auth.log?

I get lots of errormessages in my /var/log/auth.log in this form: myserver.de (::ffff:11.22.33.44[::ffff:11.22.33.44]) - error setting IPV6_V6ONLY: Protocol not available How should I deal with ...
1
vote
1answer
258 views

What is the best way/tool to analyze raw data(network stats) from Simulation?

After running a simulation(using a simulator(QualNet)) of a simulated network I end up with ip stats stored in a database, I then extract the data to a csv file So now I have 750mb of raw network ...
1
vote
1answer
485 views

Change properties of tomcat on-the-fly

When we make some changes to .properties file in tomcat, the server should be restarted. The question is why the server needs to be restarted ? What should I do if I want to make on-the-fly changes ...
1
vote
1answer
718 views

Did not find how to add 'additivity' for a logger in Jboss AS 7

We have migrated from Jboss 4 to Jboss 7. In Jboss 4 we used log4j.xml and have added 'additivity' property to child loggers so that the log messages do not propogate to its parents, but I do not know ...
1
vote
1answer
241 views

Access Logs - Useragent changes after first request

Has anyone noticed Internet Explorer useragents changing in their access logs? - - 12.345.6.789 - - [24/Feb/2012:15:59:59 -0800] "GET HTTP/1.1" 200 4759 "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT ...
1
vote
1answer
90 views

Watch logfile for absence of a string

I'm trying to watch Apache logs for the absence of an event that should occur hourly. For instance it could be a string like: 123.123.123.123 GET /backup.tar.gz It looks like existing code does not ...
1
vote
1answer
515 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
1
vote
1answer
103 views

IIS 6.0 logging an unknown value for IP address

My IIS 6.0 webserver is logging many thousands of entries that contain "UNKNOWN" in the the IP address field, that is the; Client IP Address (c-ip) option in IIS logging properties. I would say that ...
1
vote
1answer
363 views

How to get the Log file name that we are monitoring using Zabbix?

I am trying to get the log file's name that we are monitoring using zabbix. Is there a way to do this? I created one item in zabbix to monitor log file like this: ...
1
vote
1answer
725 views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...
1
vote
1answer
169 views

Recording all broker transactions in ActiveMQ

I would like to record all transactions that happen in ActiveMQ. When someone writes to a queue or reads from it, I would like to log that. Is there a way to turn on this kind of logging, or is there ...
1
vote
1answer
235 views

How can I force IIS7 to log the actual default document of a directory rather than a “/”?

Logging under IIS7 seems to have changed in that access to a parent directory with a default document is now logged differently than IIS6. The s-uri-stem field appears to ignore whatever documents ...
1
vote
1answer
120 views

ISA and IIS logs

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server ...