Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
4answers
211 views

How to concat rotated logs back together

How to concatenate the rotated logs back together to make the original file? huali-access.log huali-access.log.15 huali-access.log.21 huali-access.log.28 huali-access.log.34 ...
0
votes
1answer
13 views

Lighttpd stops writing to access.log

I have this issue with my lighttpd installation where logging to access.log will cease once the default log-rotating software erases my access.log after copying it to access.log-YYYYMMDD. I have to ...
2
votes
2answers
2k views

Understanding Zabbix Triggers

I have zabbix set with an item to monitor a log file on a zabbix client: log["/var/log/program_name/client.log","ERROR:","UTF-8",100] And a trigger to determine when that log file get's more ...
0
votes
0answers
6 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
12 views

Possible to have FQDN in Debian Logfiles?

Is it possible to have instead the hostname the fqdn inside debian log files? Example: Now its: Mar 2 18:00:12 www rsyslogd: [origin software="rsyslogd" swVersion="5.8.11" x-pid="2442" ...
2
votes
4answers
5k views

Ubuntu 14.04 System Logging

I've set up an Ubuntu 14.04 Server (from an Ubuntu 12.04 Server) but today I wanted to look in the auth.log but this file is not used. It seems that ´syslog´ was deleted. How does Ubuntu 14.04 log? I ...
0
votes
0answers
13 views

sending tomcat catalina.out to syslog

we're on tomcat 6.4 on centos. I've been trying to get the catalina.out logs in tomcat to syslog. For reasons it's very important that I don't send the raw logs, they have to be tagged with OURTOMCAT: ...
11
votes
7answers
2k views

Hacking prevention, forensics, auditing and counter measures

Recently (but it is also a recurrent question) we saw 3 interesting threads about hacking and security: My server's been hacked EMERGENCY. Finding how a hacked server was hacked File ...
43
votes
12answers
53k views

Do you have any useful awk and grep scripts for parsing apache logs? [closed]

I can use log analyzers, but often I need to parse recent web logs to see what's happening at the moment. I sometimes do things like to figure out top 10 ips that request a certain file cat foo.log ...
0
votes
1answer
405 views

Nothing is written in php5-fpm.log

I have two servers which is Ubuntu 12.04 and Ubuntu 14.04. When I use Ubuntu 14.04 in my new server and enabled the php-fpm log file found under /etc/php5/fpm/php-fpm.conf that reads as follows: ...
0
votes
0answers
18 views

Turn off error and access logs for one virtual host (Apache HTTP Server 2.4 on Windows)

How to turn off error and/or access logs for one virtual host in Apache HTTP Server 2.4? OS: Windows (There is a question about that but it is about Linux.)
1
vote
2answers
5k views

How to make Tomcat 7 log debugging info?

Tomcat 7 takes more than 21 minutes to start: ene 09, 2013 10:01:39 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 1290787 ms When it finishes it says that it's scanning JARs ...
0
votes
2answers
835 views

nginx with real_ip — log both client remote_addr and proxies address

I have an nginx instance set up behind multiple load balancing proxies, and I am using real_ip to get the clients IP address in remote_addr for processing by my Python application. However in my logs ...
0
votes
0answers
22 views

Keeping an easily searchable log of traffic through a router [closed]

I'm one of the sysadmins of a computer science students union which has a room on campus where people gather and work on projects or just hang around. We have an uplink to the university network and ...
0
votes
1answer
105 views

How to create an error_log in each's vhosts httpdocs directory

Running a CentOS 6.4 server with Plesk 11 and virtual hosts for each client/domain. What I'm now trying to accomplish is to auto-create an error_log in each user's httpdocs folder in case of problems ...
5
votes
1answer
4k views

Logging and Reporting on W2k3 print server printing

Simple setup, single Windows 2003 standard server running as a printer server. Domain users have rights to print to all of the printers setup on the printer server. Question: I know the event log ...
0
votes
0answers
20 views

Can't setup Apache CustomLog to directly import in Piwik

I configured apache just like this article (https://github.com/piwik/piwik/tree/master/misc/log-analytics#setup-apache-customlog-that-directly-imports-in-piwik) explains but nothing happens during ...
-1
votes
0answers
26 views

ISPConfig not writing error logs [closed]

I have a default ISPConfig on a Debian 7 + NGINX + PHP-FPM. No settings where changed. I moved one of my websites from an old server to this new ISPConfig server and I tried to access the website, ...
0
votes
1answer
43 views

GET Request for /server-status every second [closed]

I'm using an Linux server running Apache and Plesk and in the access_log, I'm seeing the following every 1 second; 127.0.0.1 - - [08/Sep/2014:14:20:06 +0000] "GET /server-status HTTP/1.1" 200 15843 ...
1
vote
1answer
43 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
0
votes
0answers
5 views

Error Reporting for File Copy Process

I have a rather complex process in place which runs a java program to retrieve service records from our CRM and export them into an excel spreadsheet, which gets placed onto a server in our data ...
1
vote
2answers
44 views

My site is suddenly getting slammed, not legitimate traffic

I run a site with about 700 registered users. On a typical day, there are 30-50 hits. In the last three days, the traffic has increased insanely fast (according to Google Analytics). I got 7,287 hits ...
0
votes
0answers
19 views

IIS 7, LogStash and flushing IIS logs

I'm using LogStash to import IIS logs into ElasticSearch. It's done by pointing the LogStash to the folder with IIS logs which contains several log files each per day. Currently I don't use the ...
1
vote
2answers
67 views

Sent mail/login log for roundcube webmail

Does roundcube webmail have a log for logins, or for sent mail? I searched everywhere but could only located the "error log" directory in roundcube, not one for logins or for sent mail. I'm trying to ...
0
votes
1answer
34 views

how to monitor multiple log files?

I have to monitor multiple logs. By now I have a iTerm on my mac with several windows. So I have all logs on one sight. The idea is now to have a RaspberryPie with an extra monitor. By now after a ...
1
vote
1answer
36 views

Drupal application load troubleshooting

I'm receiving some sporadic high server load on a Drupal application (really high. 8 cores, load average of 50). The load is normally sitting between 5-10. The Drupal application sits behind a ...
0
votes
1answer
994 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
1answer
39 views

Windows Event ID 4624 Repeating With Resource Not Available

We've recently started logging 4624 event IDs on our domain controllers to help track user activity. Overall this has been fine, but recently started getting these messages over and over again. ...
4
votes
1answer
198 views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
0
votes
1answer
15 views

How to set up a global CustomLog on Apache2 for every virtualhost

Actually I got some issue with file descriptors on Debian Wheezy with 3.2.13 kernel and Apache/2.2.16. I would like to reduce this limit, actually each virtualhost got a CustomLog and an ErrorLog, I ...
0
votes
1answer
456 views

logrotate not rotates my logs [duplicate]

My logrotate works perfectly, except for this configuration: /var/awdata/awarchive.*.log /var/log/awstats.log { rotate 12 } This is my logrotate -d /etc/logorate.conf output: considering ...
0
votes
2answers
13 views

Lighttpd error log increases too fast

I am using lighttpd v1.4.35 and I have developed a simple web page with some links to test. After some clicks I have noticed the error log is increasing too fast. In /etc/lighttpd/lighttpd.conf I ...
16
votes
4answers
12k views

IIS Log Request Body / POST Data

Does anyone know how I could get IIS to log POST data or the entire HTTP request?
0
votes
1answer
50 views

Logstash: Failed to flush outgoing items

First of all, I'm a total newbie to logstash. Despite the fact that I've managed to achieve some basic logging (trying to parse an apache log file without the build in COMBINEDAPACHELOG). However, I ...
3
votes
1answer
563 views

Remote rsyslog only writing logging data to /var/log/syslog and not custom logfiles

I'm having a problem setting up rsyslog to log remote logging data to a specific file. I have two Windows Server 2008 boxes that each have a C# application using NLog.Targets.Syslog which log their ...
0
votes
1answer
611 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
4
votes
4answers
10k views

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by ...
1
vote
2answers
269 views

Checkpoint FW1 logging

When I view the logs created for my checkpoint fw1, does it log connections on receiving the syn, or does it wait till the three way handshake completes? If it logs after the syn, is there anyway of ...
4
votes
6answers
4k views

How to find “growing” files inside a linux system

I have a server that is constantly losing disk space so I reckon there must be some logs that I'm not aware of. What is a good way to locate files that are constantly increasing in size?
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
1k views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...
0
votes
2answers
219 views

How do I view my website stats via cmd line? [closed]

I use Wordpress for my website. Is it possible to use SSH or such to view the stats on my website? Via cPanel, I can see latest visitors, logs and errors. I just want to be able to view them via ...
1
vote
0answers
14 views

Flush IIS7 logs manually on remote machine

I know how to flush IIS7 logs when I'm logged on some machine: netsh http flush logbuffer How can I do it on another machine?
0
votes
0answers
31 views

Cryptic NGINX access log entries [duplicate]

While reading my nginx access and error logs I stumbled upon some rather unusual entries. 127.0.0.1 - - [11/Feb/2015:15:08:25 +0100] ...
0
votes
1answer
2k views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
1
vote
1answer
60 views

Fluentd not writing apache access log to mongodb

I'm following the instructions from this link to write apache access logs to mongo db- http://docs.fluentd.org/articles/apache-to-mongodb. But nothing is getting written to mongo DB. I'm checking ...
0
votes
0answers
30 views

Lockfile creation failed

I got a plain-text logfile (not lock file) in /var/log what I cannot open with: lockfile creation failed: exceeded maximum number of lock attempts I wonder what causes this and how can I unlock it ...
-1
votes
0answers
16 views

Snort disable Syslog logging

is there a way to stop the snort deamon to log his status in syslog when it's get interrupted and startet? A snipped output can be seen here http://pastebin.com/82hy2F0x Thanks fork
38
votes
6answers
5k views

The corporate benefits of using MSI files

What are the advantages of using .msi files over regular setup.exe files? I have the impression that deployment is easier on machines where users have few permissions, but not sure about the ...
4
votes
1answer
9k views

nginx / php-fpm error logging

I'm trying to figure out where the PHP errors are going in my setup. I'm running nginx as the reverse proxy to PHP-FPM, but I'm not seeing the various E_NOTICE or E_WARNING messages my app is ...