Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
4 views

Logstash matching ceph client and server separation

So I have a fresh logstash install and I am trying to deploy logstash to get a handle on the logs. I am going through and will eventually segment the logstash filters based on subsystem and ...
0
votes
0answers
12 views

Reconstructing a session (or user-flow) in splunk

I'm trying to recreate the process that a user goes through with regards to a specific set of endpoints and I want to see the order in which these call events occur. For the time being, I can use ...
0
votes
1answer
39 views

Boot time log: 'Failed to start Postfix Mail Transport Agent'

centos 7.1 postfix 2.10.1 After restarting server in /var/log/messages during boot time Postfix noted only in these 4 lines (all actions during 1 second): systemd: Starting Postfix Mail Transport ...
1
vote
1answer
887 views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
1
vote
1answer
50 views

Change systemd unit tag send to journalctl/syslog

Is it possible to change what tag systemd managed service uses for logging? For example, my custom service report-daemon.service defined as # ... [Service] ExecStart=/usr/bin/php # ... # ... shows ...
1
vote
2answers
938 views

nginx with real_ip — log both client remote_addr and proxies address

I have an nginx instance set up behind multiple load balancing proxies, and I am using real_ip to get the clients IP address in remote_addr for processing by my Python application. However in my logs ...
1
vote
3answers
299 views

Apache httpd server 'is it possible': Alert on specific condition in access/error log

I'm just wondering is it there some module which can detect certain event in access/error log and if it matches it, to send an email with information. example: I want to detect when someone makes ...
0
votes
1answer
1k views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
1
vote
0answers
10 views

Is it possible to limit what is logged in ODBC logging in IIS 6.0?

I am using ODBC logging in IIS 6.0. I cannot change that. Is there a way to limit it's logging to just the actual pages requested as opposed to every single tiny thing requested on a page? I don't ...
0
votes
2answers
28 views

Log rotation on NginX in Configuration file

I've tried this tutorial to rotate log file without external software, but it seems it doesn't work, my configuration on the server { block: if ($time_iso8601 ~ ...
25
votes
8answers
29k views

How to add a timestamp to bash script log?

I have a constantly running script that I output to a log file: script.sh >> /var/log/logfile I'd like to add a timestamp before each line that is appended to the log. Like: Sat Sep 10 ...
2
votes
1answer
3k views

Wrong timestamps in /var/log/messages

The /var/log/messages file on an openSUSE 11.2 server shows invalid timestamps. Specifically, the timezone seems to be off for whatever process manages this file. I am unsure whether the times are ...
0
votes
1answer
122 views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
0
votes
1answer
117 views

IIS 7, LogStash and flushing IIS logs

I'm using LogStash to import IIS logs into ElasticSearch. It's done by pointing the LogStash to the folder with IIS logs which contains several log files each per day. Currently I don't use the ...
0
votes
1answer
34 views

What should be the right logs permissions for NGINX on CentOS?

on /var/log/nginx/ I have access and error logs. Some are .log errors and others have .gz I think I messed up with the permissions. Some files are created by root/root, other files are created using ...
0
votes
1answer
205 views

Making logrotate remove old logs after reducing 'rotate' value

I'm trying to reduce the number of log files kept for Apache by reducing 'rotate 52' in /etc/logrotate.d/apache2 to 'rotate 8'. With weekly rotation this should keep 2 months of logs instead of a full ...
6
votes
7answers
7k views

Colour tail of Apache logs

Monitoring apache logs with tail –f tends gets very frustrating for the eyes after a while. Are there any tool/options to colorize the log outputs? Maybe signal FATAL with red, etc...
2
votes
0answers
49 views

How to find size of atomic write for nginx access log buffer?

This link says: The buffer size must not exceed the size of an atomic write to a disk file. For FreeBSD this size is unlimited. How can I find size of atomic write on my server? Is there any ...
8
votes
4answers
9k views

How to clear Windows event logs using command line?

Normally I can open the Computer Management console, go to the Event Viewer snap-in, open the Windows Logs folder, right-click on Application/Security/Setup/System subfolder, choose Clear Log and ...
0
votes
1answer
62 views

with windows remote desktop is it worth turning off TLS to block by IP address?

I have been assessing this software for securing our cloud server's RDP connection. The problem is, it requires you to use RDP encryption, without TLS. This is because with TLS the IP addresses are ...
0
votes
2answers
2k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
0
votes
1answer
299 views

Enabling command logging on a Cisco MDS Switch

We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx ...
1
vote
1answer
41 views

Some (but not all) stuff still logged to /var/log/nginx/error.log despite being configured to log elsewhere

here is scee.conf - pid ./pid; error_log ./error_log debug; events { worker_connections 1024; } http { access_log ./access_log; server { listen 31415; } } I run it using nginx -c ...
0
votes
0answers
39 views

How to log changes made in a particular file to syslog

How to log changes made in a particular file using syslog-ng. The log must contain the timestamp, hostname, user who modified the file and action performed. Is there any option other than audit in ...
0
votes
1answer
28 views

nginx log request before processing

I have nginx server serving a lot of big files. I can see plenty of connections on the server. As it iw know, file to the accesslog is written after the request is completed. Is there any way to log ...
1
vote
1answer
281 views

Apache log to one file for multiple domains with logrotate

I would like a solution to my problem where I have 100s of domains on an Apache server. I don't want a separate log file for each domain I want them to share a log file. This is easy enough if I don't ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
1
vote
2answers
1k views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...
3
votes
3answers
164 views

Over a million 404's?

Using Analog 6 for web stats, and I'm surprised to see over a million 404's over 54 days. Am I looking at this correctly? Is this an unusual ratio of 404's to "200 OK" page views? I don't see any ...
1
vote
2answers
2k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
1
vote
2answers
3k views

MySQL Error on Startup: ambiguous option '--log=/var/log/mysqld.log'

I would like to try MySQL 5.6 on my machine, but I cannot start it. I always get an error : [ERROR] /usr/local/mysql-5.6.5-m8-osx10.6-x86/bin/mysqld: ambiguous option '--log=/var/log/mysqld.log' ...
0
votes
1answer
2k views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
0
votes
2answers
1k views

fedora tomcat log file path

My log file is inside: kamil@localhost tomcat$ grep "logs/" ./* ./log4j.properties:log4j.appender.R.File=${catalina.home}/logs/tomcat.log my CATALINA_HOME is kamil@localhost tomcat$ sudo grep ...
0
votes
1answer
22 views

Maintaining rsync log file

I have a cron running rsync for backup purposes, and rsync logs the output to a file via --log-file. This script will keep on running for a quite long time and I am worried that the log file will keep ...
4
votes
2answers
12k views

nginx / php-fpm error logging

I'm trying to figure out where the PHP errors are going in my setup. I'm running nginx as the reverse proxy to PHP-FPM, but I'm not seeing the various E_NOTICE or E_WARNING messages my app is ...
27
votes
4answers
127k views

How to enable MySQL logging?

I am running MySQL 5.0.45 on OS X 10.6.1 and I cannot get MySQL to log anything. I am debugging an application and need to see all queries and errors. I added to the etc/my.cnf: [mysqld] ...
0
votes
1answer
23 views

Why does syslog-ng drop debug messages when logging remote?

In the local log output, I can see debug messages but these won't show up on the remote logging server. It seems to ignore these but it does print warning and error level messages just fine. These ...
0
votes
1answer
29 views

Logging into file doesn't write anything

I have got some script, which I want run after start computer. I set it in group policy and script is running after PC start (I checked it), but I have in script some logging to which doesn't work. I ...
2
votes
1answer
35 views

How to stop SQL Server from logging informational lines to SQLFT log files?

I checked on a SQL Server 2012 instance recently only to see that the HDD is full and after investigating what happened it was Full Text Search informational lines filling the log files and disk space ...
3
votes
0answers
26 views

MongoDB Oplog Security

We are using a MongoDB replica set for sharing sessions and other (potentially sensitive) data in a web farm. All the data we store uses TTL indexes to expire documents after a relatively short ...
0
votes
0answers
19 views

Logging ALL actions inside SSMS

Any time one of the following actions occur in SSMS, I would like it to be logged in a SQL table/file. I tried different stuff but nothing seems to be perfect. I might use some funny terminology, ...
0
votes
2answers
937 views

Analyse a set of User-Agent strings

I have a list of User-Agent strings and timestamp. I also have a unique identifier for the user. What is the best tool for analyzing this type of data?
2
votes
1answer
58 views

script not found or unable to stat: /var/www/html/r.php

I have just seen a new series of error in the /var/log/apache2/error.log [Thu May 07 17:12:35.433760 2015] [:error] [pid 3488] [client 190.79.132.215:51660] script '/var/www/html/r.php' not found or ...
1
vote
2answers
7k views

How to make Tomcat 7 log debugging info?

Tomcat 7 takes more than 21 minutes to start: ene 09, 2013 10:01:39 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 1290787 ms When it finishes it says that it's scanning JARs ...
-1
votes
1answer
25 views

Office365 User Activity Tracking

I have a situation where a user's mailbox on exchange online enterprise sign-in was disabled as employee was on a suspension, however the mailbox was re-enabled upon employee returning to the office. ...
1
vote
2answers
33 views

Apache Server Log File Issue

I'm a programmer for a company and their server specs are off limits to me due to IT restrictions. I know it's an Apache server running off a Linux environment. I have permissions to add/remove files ...
0
votes
1answer
22 views

HAProxy log outgoing requests

Currently, my HAProxy logs have information about the incoming requests: HTTP version, method, host, path, and headers. I am trying to debug my HAProxy config, and need to know what the resulting ...
0
votes
0answers
18 views

SFTP and rsyslog: log activities of specified users only?

After a lot of anguish, I finally managed to get chrooted SFTP logging working in Ubuntu 14.04. Relevant bits from /etc/ssh/sshd_config: Subsystem sftp internal-sftp Match Group sftp-only ...
0
votes
1answer
42 views

How to allow more than two simultanous sessions on Azure

One of our servers is on Azure and we are remotely connecting to it. Unfortunately Azure allows only two users to be logged in at the same time. When the third user tries to log in, he is given the ...
2
votes
0answers
39 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...