Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
1answer
135 views

Confusing traffic in netstat, nothing in logs

Just had a confusing couple of minutes! I was monitoring a screen (the gnu screen) running "netstat -a" and I noticed that there was one connection connected to http (port 80), fine. But when I ...
1
vote
1answer
208 views

View event details in “Events Detail View” in Windows Server 2012

Is there a way to actually view the details of an event in the "Events Detail View" that's provided by the Windows Server 2012 Server Manager?
1
vote
1answer
133 views

Unable to log iptables

I'm having trouble getting iptables to log to any file. My iptables looks like: Chain INPUT (policy ACCEPT 1366 packets, 433582 bytes) pkts bytes target prot opt in out source ...
1
vote
1answer
395 views

Change properties of tomcat on-the-fly

When we make some changes to .properties file in tomcat, the server should be restarted. The question is why the server needs to be restarted ? What should I do if I want to make on-the-fly changes ...
1
vote
1answer
638 views

Did not find how to add 'additivity' for a logger in Jboss AS 7

We have migrated from Jboss 4 to Jboss 7. In Jboss 4 we used log4j.xml and have added 'additivity' property to child loggers so that the log messages do not propogate to its parents, but I do not know ...
1
vote
1answer
231 views

Access Logs - Useragent changes after first request

Has anyone noticed Internet Explorer useragents changing in their access logs? - - 12.345.6.789 - - [24/Feb/2012:15:59:59 -0800] "GET HTTP/1.1" 200 4759 "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT ...
1
vote
1answer
89 views

Watch logfile for absence of a string

I'm trying to watch Apache logs for the absence of an event that should occur hourly. For instance it could be a string like: 123.123.123.123 GET /backup.tar.gz It looks like existing code does not ...
1
vote
1answer
462 views

Apache2 dynamic custom filename for log files

I would like to apply a date based custom filename for apache2 log files, which I want to use for clickheat. In the example it writes: CustomLog "clickheat.%Y-%m-%d-%H" "%r" env=clickheat But for ...
1
vote
1answer
98 views

IIS 6.0 logging an unknown value for IP address

My IIS 6.0 webserver is logging many thousands of entries that contain "UNKNOWN" in the the IP address field, that is the; Client IP Address (c-ip) option in IIS logging properties. I would say that ...
1
vote
1answer
296 views

How to get the Log file name that we are monitoring using Zabbix?

I am trying to get the log file's name that we are monitoring using zabbix. Is there a way to do this? I created one item in zabbix to monitor log file like this: ...
1
vote
1answer
661 views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...
1
vote
1answer
154 views

Recording all broker transactions in ActiveMQ

I would like to record all transactions that happen in ActiveMQ. When someone writes to a queue or reads from it, I would like to log that. Is there a way to turn on this kind of logging, or is there ...
1
vote
1answer
53 views

iSCSI and WAL for database (oracle 11g) performance

I am thinking about building a database system with iSCSI. But now I am thinking about the WAL. WAL shouldn't lag. WAL is implemented with a ring buffer, isn't it? So if I only care about the ...
1
vote
1answer
226 views

How can I force IIS7 to log the actual default document of a directory rather than a “/”?

Logging under IIS7 seems to have changed in that access to a parent directory with a default document is now logged differently than IIS6. The s-uri-stem field appears to ignore whatever documents ...
1
vote
1answer
120 views

ISA and IIS logs

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server ...
1
vote
1answer
184 views

windows 7 firewall logging PID

i enabled my windows 7 firewall to by default block all outbound connections by default. i configure each and every program that needs network access in the 'Windows Firewall with Advanced Security' ...
1
vote
1answer
259 views

Debugging Authentication attempts against Active Directory

I have various services configured to authenticate against Active Directory. It would be very helpful if they all logged authentication failures, but they don't. This makes debugging even a simple ...
1
vote
1answer
455 views

Enable logging for a website via a script

I'm looking for a way to enable or disable logging for an IIS 6 web site via adsutil.vbs. Does anyone know which property I need to set? Thanks Neil
1
vote
1answer
218 views

Complete stack traces from Hyperic

I've setup Hyperic to run on our CI-machine, and every once in a while it reacts to some random stack trace and sends of an alert. So far so good, we've caught a lot of intermittent bugs that way. ...
0
votes
1answer
23 views

Syslog-ng loghost - filter not-match

I've got a problem with receiving remote logs from syslog-ng OSE to syslog-ng OSE. I am configuring loghost and at now - i how no idea what i am doing wrong. It seems like filters are not working for ...
0
votes
1answer
33 views

Sudo-io log output shows garbled text

We have set up in our servers sudoers config the following configuration in order to log the console output for auditoring purposes Defaults:%administrators log_output Defaults logfile=/var/log/sudo ...
0
votes
1answer
56 views

Haproxy not logging requests?

So, I configured Haproxy so the logging would go through rsyslog and, for now, be all dumped in one file. It's definetly logging, as I get those "starting" messages on startup, but no HTTP requests ...
0
votes
1answer
86 views

Archive & analyse network logs from NetBSD on another machine

I want to use the the new NetBSD's NPF firewall on a gateway that also has the legal obligation to log the traffic for 1 year. To offload the gateway, I though to put the logging stuff (and IDS, quota ...
0
votes
1answer
72 views

Haproxy logging not work

Cant understand, how it logging? Now my log is empty and haproxy doesnt write anything to file. Sometimes it logs some info, Logging works with syslog-ng, if i set in haproxy conf timeout client about ...
0
votes
1answer
32 views

Diagnosing where all the queries are coming from

We have an issue where a site on a shared hosting account is going over the allowed query limit per user; that is set at 100k queries/hr. The site shouldn't be generating that amount of queries TBH ...
0
votes
1answer
24 views

Logging only written on old [filename].1 log files

My log is not written on the correct log file for example syslog, mail.log, mysql.log, auth.log but for some reason the latest event are written on these old log files syslog.1, auth.log.1, mail.log.1 ...
0
votes
1answer
46 views

Daily postgresql cron error log file

I am getting these emails daily: /etc/cron.daily/logrotate: error: error accessing /var/log/postgresql: No such file or directory error: postgresql-common:1 glob failed for /var/log/postgresql/.log ...
0
votes
1answer
76 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
0
votes
1answer
201 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
66 views

Web access log analyzer for hosting providers

I have a nginx server set, it proxies request based on Host field. I have a common log for it, because per-host logging is done at the server, to which I do proxy_pass. So, is there any solution to ...
0
votes
1answer
49 views

Advanced Squid Log Analysis

We are currently using sarg to analyse our squid proxy logs, while it works ok, its not really amazing and we could do with a bit more information. The main thing we would like to do is be able to ...
0
votes
1answer
60 views

How do I create a specific report on a Watchguard firewall?

I am trying to recover from the Cryptolocker virus, and keep getting blacklisted at CBL. I need specific communication data on ports above 1000. I do not see a way to setup a specific report of ...
0
votes
1answer
60 views

How to best monitor/log problems on eth0?

I have manually configured an email server - very simple config and I have done no fancy networking. I simply opened up only the relevant ports via iptables. Once every 10-15 days however, eth0 ...
0
votes
1answer
705 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
1answer
28 views

Exim sends system user mails rathen than logging them in /var/mail

I setuped an Exim4 server to send mail for my website hosted on the same server. I configured my server to have a mydomain.com hostname. Sites and mails for site are working fine. The problem I have ...
0
votes
1answer
45 views

General webserver log and custom logs where to gather them

I am not trying to create an opinionated question here though it might sound like it. My problem is as follows. I have the normal apache2 access and error log on a bunch of servers. I also have ...
0
votes
1answer
81 views

Analyze tons of Apache logs

I'm having an issue analyzing Apache logs - because there's a ton of them. Like first 5 days of March have resulted in about 50Gb of log files ( uncompressed ). How to analyze these? What tools to ...
0
votes
1answer
73 views

Snort logging mode - How to define subnets

I am using snort to log all traffic on an interface snort -i eth1 -l /interface/log/dir -b -U -m 112 With this command I manage to get ALL data which makes my log files very large. Is there any ...
0
votes
1answer
609 views

Compress and remove logs from jboss on linux with cron

I need to compress and remove log files after some time from serwer. I have never write scripts before. So far i have script logs.sh: #!/bin/bash LOGS=/usr/local/jboss/server/default/log/ ...
0
votes
1answer
96 views

mysql.slow.log is not created even though it's configured in /etc/my.cnf , what could be the reason?

This is the relevant section from /etc/my.cnf: [mysqld] slow-query-log = ON long_query_time = 2 log_slow_queries = /var/log/mysql-slow.log The problem is that file is ...
0
votes
1answer
9 views

Get referrer of requests currently listed by status module

Our server has on normal time 20 request/second, which can be seen constantly on server-status (status module) Sometimes we have 800 requests/second, and all these requests are shown on ...
0
votes
1answer
47 views

How to check last FTP logins using SSH?

I've just bought a new VPS (its operating system is CentOS). As this is my first experience with VPS, I don't know everything about managing and ... One of my customers told me his website is not ...
0
votes
1answer
338 views

Apache2 server (behind Zyxel USG 100 NAT/Firewall) with vhost does not log real clients ip addresses

SOLVED To allow the Zyxel USG 100's NAT to forward untouched packets to my web server i edited the policy route of the Zyxel. Zyxel -> Configuration -> Network ->Routing -> Policy Route ...
0
votes
1answer
32 views

Logging not getting disabled

Out Tomcat 8 is logging so much so that by the evening the catalina.out inflates to GBs of data. I followed the procedure given on the tomcat website to replace JULI logging with LOG4J. Now LOG4J has ...
0
votes
1answer
506 views

Log Rotation Causing nxlog Failure

I'm using nxlog to watch two vCenter log files on a Windows Server 2008 system and I have a very simple config to ship messages to Logstash. Nxlog began failing yesterday after a file was rotated. ...
0
votes
1answer
45 views

ap_log_perror unable to read loglevel from configuration file?

Loglevel error I am giving this in the configuration file,httpd.conf,when i am using the function ap_log_rerror,it is capturing only log messages that are having error or above loglevels,but when i ...
0
votes
1answer
17 views

Logging redirects and rewrites

I'm using the following blacklist .htaccess directives in apache v2.2 (on mediatemple): http://perishablepress.com/5g-blacklist-2013/ I want to get a sense of how often these directives are ...
0
votes
1answer
2k views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
0
votes
1answer
143 views

Suspicious Process*User:www-data EXE:/usr/sbin/php5-fpm

I have csf installed on Debian server which uses nginx+php5-fpm and see a lot of these lfd[23293]: Suspicious Process PID:16998 PPID:16122 User:www-data Uptime:824 secs EXE:/usr/sbin/php5-fpm ...
0
votes
1answer
889 views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...