Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
1answer
270 views

IIS 8.5 not logging all requests

I'm having an issue where IIS 8.5 on Server 2012 R2 is not logging requests properly. It was working fine up until about a week ago - producing log files >10mb. This information was useful for our ...
1
vote
1answer
159 views

Logging TLS version used by clients connecting to Apache

Recently in the news was an announcement that the PCI standards in the UK will outlaw the use of TLS1.0. Unfortunately, this means that we're going to have to stop using TLS1.0 on our web servers for ...
0
votes
1answer
72 views

How to clear or stop net-snmpd.log?

System: 3.10.17-gentoo NET-SNMP version: 5.7.3.pre5 ps ax: /usr/sbin/snmpd -p /var/run/snmpd.pid /etc/conf.d/snmpd: #SNMPD_FLAGS="${SNMPD_FLAGS} -Lsd -Lf /dev/null" /var/log/net-snmpd.log: ...
0
votes
0answers
39 views

Logging Simultaneous Open Connection Establishment With Iptables

Simultaneous Open Connection Establishment: TCP is also set up to handle the situation where both devices perform an active OPEN instead of one doing a passive OPEN. This may occur if two clients are ...
1
vote
1answer
18 views

Change MySQL “lob_bin_trust” variable definitely

I've seen this topic earlier, but it doesn't fit in my needs. Is there anyway to set variable "log_bin_trust_function_creators" definitely in my system, except specifying it on mysql initiation (...
0
votes
0answers
17 views

Odd PUT requests in apache logs

I got a few domains hosted from an Apache server. I've had this setup for a while without much problems. However, since about a week I've began to receive strange PUT requests for one of the domains: ...
0
votes
1answer
302 views

How to provision dashboards into kibana?

I am giving my developers the gift of kibana using the elasticsearch that is bundled with logstash. They will have kibana in their vagrant boxes. Goal: Install and configure kibana dashboards via ...
0
votes
1answer
54 views

PAM standard macros and logging on CentOS7

According to the D(x) macro defined in pam_macros.h (source code) and used as follows: D(("Hello PAM World")); Where is this log located on CentOS7? Note that I am using as flag debug in my pam.d ...
1
vote
1answer
95 views

Window Logs - Is any event logged when a user overwrites files? (Win Server 2012 R2)

Is any event logged when a user/process overwrites files? (Win Server 2012 R2)
1
vote
0answers
199 views

How can I separate logs with rsyslog from a remote location for devices using the same IP?

I have a number of Yealink SIP phones at different locations that I am trying to centralize log collection for. I have set up a CentOS server at my main location with rsyslog. I am forwarding all ...
1
vote
0answers
42 views

Easily create a logcheck rule from a log message?

I’d like to more easily create logcheck rules from log messages. Ideally I’d like to have something set up such that I just take a logcheck message I receive, and pipe it to some tool, and it spits ...
1
vote
1answer
373 views

HAProxy not logging all requests

I've setup a HAProxy on Ubuntu 14.04 running a seperate backend server also on Ubuntu 14.04 and Apache2. When performing requests not all those requests are logged. Even when running HAProxy in debug ...
0
votes
0answers
14 views

When are AWS VPC logs restarted?

If I have AWS VPC Flow logs enabled. I can execute the command aws logs get-log-events --log-group-name <log-group> --log-stream-name <stream> --region us-west-2 And it spits out the ...
0
votes
1answer
385 views

Using WDS, where are the log files located on the CLIENT trying to capture an image?

I'm trying to create a capture boot image for my client machines. I have the Win7 (x64) capture image loaded in the WDS server and it boots to the WDS Image Capture Wizard with no issues. I hit ...
1
vote
1answer
1k views

PostFix sending delay, many “(queue active)” messages in log

We use postfix on a CentOS server to accept incoming mail, then do some filtering, then send the message on to our real mail server where we will pickup the mail. The postfix server sometimes has ...
1
vote
1answer
407 views

How to set up IAM Role Permissions for VPC CloudWatch logs?

I am trying to allow aws to start my log service, and I have my log streams, and log groups added already. When i got to my VPC dashboard, the status of the Flow Log I'm interested in says: Access ...
2
votes
1answer
26 views

Can Apache Access Logs be kept separated & also combined as well too?

My question may be a bit confusing, and sorry for that. Here is what i need: Well, i have (let's say) 3 Websites hosted on one Apache (which are defined inside each VirtualHost settings. Then i ...
0
votes
0answers
11 views

Which `Log group` do I select when in AWS `CloudWatch Management Console`?

I am trying to view my logs from aws command line interface, but I am unable to discover what is a log group. I followed the documentation for CloudWatch. However, nowhere in those instructions ...
1
vote
0answers
297 views

Audit trail for all actions taken with admin privileges

PCI DSS 10.2 says, "Implement automated audit trails for all system components to reconstruct the following events:" and 10.2.2 continues, "All actions taken by any individual with root or ...
0
votes
0answers
190 views

phpmyadmin doesn't log access

I just wanted to install fail2ban also for phpmyadmin as described in another post. Then I found out that phpmyadmin doesn't log access on my apache. I installed phpmyadmin as follows: apt-get ...
0
votes
1answer
57 views

Rsyslog logging to rolled log instead of unrolled log

Forgive me if I am vague, but I am trying to keep this as secure as possible. I have a CentOS server setup as a central remote logging server. Servers have been sending their logs to this server for ...
1
vote
1answer
91 views

How to configure aws in order to get log events?

My question has two parts: - How to get log events? The command line tells me that I need to configure aws... - How to configure aws? I try to get log events by doing the following: sudo aws logs ...
1
vote
1answer
516 views

Where to get proper `region name` and `output format` for AWS configuration?

I'm trying to get log events via my aws server. I log into the server as usual, and then I enter the following command: sudo aws logs get-log-events --log-group-name <myLogs> --log-stream-...
0
votes
0answers
77 views

Windows PrintService Operational Log. Which Tray?

I am a software developer but I have come here to ask an Admin type question. I have turned on the Windows PrintService Operation log to see what print jobs are being printed via Applications and ...
0
votes
1answer
1k views

How do I capture unique id in haproxy logs?

I'm trying to capture the unique id for each request in my logs. I thought I could use capture request header X-Unique-ID len 16 on the header but its not working. Any suggestions? global log /dev/...
0
votes
1answer
46 views

Unable to log into a rsyslog filter using logger [duplicate]

Ubuntu 64 14.04 comes with rsyslog (7) built-in. I've added test.conf to /etc/rsyslog.d with the following line: :syslogtag,isequal,"test" /var/log/test.log I then restart rsyslog and log ...
0
votes
0answers
14 views

LOG server - attack on my site? [duplicate]

have a problem. 3 days ago somebody clean my server, but I do not know how. My server support sent me to mail with LOGS: Friday Aug 21 03:55:47 2015 0 78.47.143.141 388 /home/stopmy/ftp/mark/site.htm ...
1
vote
1answer
208 views

How to enable slow query log in MySQL Galera?

I want to enable slow query logging in MySQL Galera. In order to do so, I have enabled it through my.cnf: log_slow_queries = /var/log/mysql/mysql-slow.log long_query_time = 1 log-queries-not-...
8
votes
2answers
89 views

How to configure a log aggregator to authenticate data?

Background: Remote log aggregation is regarded as a way to improve security. Generally, this addresses the risk that an attacker who compromises a system can edit or delete logs to frustrate forensic ...
3
votes
2answers
249 views

Nginx, log referrers from certain domain to separate log file

I have my nginx setup to block certain referers like so: if ($http_referer ~* (site_name) ) { return 403; } This works fine, however I'd like to also log the blocked referrer to a separate file. ...
0
votes
0answers
212 views

Where does elasticsearch store graylog2 logs?

I've setup fluentd to stream docker container logs to a centralized graylog2 server. I'm hoping to setup log rotate for these logs. From what I understand, graylog stores these logs in elasticsearch,...
0
votes
1answer
23 views

AD log message showing E-mail of user object creation

I am referencing the active directory log message (4720) which shows 'User Principal Name' as an email address. However there is another email address found when viewing the actual User Object '...
5
votes
3answers
766 views

Office 365 Exchange client connection logs

We use Office 365 at our company and I was wondering if it is possible to see Exchange client connection logs in the admin panel anywhere? I want to identify what IP addresses outlook clients have ...
1
vote
0answers
138 views

Rotation and continuous writing of large log files with rsyslogd

I have an extremely busy log file (let's call it /var/log/service.log) that is also frequently searched for troubleshooting reasons. Output to it is nearly continuous and 24/7. It probably puts out ...
0
votes
3answers
44 views

Log pid than cpu higher than a value

I'm looking for a way to log the pid of process higher than a fixed value of cpu (ex 40%). I tried with command like this : ps -eo pcpu,pid,user,args | sort -k 1,2 -r | head -10 But, first, it sorts ...
0
votes
1answer
298 views

Why does my server running nginx/php-fpm keep losing session capability without generating any errors?

I am managing a server that has a couple dozen websites on it and they have all been working fine until last week when it was noticed that one site had seemingly lost the ability to maintain session ...
1
vote
0answers
808 views

What is wrong with my logstash configuration?

Background I have two types of log files: output from an ETL process, and then output from a downstream processor. We call these "ETL" and "Processor" logs. The ETL logs are in their own folder ...
3
votes
1answer
193 views

Windows Events for Remote Desktop logon failure

According to ref the logon types 10 and 3 in windows events are represnting Logon Type 10 = RemoteInteractive Logon & Logon Type 3 = Network Logon But when i tried to connect a Windows machine ...
1
vote
1answer
44 views

logrotation process stdout and stderr windows

I have a service on windows that's running another process that prints many lines to its STDERR and STDOUT. I'm capturing those lines and redirect them to some log file. I would like to logrotate on ...
-1
votes
2answers
405 views

Lots of mysql processes log error too many open files

I'm having problems with a CentOS server thats running slowly, htop shows about 40 lines of this which I think is causing the problem: 27218 mysql 20 0 17.7G 7449M 5088 S 0.0 46.8 0:00.24 /...
0
votes
2answers
38 views

Is this a user/pass connection or an email communication connection?

I have lines like these in /var/log/messages: Jul 12 01:26:00 h2 xinetd[1596]: START: smtp pid=11253 from=::ffff:221.219.213.54 I need to know if that is an email connection like the ones being made ...
0
votes
0answers
19 views

How to make name resolving faster when querying a huge iptables log file

My daily iptables log files are 1-1.5 GB, which as you see is a huge size. And the amount of logs will get more and more each day. I often need to extract source and destination ip addresses, resolve ...
1
vote
1answer
156 views

Logrotate script not uploading to s3

I am trying to use logrotate to upload log files from my rails and nginx commands once a day. When I run the logrotate command manually the files successfully upload, but it never does it on its own. ...
0
votes
2answers
55 views

SFTP logging doesn't work

I have some problemas trying to log sftp actions. I've configured some files but it doesn't write in the log file. I'm using Debian 7. User configuration: sftpuser02:x:1003:1003:SFTPUSER02:/...
0
votes
1answer
47 views

Central Logging Options - need flat file as well as elastic search

I would like to have ephemeral ec2 instances push logs to a central flat-file store for archiving and manual perusing, as well has have that data pushed to elastic search. Is there a single agent ...
2
votes
1answer
185 views

Does AppEnforce.log really log the context used for installation incorrectly?

I have a deployment type with the following attributes: Technology: MSI Installation behavior: Install for system Logon requirement: Whether or not a user is logged on Installation program visibility:...
0
votes
2answers
52 views

logrotate not workig as expected

I am setting up logrotate & realized that a few of the options are either incorrectly explained/understood. My logrotate rotate 52 keyword is creating 52 files of the same log every time it ...
0
votes
0answers
18 views

Log specific info from request in Apache

I need to login whether X-PDONE-SESSION-ID come on each request being made to my server or doesn't. First I have enabled mod_forensic_log and I setup this at my virtual host logging: <VirtualHost *...
0
votes
0answers
67 views

Solaris run rsync after logadm

I'm trying to get this logadm configuration running. '/dir1/*/*/alert*.log' -C 8 -c -s 10m -t '$file_%Y-%m-%d' -z 0 -a '/usr/bin/rsync -qp /dir1/*/*/alert*.gz root@192.168.0.10::alert_logs/$(...
1
vote
1answer
2k views

What is this error in apache error.log

What is this error in apache error.log and how to fix that problem?: [Sat Jul 25 09:23:11.961977 2015] [proxy_fcgi:error] [pid 4448:tid 140445816444672] [client 127.0.0.1:57067] AH01068: Got bogus ...