Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

-1
votes
0answers
33 views

How to log uploaded files with nginx?

I want to log names (with full paths) of all uploaded files. Is it possible to do this with only nginx? os: CentOS 7.1 nginx: 1.6.3 Parameters for sending files in nginx.conf: sendfile on; ...
-2
votes
0answers
33 views

How do you interpret Cisco Switch and Router Logs? [on hold]

I am brand new to log analysis and I came across some Cisco Switch and Router logs (that require me to analyse them). The logs contain 4 fields;the first three were easy to fathom (Datetime, error ...
-1
votes
0answers
15 views

best practice for nginx/tomcat logging [on hold]

I would like to know, what would be the best practice for nginx logging. Currently we are logging all the request which comes to nginx web server both access and error logs. Question is Is there ...
4
votes
1answer
261 views

What's causing so many “httpd: <ul></ul>” entries in /var/log/messages?

On a low-powered VPS I maintain, which also functions as a production server, I keep an eye on logs to crisis-manage should a site get an influx of traffic or something goes haywire (tail a bunch of ...
1
vote
2answers
480 views

How can I suppress Postfix anvil statistics from system logs?

After every email sent through my mail server, postfix/anvil appends something like the following: Nov 9 15:09:11 keutenberg postfix/anvil[30006]: statistics: max connection rate 1/60s for ...
2
votes
2answers
7k views

All Debian boot messages

How can the messages that scroll by when booting a Debian system be reviewed later? In other words, how can I review absolutely all of them conveniently? That's the important point to the question; ...
0
votes
2answers
2k views

Remove Iptables log from kern.log syslog messages

I'm having trouble with Iptables logs, i'm not able to get them out from kern.log, syslog and message files. I added two rules in rsyslog.conf which redirect my messages to an "iptables.log" file but ...
0
votes
3answers
1k views

How do I redirect Weblogic logging to database?

Is there a way to send or redirect Weblogic (or Fusion Middleware) logging output to a database, without having to write a custom application? All the documentation I've read seem to deal exclusively ...
40
votes
6answers
5k views

The corporate benefits of using MSI files

What are the advantages of using .msi files over regular setup.exe files? I have the impression that deployment is easier on machines where users have few permissions, but not sure about the ...
0
votes
1answer
21 views

Debugging random SQL login failure from Web Server

This is a very basic level question, but it could really benefit from some extra help in the diagnosis. We have a 2005 SQL Server Named: SERVERNAME-PROD We have a Web Apps Server that's running IIS ...
0
votes
2answers
437 views

Correlating data within Kibana

I'm looking at aggregating data within the whole ELK stack (Elasticsearch/Logstash/Kibana) and I'm getting lots of good data from my windows systems. It's working very well, but when i get Windows ...
1
vote
2answers
908 views

nginx with real_ip — log both client remote_addr and proxies address

I have an nginx instance set up behind multiple load balancing proxies, and I am using real_ip to get the clients IP address in remote_addr for processing by my Python application. However in my logs ...
-1
votes
1answer
132 views

Why doesn't logstash grab or index the files from the mapped drive?

I don't understand why logstash is so finicky with network resources. I shared a folder on another machine and then mapped it as Z: under Windows Explorer. I've verified the path and everything. I can ...
-1
votes
0answers
24 views

Bringing in single and multi-line App log records to ELK (some contain JSON objects) [migrated]

I'm trying to take log records from a custom (node.js) application that will be putting data into elastic search and then processed by Kibana. My environment is Ubuntu with ELK (Elasticsearch, ...
2
votes
1answer
147 views

nginx error log Grok pattern

I am having trouble getting the following nginx error log message to parse in the grok debugger. I have a feeling there is a stupid trick that I should use but can't figure out what it may be. ...
-1
votes
0answers
18 views

Show historic hardware changes in windows 7 [migrated]

Brief question: In Windows 7, Is there a log where I can see the ram memory of the system at different dates? Explanation: A friend of mine have detected some missing hardware (ram sticks) on some ...
1
vote
1answer
29 views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
26
votes
4answers
124k views

How to enable MySQL logging?

I am running MySQL 5.0.45 on OS X 10.6.1 and I cannot get MySQL to log anything. I am debugging an application and need to see all queries and errors. I added to the etc/my.cnf: [mysqld] ...
1
vote
0answers
20 views

IDS (or similar) to query ELK logs and send alarms on strange situations [closed]

I have an ELK stack (that receives logs from mostly web services,web applications). I'd like to not only store and visualize some stats about the logs(features of ELK) but also to use them to detect ...
2
votes
1answer
34 views

How to log administrator activities in Red Hat Enterprise? [closed]

Is it better to use auditd or sudo logs to log root and other user activities on a Red hat enterprise machine?
0
votes
0answers
15 views

Adding timestamps to supervisord logs

Is it possible to let supervisord add timestamps to the outputs in stdout_logfile and stderr_logfile? I couldn't find it anything about that in the documentation.
6
votes
7answers
5k views

how to write a script that only acts on new log entries

I feel like this should be a simple thing but I am having a hard time figuring it out. I am trying to write a script that will monitor one of the apache log files and take some specific action. But ...
2
votes
2answers
32 views

What's the purpose of spammy HTTP referers?

In the logs of my website, there's a lot of visits with a HTTP referer set to spam-like websites (usually Russian sites, I've noticed). I assume what they're doing is just using a web crawler to visit ...
0
votes
1answer
26 views

Runit logging not working

I created a service with runit. Service starts and falls without logging. I need information about STDOUT of service for error detection (service starts without runit properly). I created a ...
0
votes
1answer
1k views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
25
votes
8answers
26k views

How to add a timestamp to bash script log?

I have a constantly running script that I output to a log file: script.sh >> /var/log/logfile I'd like to add a timestamp before each line that is appended to the log. Like: Sat Sep 10 ...
0
votes
0answers
5 views

Logging in IIS 7.5/8.0

I have an IIS 8.0 Server setup running ASP .NET applications. In addition to the normal logging like, Begin Request, End Request, Requests /Sec, etc., I also want to log some perfmon counters like ASP ...
0
votes
1answer
17 views

How to monitor/log wireless events including failed authorization attempts?

Is it possible to log wireless events including failed authorization attempts? I have two access points and also would like to see, which one is serving which client and see when client is connected ...
0
votes
1answer
258 views

Method request in nginx

my Nginx report in error log with 2012/07/24 13:00:16 [notice] 19056#0: *3275841 "^(GET|HEAD|POST)$" matches "GET", client: 42.114.191.177, server: _, request: "GET /template/images/loading.gif ...
0
votes
1answer
8 views

Graylog ignoring all HTTP logs

I've integrated our PHP web application using Monolog recently and added support for logging into Graylog. Until very recently I've used the Graylog VM and I've successfully logged all the information ...
1
vote
2answers
14 views

Modifying LogFormat in Apache

I need to modify the LogFormat in Apache in order to add the X-Forwarded-For header and log clients' real IPs. I attempted to edit that in httpd.conf file but I then found two separate parts for the ...
1
vote
1answer
13 views

Logging data posted to a specific URL in Apache

I have been asked to create a logging solution for an AngularJS application on a large e-commerce site. The solution itself has been created but actual transmission of the log data to the server has ...
1
vote
2answers
37 views

building a SIEM, should I send logs or get them from the gathering machine?

I am working in a Linux environment, I would like to gather all the logs from the machine pool on a unique machine X. There are several log files I need to move and I am not sure about the way I ...
0
votes
1answer
306 views

DL360 G2 SNMP drive failure location

I've got this service call with the snmp information provided below, about the drive failing in HP DL360 G2 server: Error log Event Type: Error Event Source: Storage Agents Event Category: Events ...
0
votes
0answers
10 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
1
vote
2answers
32 views

nginx log when specific referrer is present

Because someone steals content from our website, I need to create additional log file, that logs only if http_referrer contains specific domain. Currently I have this: if ($http_referer ~* ...
0
votes
4answers
248 views

How to concat rotated logs back together

How to concatenate the rotated logs back together to make the original file? huali-access.log huali-access.log.15 huali-access.log.21 huali-access.log.28 huali-access.log.34 ...
0
votes
1answer
16 views

What's in the DNS Debug Log Message Fields

I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find ...
1
vote
2answers
99 views

Elasticsearch index much larger than the actual size of the logs it indexed?

I noticed that elasticsearch consumed over 30GB of disk space over night. By comparison the total size of all the logs I wanted to index is only 5 GB...Well, not even that really, probably more like ...
0
votes
2answers
319 views

What is the purpose of elasticsearch logs? How to manage them?

As I understand indexes(or data) are being stored in /var/lib/elasticsearch by default, this folder contains nodes with 0 and 1 folders and overall size of these folders is 376M. The logs are ...
0
votes
2answers
31 views

Is there a way to backup logs to tape without mounting a NAS?

The traditional way to send logs to tape backup as I understand it is to mount a NAS which has the ability to do tape backups (or maybe send to a syslog server which in turn mounts a NAS). Is there a ...
0
votes
2answers
1k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
0
votes
1answer
1k views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...
-1
votes
0answers
22 views

Recommended Storage for Domain Controller Collecting Audit Logs [duplicate]

I am currently working with a customer on getting their Windows audit logs to our SIEM. Since the customer is unwilling/unable to provide hostnames for each host in the environment, I have suggested ...
2
votes
4answers
390 views

Use logger in shell script

How can I use logger in a shell script? If I run ntpd -qnp pool.ntp.org 2> >(logger) in console, it works as expected. If I put it into a shell script #!/bin/sh ntpd -qnp pool.ntp.org ...
-1
votes
2answers
31 views

shell command to find common IPs on a specific url from error_log [closed]

Is there a shell command to group all the most common IPs that requested a specific file via GET (or that came from a url)? For example with this command I can group requests from ip: cat ...
3
votes
0answers
19 views

IIS 7.5 not rolling over logs hourly

I have six IIS 7.5 web servers deployed using a Shared Configuration. The properties for the logging in the configuration are set to log Per Site, W3C, and on an hourly schedule: For five of the ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
3answers
3k views

AWStats is processing log files but does not display them [closed]

I've setup AWStats on my VPS to get some more insight into the traffic coming to my site. As instructed I ran a manual build/update which ran fine: sudo -u www-data ./awstats.pl -config=example.com ...
0
votes
0answers
84 views

IIS 7 Advanced Logging Filters

I'm trying to separate normal from mobile traffic using Filtering in IIS Advanced Logging, but it is not working. I have one definition with: ('User Agent' Equals '.*android.*') and the "Enable as ...