Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

-1
votes
1answer
1k views

How to determine what traffic is being dropped / blocked base on iptables log

I have followed the example for iptable logging from https://help.ubuntu.com/community/IptablesHowTo#More_detailed_Logging sudo iptables -I INPUT 5 -m limit --limit 5/min -j LOG --log-prefix ...
7
votes
3answers
5k views

Clearing/Deleting Docker Logs

On our docker implementation on GCE, we are running out of space on the root file system. Since images themselves are stored on a separate 1TB volume, the images themselves shouldn't be the problem. ...
0
votes
0answers
39 views

Apache/HTTPD not creating/using error_log

The location of my apache log is set to /var/www/vhosts/mydomain/logs/error_log or /var/www/vhosts/mydomain/logs/subdomain.mydomain.com/error_log for my subdomains. I once deleted the error_log for ...
1
vote
0answers
191 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
0
votes
1answer
269 views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
1
vote
1answer
2k views

Snort not sending alert log file to syslog server?

I am set up with three virtual machines running Ubuntu - a Server, Client, and Gateway. I am tasked with setting up Snort on the Gateway to monitor "attacks" from the Client to the Server. Snort is ...
1
vote
2answers
287 views

Syslog does not record logs received over TCP to a file

I am trying to setup a centralized rsyslog server on CentOS 6.5 for Cisco routers and switches. On the Cisco devices, I've set the correct date/time and enabled timestamps, logging to the server over ...
0
votes
1answer
564 views

apache error log AH00135: Invalid method in request "GET /cgi-bin/php HTTP/1.0

Today I have noticed a lonely error (for the last week) inside of my error log file: [datetime] [core:error] [pid 11220] [client 187.33.2.88:34964] AH00135: Invalid method in request "GET ...
1
vote
0answers
100 views

How to retrieve a list of disk devices from Windows Server 2012R2

In Windows Server 2012R2 Event Viewer shows error ID 15: Log Name: System Source: disk Date: 9/29/2014 3:16:49 PM Event ID: 15 Task Category: None Level: Error ...
1
vote
2answers
40 views

Access to logs for not root/sudo user

What should I choose to allow staff access to logs on server. For example if I have user webmaster which should have access to /var/log/{mysql,nginx, etc...}, how can I make it? Maybe add group ...
1
vote
1answer
205 views

Jenkins change log timestamp to 24 hour format

By default, Jenkins' main log contains timestamps like the following: Sep 26, 2014 7:03:00 PM hudson.triggers.SCMTrigger$Runner run INFO: SCM changes detected in main-web-flow. Triggering #613 I ...
0
votes
1answer
56 views

Fine-grained control over mod_security logging

I installed mod_security2 on several dozen servers (each with several dozen VHosts) and don't have the time to configure it for every VHost. In the default configuration, it produces copious amounts ...
4
votes
1answer
738 views

Nginx log entries to multiple files

I'd like to log the same access.log entries to separate files, so when a request comes in it should populate a.log and b.log. Is there any way to do this with nginx?
0
votes
1answer
83 views

Daily postgresql cron error log file

I am getting these emails daily: /etc/cron.daily/logrotate: error: error accessing /var/log/postgresql: No such file or directory error: postgresql-common:1 glob failed for /var/log/postgresql/.log ...
0
votes
1answer
323 views

How to exclude a particular domain entry from access.log in squid3 on debian

I have proxy server setup running squid proxy and Squid Cache: Version 3.1.20 on debian, I am doing some log analysis from squid's log file i.e /var/log/squid3/access.log. I dont want a entry of ...
1
vote
2answers
173 views

Sent mail/login log for roundcube webmail

Does roundcube webmail have a log for logins, or for sent mail? I searched everywhere but could only located the "error log" directory in roundcube, not one for logins or for sent mail. I'm trying to ...
1
vote
2answers
2k views

How to log ssh client connection/command?

I would like to know how i could log SSH command lines a user is using on a server. For exemple, if the user Alex on my server is doing the following set of commands : $ cd /tmp $ touch myfile $ ssh ...
1
vote
1answer
64 views

Integrating log4cxx and kafka

What is the best way to push logs from a C++ server using log4cxx for logging to a kafka cluster? Is there any compatible log4cxx appender or any proxy that I could deploy in the middle?
1
vote
0answers
191 views

Using OSSEC to monitor windows services

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
0
votes
1answer
90 views

My local MySQL server was temporary down for unknown reasons

My local MySQL server 5.5.38 (on CentOS 6.5) has been temporary down and the mysql log file was filled with this kind of details: This could be because you hit a bug. It is also possible that this ...
0
votes
2answers
183 views

URL logging on DNS server?

Following this setup http://www.g-loaded.eu/2010/09/18/caching-nameserver-using-dnsmasq/ I was able to configure a DNS resolver server using dnsmasq for my network. The setup works correctly and logs ...
0
votes
0answers
115 views

(phusion passenger:?) How to switch off httpd/error_log message “Either the vistor clicked on the 'Stop' button …”

Our httpd/error_log is flooded with messages like [ pid=9705 thr=140631357052896 file=ext/apache2/Hooks.cpp:784 time=2014-09-13 10:18:10.379 ]: Either the vistor clicked on the 'Stop' button in the ...
0
votes
1answer
54 views

GET Request for /server-status every second [closed]

I'm using an Linux server running Apache and Plesk and in the access_log, I'm seeing the following every 1 second; 127.0.0.1 - - [08/Sep/2014:14:20:06 +0000] "GET /server-status HTTP/1.1" 200 15843 ...
0
votes
2answers
100 views

Block certain GET request in Apache log

Since recently I have a VPS. Now it seems that there is a domain not owned by me that has DNS records pointing to my IP. Because of this my Apache (2.4) logs are flooded with some kind of GIT request. ...
2
votes
2answers
120 views

Method to log amount of transmitted data per each IP address in linux

I am looking for a method in linux to log the amount of data transmitted (received and sent separately) for every single IP address to which the data was sent to or received from. These statistics ...
0
votes
1answer
291 views

How To Tell Apache To Not Log Certain Requests In Its Access Log

I am trying to set a SetEnvIf variable in apache2 and exclude it in CustomLog in order to stop my logs from filling up. I want to match a regex and also specific IPs. I tried to follow the ...
2
votes
2answers
532 views

How do you configure runit logging

I am having trouble with setting service with proper logging using running. Here is a brief overview of files and scripts I created according to runit's documentation and other resources I found in ...
0
votes
2answers
269 views

AWStats LogFormat for AWS Elastic Load Balancer

Hoping someone can point out what is wrong with the LogFormat I'm attempting to use with the access logs generated by Amazon ELB. Multi-line for ServerFault readability: %time5 %elb %host %host_port ...
-1
votes
1answer
112 views

Timer_EntityBody IIS Error

I'm getting the Timer_EntityBody error in my HTTP error log. I'm familiar with what it means what I'm not familiar with is what does the preceding 4 mean in: - 4 Timer_EntityBody
0
votes
0answers
144 views

No Logged in php5-fpm.log File

I'm using ubuntu 14.04 and by default, php5-fpm.log is enabled under /etc/php5/fpm/php-fpm.conf. But I don't see any logged specially warnings like the following: WARNING: [pool web8] child 76743, ...
1
vote
1answer
121 views

Tomcat: Log the equivalent of SSL_CLIENT_S_DN

In Apache HTTPD it is possible to create custom request logs which include the value of SSL_CLIENT_S_DN. Since the site requires mutual authentication (client certificates) this provides a good audit ...
0
votes
1answer
89 views

execute command in ErrorLog and log to a file in parallel

I try to use apache2gelf to send my error.log information to a graylog2 server. To use that tool I have to change the ErrorLog setting to: ErrorLog "|| /path/to/errorlog2gelf.py --vhost example.com" ...
0
votes
0answers
96 views

IIS 7 Advanced Logging Filters

I'm trying to separate normal from mobile traffic using Filtering in IIS Advanced Logging, but it is not working. I have one definition with: ('User Agent' Equals '.*android.*') and the "Enable as ...
0
votes
2answers
38 views

Access logs of sftp on centos

Is it possible to log the sftp logged in informations (Who accessed, when and from where ) Like which sftp user have logged on to the file server , This may also contain information such as ip ...
0
votes
1answer
212 views

Apache2 internal server error not being logged

I'm doing some web development with the Laravel framework, and I have my jQuery set up so that it sends a request on click of a button to a PHP file, which then returns the result back to my jQuery. ...
3
votes
1answer
495 views

Need help grepping postfix log

I'm trying to search for an unknown string (Message ID) in a log based on a known string (recipient address), and then grep the unknown string to output the entire relevant log information. I'm able ...
3
votes
0answers
564 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
1
vote
2answers
970 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
1answer
35 views

Does enabling more IIS logging fields consume resources?

It seems that IIS7 doesn't enable the bytes sent and bytes received fields in its logs by default. I would like to enable them so I could watch bandwidth consumption of individual sites, but my ...
-2
votes
2answers
110 views

FTP and SFTP logs track in CentOS

How it is possible to track the changes made to a directory using tools like FileZilla or XFTP ? because we found some files suddenly got missed from server, in history also nothing was found so ...
1
vote
1answer
120 views

logrotate: neither rotate nor compress empty files

i have just set up an (r)syslog server to receive the logs of various clients, which works fine. only logrotate is still not behaving as intending. i want logrotate to create a new logfile for each ...
0
votes
1answer
33 views

What is a name of a technique of deduplicating and summarising of logs?

So for example, you have a stream of logs coming in somewhere (a syslog server, forwarded Windows event logs, "Typical Poor Sysadmin's Mailbox", a Splunk indexer, whatever...) Imagine this stream of ...
0
votes
0answers
47 views

How do i set regex variable as env variable and use it to conditionally log?

This is what I have in my apache conf. I am setting the first part of the request uri as env varibale. It is always going to be client1 or client2. Now based on that I need to log differently (pass ...
1
vote
1answer
509 views

Monit cannot connect to Solr/Jetty instance

I have my Solr/Jetty up and running well on Ubuntu 12.04. I am trying to hookup my monit conf to monitor it, but it is having trouble connecting to the service. I have Solr running on port 8983 and ...
0
votes
0answers
128 views

Nginx shows no user agent string

I have been dealing with an issue on one of my servers for quite a while now. In short, the server receives massive spikes in load - up to 50 - but the site gets almost no traffic. I know this can be ...
6
votes
1answer
3k views

How can I let nginx log the used SSL/TLS protocol and ciphersuite?

My goal is to ensure proper security for clients connecting to my nginx. I'm following Mozilla's guide to configure TLS properly on my nginx installation, but I don't have an overview of the actual ...
3
votes
0answers
206 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
0
votes
2answers
208 views

Customize log entry for AWS ELB for real user IP

I would like to change the logging format for AWS ELB, in order to log the real user IP. My current server setup contains multiple layers of proxies as followed: CloudFlare -> AWS ELB -> Nginx (EC2) ...
3
votes
2answers
552 views

mod_fcgid: can't apply process slot after software upgrade

I'm on a shared hosting plan with a Wiki and a Bulletin Board installation. After upgrading the Wiki to the latest release my users are not able to upload files with the integrated "media manager" ...
0
votes
0answers
279 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...