Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

2
votes
1answer
299 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
2
votes
1answer
92 views

What does -fixcolnames do in log parser 2.2?

I'm using Logparser 2.2 to try to bring a .csv filled with Performance Counter information into a SQL database, and I'm using the following command line command: logparser "Select * into IISCounters ...
2
votes
1answer
429 views

How backup files with logrotate and Amazon S3?

I would like to create a new standard of two things: how long would be generated and be rotated the logs generated by my applications ? how to transfer the logs to Amazon S3, as a backup server ?. ...
2
votes
1answer
123 views

Enable HAProxy logging in Amazon Gentoo

I am attempting to enable HAProxy logging in Gentoo 1.12.11.1 on an Amazon EC2 Server (managed through EngineYard). I have modified the syslog.conf file as follows: local0.* ...
2
votes
1answer
168 views

Incomplete Apache logging

I have a problem with Apache running on a Linux server. This error undefined index on PHP, for example. The problem is that my Apache server doesn't log entire error messages. Some lines from the ...
2
votes
1answer
56 views

Log to a single file in IIS6 (as with IIS7)

IIS7 allows me to configure the server so that all sites log to a single file. This is extremely convenient because i can do all of my analysis in one place. I can not figure out how to do the same ...
2
votes
1answer
199 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
2
votes
1answer
176 views

Logcheck: wildcards which include non-latin characters

On my mail server, I have a custom logcheck rule as follows, which is intended to filter messages from deliver: ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ deliver\.*\): msgid=.*: saved mail to.*$ ...
2
votes
1answer
478 views

slow query logging in mysql server

I have installed MySQL Community Edition 5.1.41 on a windows 2000 server. In my.ini file I have enabled slow query logging and have redirected the output to a table.I have set the long_query_time to ...
2
votes
1answer
309 views

A linux tftpd server that can log the incoming requests to stdout/stderr

I find it crazy that this doesn't work out of the box, but neither atftpd nor tftpd-hpa seem to have any way to log to the console. I've run them in the foreground with verbosity right up but clearly ...
1
vote
1answer
34 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
1
vote
1answer
42 views

Website is partially loading - caught SIGTERM

I am getting the following error which is RANDOM. Restarting Apache solves the problem. [Fri Jan 02 16:19:21.854040 2015] [mpm_prefork:notice] [pid 18591] AH00169: caught SIGTERM, shutting down [Fri ...
1
vote
1answer
92 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
1
vote
1answer
106 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
1
vote
1answer
43 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
1answer
59 views

Perl: Log every execution of all scripts

Is there a way to log every execution of perl scripts on the complete server? I am investigating a possible security issue and therefore want to log every perl execution. Is something like this ...
1
vote
1answer
384 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
1
vote
1answer
119 views

Show real server name in nginx logs and params passed to fastcgi?

I have configured my nginx vhosts with a regex in server_name. nginx shows the raw regex in logs and in params passed to php-fpm (I know there's $_SERVER['HTTP_HOST'] with a real value, that's not an ...
1
vote
1answer
39 views

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The ...
1
vote
1answer
482 views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com ...
1
vote
1answer
83 views

Rsyslog: stopping after 1047 file descriptors opened on a centralized log server using TCP

We have heroku drains dumping to 1 log server. There are a lot of instances (~100) sending their logs to this server using TCP. The Server filters the logs based on hostname and puts them into a ...
1
vote
1answer
83 views

monitoring error rate with monit

Is there a way to tell monit to alert me if there are more than X errors (e.g. lines matching "ERROR") in a log file in a certain time? My use case would be: errors sometimes appear in my log file ...
1
vote
1answer
139 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
1
vote
1answer
88 views

IIS FTP server- log of file names transferred

The log files for my ftp server on iis 7.5 show DataChannelOpened and Closed events, but do not log what actual file was transferred. Is it possible to find this out, or add it to the logging?
1
vote
1answer
122 views

Choosing the right database/storage engine for iptables ulogd

I'm looking for some help choosing a database backend for a iptables ulogd setup. We are going to swap out our current proprietary firewall solution with iptables and one of the requirements is to ...
1
vote
1answer
108 views

How to log size of cookies in request header with apache

We have an issue on our site with cookies growing too large. We have already expanded the acceptable header size and throttled the cookie sizes for now, but I'd like to figure out what the average ...
1
vote
1answer
148 views

How to log a request to apache access log if it's cached by Varnish

I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on. No I just simply tell Varnish to do not cache specific urls: if (req.url ~ "(foo|bar)") ...
1
vote
1answer
42 views

Nginx keeps logging on main access_log

I have setup nginx in my server as a reverse proxy to haproxy. I have configured my own log_format and assigned it to every virtual host I have. However I have not turned off main access_log in ...
1
vote
1answer
349 views

dovecot floods logs with “disconnected”-messages

Sometimes dovecot fills the logs with a couple of messages like the following every second: dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=999.99.99.99, ...
1
vote
1answer
238 views

mysql logging activity from specific user or ip

I have mysql server. The server is accessed by my application, and by external auditor (person using mysql workbench). The auditor has specific user and password and dedicated IP and it is granted ...
1
vote
1answer
177 views

Apache with multiple domains, single IP, VirtualHost is catching the wrong traffic

I have a SOAP web service I am providing on a apache web server. There are 6 different clients (IPs) that request data and 3 of them are hitting the wrong domain. I am trying to find a way to log ...
1
vote
1answer
142 views

Confusing traffic in netstat, nothing in logs

Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I ...
1
vote
1answer
238 views

View event details in “Events Detail View” in Windows Server 2012

Is there a way to actually view the details of an event in the "Events Detail View" that's provided by the Windows Server 2012 Server Manager?
1
vote
1answer
140 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
1answer
292 views

How do i deal with proftpd message “error setting IPV6_V6ONLY: Protocol not available” in auth.log?

I get lots of errormessages in my /var/log/auth.log in this form: myserver.de (::ffff:11.22.33.44[::ffff:11.22.33.44]) - error setting IPV6_V6ONLY: Protocol not available How should I deal with ...
1
vote
1answer
242 views

What is the best way/tool to analyze raw data(network stats) from Simulation?

After running a simulation(using a simulator(QualNet)) of a simulated network I end up with ip stats stored in a database, I then extract the data to a csv file So now I have 750mb of raw network ...
1
vote
1answer
437 views

Change properties of tomcat on-the-fly

When we make some changes to .properties file in tomcat, the server should be restarted. The question is why the server needs to be restarted ? What should I do if I want to make on-the-fly changes ...
1
vote
1answer
681 views

Did not find how to add 'additivity' for a logger in Jboss AS 7

We have migrated from Jboss 4 to Jboss 7. In Jboss 4 we used log4j.xml and have added 'additivity' property to child loggers so that the log messages do not propogate to its parents, but I do not know ...
1
vote
1answer
236 views

Access Logs - Useragent changes after first request

Has anyone noticed Internet Explorer useragents changing in their access logs? - - 12.345.6.789 - - [24/Feb/2012:15:59:59 -0800] "GET HTTP/1.1" 200 4759 "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT ...
1
vote
1answer
89 views

Watch logfile for absence of a string

I'm trying to watch Apache logs for the absence of an event that should occur hourly. For instance it could be a string like: 123.123.123.123 GET /backup.tar.gz It looks like existing code does not ...
1
vote
1answer
494 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
1
vote
1answer
100 views

IIS 6.0 logging an unknown value for IP address

My IIS 6.0 webserver is logging many thousands of entries that contain "UNKNOWN" in the the IP address field, that is the; Client IP Address (c-ip) option in IIS logging properties. I would say that ...
1
vote
1answer
323 views

How to get the Log file name that we are monitoring using Zabbix?

I am trying to get the log file's name that we are monitoring using zabbix. Is there a way to do this? I created one item in zabbix to monitor log file like this: ...
1
vote
1answer
691 views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...
1
vote
1answer
160 views

Recording all broker transactions in ActiveMQ

I would like to record all transactions that happen in ActiveMQ. When someone writes to a queue or reads from it, I would like to log that. Is there a way to turn on this kind of logging, or is there ...
1
vote
1answer
230 views

How can I force IIS7 to log the actual default document of a directory rather than a “/”?

Logging under IIS7 seems to have changed in that access to a parent directory with a default document is now logged differently than IIS6. The s-uri-stem field appears to ignore whatever documents ...
1
vote
1answer
120 views

ISA and IIS logs

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server ...
1
vote
1answer
191 views

windows 7 firewall logging PID

i enabled my windows 7 firewall to by default block all outbound connections by default. i configure each and every program that needs network access in the 'Windows Firewall with Advanced Security' ...
1
vote
1answer
265 views

Debugging Authentication attempts against Active Directory

I have various services configured to authenticate against Active Directory. It would be very helpful if they all logged authentication failures, but they don't. This makes debugging even a simple ...
1
vote
1answer
468 views

Enable logging for a website via a script

I'm looking for a way to enable or disable logging for an IIS 6 web site via adsutil.vbs. Does anyone know which property I need to set? Thanks Neil