Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

1
vote
2answers
4k views

How to make Tomcat 7 log debugging info?

Tomcat 7 takes more than 21 minutes to start: ene 09, 2013 10:01:39 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 1290787 ms When it finishes it says that it's scanning JARs ...
1
vote
2answers
154 views

How can I get metrics such as incoming and outcoming traffic with Apache servers?

Suppose a network consisting of hubs A, B, C, D ... and X. I am looking for ways to visualize how users use the network such as incoming, outgoing and other metrics. In Apache logs, I can see some ...
-1
votes
0answers
11 views

Audispd writing too much to /var/log/messages [on hold]

I have been trying to stop audispd syslog plugin from writing to /var/log/messages, but none of the recommended configs work. I have a SLES11 installation using the same configuration, without any ...
2
votes
3answers
2k views

Akamai log processing

I'm digging through Akamai logs, downloading excel sheets, and then manually joining them so that I can do sorting of data to find top videos and referrers. Are there any tools you know of to help ...
1
vote
3answers
2k views

Apache error logs - how to view as web page (for internal intranet server) when root access only usually?

I'd like to be able to display the error_log as a web page so that a colleague (without root access) can view this for troubleshooting their PHP development. On my CentOS 5.x machine the error log is ...
6
votes
4answers
215 views

How should applications be developed for easy deployment?

I work for a company that deliver distributed control systems for various industries. We find that IT Admin skills vary to a great degree both in terms of skills and interest. We have everything from ...
0
votes
1answer
17 views

Rotate log files with timestamp in file name

I have a log directory that my app writes into. It creates a log file like this: 2015-01-22-10-full-activity.log 2015-01-22-11-full-activity.log 2015-01-22-12-full-activity.log ...
0
votes
0answers
12 views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
0
votes
0answers
7 views

Linux: UFW blocks connections out via certain ports, how can i find which process initiated it?

I am noticing repeating attempts on my server to connect to a certain IP, UFW logs all the details, including the source port. Is there a way to log which process is initiating this? I am concerned ...
0
votes
0answers
17 views

tail -f not following log file in Docker container

I am seeing some strange behavior running the tail -f command inside a Docker container in CoreOS. There are a number of variables I can think of that may be contributing to the problem but I am not ...
0
votes
1answer
18 views

Is Lync chat, or Persistent Chat a viable alternative to email based alerts? [on hold]

I'm dealing with an envrionment that mostly uses email for alerting. The issue I have is that all emails must be journaled by policy. In addition, each email is replicated via SMTP using SMTP ...
0
votes
1answer
827 views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
1
vote
1answer
16 views

Nginx Access.log status results according to different file

nginx access.log, I want to do status="200" access_log /var/log/access.log main; status="444" access_log /var/log/access444.log main; status="401" access_log /var/log/access401.log main; this can ...
0
votes
1answer
13 views

Remote email send save log

I have a problem that I believe has no solution. A customer has a financial program that authenticates to the SMTP server and send emails. However, these outgoing emails are not saved in the "Sent" ...
0
votes
0answers
9 views

tomcat not logging to catalina.out

We have a server running a tomcat app that's not logging to catalina.out, we've checked the filesystem permissions, everything looks fine there. the logging.properties is the same (md5sum) as on ...
0
votes
1answer
21 views

Detailed logging of OS X [on hold]

The company I work at is going from small business to medium along with new HR requirements. We mainly have OS X workstations. I'd like a solution where all of these workstations log to a local ...
0
votes
1answer
38 views

How to get php-fpm to log to stdout / stderr when running in a docker container

I have php-fpm in a docker container and in the Dockerfile I edit the fpm config file (/etc/php5/fpm/pool.d/www.conf) to set up access logs to go to /var/log/fpm-access.log and error logs to go to ...
1
vote
2answers
28 views

Why does my Apache access log timestamp sometimes go backwards?

I noticed that in my Apache log (actually Oracle's branded HTTP Server, which is really Apache) the timestamp of the lines sometimes goes down, instead of up. Here is an example: 1.2.3.4 - - ...
0
votes
1answer
16 views

How do I find out when a MySQL root password was last changed?

I have looked for solutions to this. I am able to change it, but I need to find out when it was last done and preferably also seeing who was logged in when it was done. Need proof for a security ...
-1
votes
0answers
11 views

/goform/goform_get_cmd_process generated 404s

Server shows some 404s on the following odd request coming from a logged in trusted member of our website (thus, unlikely an attack/trojan). Trying to search the web for parts of that string yielded ...
-1
votes
0answers
6 views

How to create an event during a log entry in apache syslog?

Whenever there is a log entry in apache syslog, I want to trigger an event and send the log message to some http or https server as a request. How can I do that ?
-2
votes
0answers
10 views

Apache access_log file missing info [closed]

The cPanel "lastest visitors" log display option shows detailed info (page loaded, user-agent, etc), but as far as I can determine, the only raw access log is: /usr/local/apache/logs/access_log ...
1
vote
1answer
109 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
36
votes
6answers
4k views

The corporate benefits of using MSI files

What are the advantages of using .msi files over regular setup.exe files? I have the impression that deployment is easier on machines where users have few permissions, but not sure about the ...
3
votes
3answers
341 views

Reuse remote ssh connections and reduce command/session logging verbosity?

I have a number of systems that rely on application-level mirroring to a secondary server. The secondary server pulls data by means of a series of remote SSH commands executed on the primary. The ...
-2
votes
0answers
12 views

Logstash with multipule indexes, best set up

I am wondering what is the best way to set up logstash if i am reading a file with multipule 'styles' of logs in them. I am using grok to match and process lines in the logs, but i have several ...
2
votes
1answer
16 views

Elasticsearch index much larger than the actual size of the logs it indexed?

I noticed that elasticsearch consumed over 30GB of disk space over night. By comparison the total size of all the logs I wanted to index is only 5 GB...Well, not even that really, probably more like ...
2
votes
4answers
350 views

How can I forward an application log to a remote log server?

I have an application which writes its own log file in /var/log/app/app.log. How can I forward these logs to a remote Rsyslog server?
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
0
votes
1answer
22 views

amavis log email hash

I want to log a hash value of all emails handled by my mail-server. I found in amavis README.customize.gz the following line: The substitution text for the following simple macros is built-in: [...] ...
0
votes
0answers
22 views

Why doesn't logstash grab or index the files from the mapped drive?

I don't understand why logstash is so finicky with network resources. I shared a folder on another machine and then mapped it as Z: under Windows Explorer. I've verified the path and everything. I can ...
0
votes
1answer
2k views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
0
votes
1answer
972 views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...
0
votes
1answer
69 views

Nginx: How to use docker log collector when nginx is running under supervisord

The official nginx docker image (Dockerfile) uses the following trick to hand off its logs to stdout and stderr so that they are captured by the docker log collector and viewable using docker logs ...
0
votes
2answers
951 views

fedora tomcat log file path

My log file is inside: kamil@localhost tomcat$ grep "logs/" ./* ./log4j.properties:log4j.appender.R.File=${catalina.home}/logs/tomcat.log my CATALINA_HOME is kamil@localhost tomcat$ sudo grep ...
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
0
votes
0answers
19 views

Apache: Regex to log only last IP in X-Forwarded-For

I'm attempting to set up Apache 2.2's logging to record the last IP passed to it by the X-Forwarded-For header. I want to record the last IP from the X-Forwarded-For header if it exists and the ...
0
votes
2answers
158 views

Log Analyzer for IIS logs

I have plenty of programs that will parse IIS access logs and save them in a relational database (MS SQL or MySQL). I am looking for a good interface that will allow me to query those logs. For ...
0
votes
2answers
63 views

What is the purpose of elasticsearch logs? How to manage them?

As I understand indexes(or data) are being stored in /var/lib/elasticsearch by default, this folder contains nodes with 0 and 1 folders and overall size of these folders is 376M. The logs are ...
1
vote
1answer
18 views

Fluentd not writing apache access log to mongodb

I'm following the instructions from this link to write apache access logs to mongo db- http://docs.fluentd.org/articles/apache-to-mongodb. But nothing is getting written to mongo DB. I'm checking ...
0
votes
2answers
23 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
0
votes
2answers
334 views

Output php mail calls to log file

This question relates to the question found here: Find the php script thats sending mails Trying to do the exact same thing but can't get the log to output what I need. Not too experienced with ...
0
votes
0answers
12 views

BIND logging to find “resolved address”

Currently my logging is set up like this : logging { channel query_log { file "/var/log/named/query.log"; severity info; }; category queries { query_log; }; Which results in: client ...
25
votes
3answers
116k views

How to enable MySQL logging?

I am running MySQL 5.0.45 on OS X 10.6.1 and I cannot get MySQL to log anything. I am debugging an application and need to see all queries and errors. I added to the etc/my.cnf: [mysqld] ...
2
votes
3answers
22 views

Use iptables to log connections except for two addresses

We would like to use iptables to log all network connections except if the connecting address is A.B.C.D or the connecting address is E.F.G.H. These two addresses cannot be combined into a single CIDR ...
0
votes
0answers
38 views

Python logger stops logging

On an application server (CentOs 6.4), python's native logger will stop writing to a log file after about 48 hours of continuous operation. This started occurring when we added fluentd (td-agent) to ...
0
votes
1answer
902 views

Changing location of ClamAV logging files

I've run into a weird problem with ClamAV that I have been unable to resolve, due to a incredibly non-informative error message. I've installed ClamAV via aptitude on an Ubuntu box (ClamAV ...
-1
votes
1answer
36 views

Weird subdomains in access log? [closed]

I have Lighttpd on an Ubuntu server. I just checked the access logs from lighttpd for a particular domain. This domain only has a very simple index.html file that basically says "coming soon". Below ...
0
votes
2answers
79 views

How to pipe all log files entries to a database on linux?

I am thinking about building an application that would read my different server log files, save the parsed data to a database, and then remove the line from the log file. This is my programer side ...
2
votes
1answer
73 views

Why is logrotate deleting my logs?

This is my conf: /var/log/apache2/*.log { weekly missingok rotate 52 compress delaycompress notifempty create 640 root adm ...