Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

0
votes
0answers
10 views

Windows PrintService Operational Log. Which Tray?

I am a software developer but I have come here to ask an Admin type question. I have turned on the Windows PrintService Operation log to see what print jobs are being printed via Applications and ...
0
votes
1answer
1k views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
0
votes
1answer
18 views

Unable to log into a rsyslog filter using logger

Ubuntu 64 14.04 comes with rsyslog (7) built-in. I've added test.conf to /etc/rsyslog.d with the following line: :syslogtag,isequal,"test" /var/log/test.log I then restart rsyslog and log ...
5
votes
2answers
6k views

how to filter rsyslog messages by tags

I have several applications and scripts that I want to redirect the output to custom files. I launch those applications using command | logger -t TAG I would like to filter these messages based ...
0
votes
0answers
8 views

How do I capture unique id in haproxy logs?

I'm trying to capture the unique id for each request in my logs. I thought I could use capture request header X-Unique-ID len 16 on the header but its not working. Any suggestions? global log ...
0
votes
0answers
13 views

LOG server - attack on my site? [duplicate]

have a problem. 3 days ago somebody clean my server, but I do not know how. My server support sent me to mail with LOGS: Friday Aug 21 03:55:47 2015 0 78.47.143.141 388 /home/stopmy/ftp/mark/site.htm ...
1
vote
1answer
2k views

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not ...
0
votes
1answer
18 views

How to enable slow query log in MySQL Galera?

I want to enable slow query logging in MySQL Galera. In order to do so, I have enabled it through my.cnf: log_slow_queries = /var/log/mysql/mysql-slow.log long_query_time = 1 ...
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
8
votes
2answers
61 views

How to configure a log aggregator to authenticate data?

Background: Remote log aggregation is regarded as a way to improve security. Generally, this addresses the risk that an attacker who compromises a system can edit or delete logs to frustrate forensic ...
3
votes
2answers
41 views

Nginx, log referrers from certain domain to separate log file

I have my nginx setup to block certain referers like so: if ($http_referer ~* (site_name) ) { return 403; } This works fine, however I'd like to also log the blocked referrer to a separate file. ...
2
votes
3answers
4k views

Getting errors while making backup of whole centos with tar

I am trying this command tar cvpzf /TEMP_BACKUPS/backup.tgz --exclude=/proc --exclude=/lost+found --exclude=/tmp --exclude=/TEMP_BACKUPS --exclude=/mnt --exclude=/sys / > /TEMP_BACKUPS/mylog.txt ...
0
votes
0answers
16 views

Where does elasticsearch store graylog2 logs?

I've setup fluentd to stream docker container logs to a centralized graylog2 server. I'm hoping to setup log rotate for these logs. From what I understand, graylog stores these logs in ...
0
votes
1answer
16 views

AD log message showing E-mail of user object creation

I am referencing the active directory log message (4720) which shows 'User Principal Name' as an email address. However there is another email address found when viewing the actual User Object ...
8
votes
4answers
7k views

Clearing/Deleting Docker Logs

On our docker implementation on GCE, we are running out of space on the root file system. Since images themselves are stored on a separate 1TB volume, the images themselves shouldn't be the problem. ...
1
vote
1answer
379 views

Where to find the terminal logs in Mysql

I connect to mysql client using the command mysql -uroot -p And I execute queries there. If I press the up arrow, i could see the history of almost all the queries there. Where will this query log ...
4
votes
2answers
6k views

How can I get MySQL 5.5 to log warnings to one of the log files?

I have found various things that say that you can log warnings to the MySQL error log, but I have not been able to actually make it happen. I do have the error log working, and MySQL prints stuff to ...
1
vote
1answer
944 views

How do I suppress “Yellow Text” from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com ...
1
vote
2answers
3k views

IIS Advanced Logging Forward to Syslog

I am looking for a method that would allow us to forward the IIS Advanced Logging logs to a centralized log source via syslog or something similar. We are able to perform this currently for the ...
0
votes
1answer
1k views

Compress and remove logs from jboss on linux with cron

I need to compress and remove log files after some time from serwer. I have never write scripts before. So far i have script logs.sh: #!/bin/bash LOGS=/usr/local/jboss/server/default/log/ ...
0
votes
1answer
386 views

IIS 7.5 FTP Service crashes after installation of Advanced Logging 1.0 Module

I've recently been tasked with setting up two new productions servers for an ASP.Net application. The servers sit behind a F5 Load Balancer, which in turn forwards the end users IP address forward via ...
0
votes
0answers
25 views

Filter out PHP Notice from Apache2 logs while keeping verbose settings in php.ini [closed]

Is it possible to filter out PHP Notice entries from Apache2 logs before writing but without manipulating PHP logging levels? The rationale is: we need both reasonable Apache2 error logs and quite ...
11
votes
6answers
29k views

Delete all of /var/log?

Can I delete everything in /var/log? Or should I only delete files (recursively) in /var/log but leave folders? Does anyone have a good rm command line? (My admin skills leave me nervous.) Note: I ...
1
vote
2answers
1k views

nginx with real_ip — log both client remote_addr and proxies address

I have an nginx instance set up behind multiple load balancing proxies, and I am using real_ip to get the clients IP address in remote_addr for processing by my Python application. However in my logs ...
3
votes
2answers
3k views

Increased number of 408 Request Timeouts for null on a webserver

In my log watch records there has been a steadily growing progression of these:   408 Request Timeout       null: 694 Time(s) On my webserver. Here are some of what look like the contributing ...
2
votes
2answers
573 views

Adding “URL” accessed to Apache Error log

We are getting "Allowed memory exhausted with PHP" where PHP is asking for Gigabytes of memory. How can I format the Apache error log to see which URL it was accessing ?
0
votes
2answers
36 views

Is this a user/pass connection or an email communication connection?

I have lines like these in /var/log/messages: Jul 12 01:26:00 h2 xinetd[1596]: START: smtp pid=11253 from=::ffff:221.219.213.54 I need to know if that is an email connection like the ones being made ...
8
votes
2answers
16k views

nginx / php-fpm error logging

I'm trying to figure out where the PHP errors are going in my setup. I'm running nginx as the reverse proxy to PHP-FPM, but I'm not seeing the various E_NOTICE or E_WARNING messages my app is ...
0
votes
1answer
3k views

SFTP logging in Solaris Server using 'internal-sftp'

I'm trying to enable logging for SFTP file transfer (without help of any opentools) on solaris 10 using "internal-sftp" but couldn't see any info about file transfers. Please help. **#Argument in ...
3
votes
0answers
25 views

Office 365 Exchange client connection logs

We use Office 365 at our company and I was wondering if it is possible to see Exchange client connection logs in the admin panel anywhere? I want to identify what IP addresses outlook clients have ...
0
votes
1answer
1k views

CSF Log Watching

I run suphp so the uid of scripts is for the user not the webserver. My log files are also in /home/$user/logs/error.log CSF only monitors /var/log/apache2/error.log However because of my setup i ...
1
vote
2answers
863 views

tail -f not following log file in Docker container

I am seeing some strange behavior running the tail -f command inside a Docker container in CoreOS. There are a number of variables I can think of that may be contributing to the problem but I am not ...
-1
votes
1answer
47 views

Lots of mysql processes log error too many open files

I'm having problems with a CentOS server thats running slowly, htop shows about 40 lines of this which I think is causing the problem: 27218 mysql 20 0 17.7G 7449M 5088 S 0.0 46.8 0:00.24 ...
3
votes
5answers
5k views

Nginx not logging PHP errors

When accessing some PHP scripts on my website, I'm getting the dreaded 500 error message. I'd like to know what's wrong to fix it, but Nginx isn't logging any PHP errors in the log file I have ...
3
votes
1answer
950 views

Outbound Traffic Logging on ASA 5520 possible?

Taking a look at the ASDM (6.4) for my ASA 5520, I get a nice summary of the traffic status, with items like "interface traffic usage", and "connections per second". This works well, but only shows ...
1
vote
0answers
23 views

Rotation and continuous writing of large log files with rsyslogd

I have an extremely busy log file (let's call it /var/log/service.log) that is also frequently searched for troubleshooting reasons. Output to it is nearly continuous and 24/7. It probably puts out ...
1
vote
2answers
6k views

haproxy logging to syslog

I installed haproxy 1.5 via apt-get on ubuntu 14.04 via ppa:vbernat/haproxy-1.5 as per http://haproxy.debian.net/ The problem is it logging to /var/log/syslog instead of /var/log/haproxy.log The ...
2
votes
2answers
10k views

How to make Tomcat 7 log debugging info?

Tomcat 7 takes more than 21 minutes to start: ene 09, 2013 10:01:39 AM org.apache.catalina.startup.Catalina start INFO: Server startup in 1290787 ms When it finishes it says that it's scanning JARs ...
0
votes
1answer
51 views

Why does my server running nginx/php-fpm keep losing session capability without generating any errors?

I am managing a server that has a couple dozen websites on it and they have all been working fine until last week when it was noticed that one site had seemingly lost the ability to maintain session ...
0
votes
1answer
1k views

Log Rotation Causing nxlog Failure

I'm using nxlog to watch two vCenter log files on a Windows Server 2008 system and I have a very simple config to ship messages to Logstash. Nxlog began failing yesterday after a file was rotated. ...
1
vote
1answer
300 views

Neo4j Web Server Hangs: Logging Issue?

I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs. lsof -i | grep 7474 states ...
0
votes
1answer
242 views

View PHP error logs on VM - Vagrant CentOS via Puphpet

I have a Vagrant VM running CentOS, which was built from a puphpet file (config.yaml), and I'm trying to get the PHP error logs setup and accessible. config.yaml - PHP section: php: install: '1' ...
1
vote
1answer
1k views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
0
votes
1answer
16 views

logrotation process stdout and stderr windows

I have a service on windows that's running another process that prints many lines to its STDERR and STDOUT. I'm capturing those lines and redirect them to some log file. I would like to logrotate on ...
0
votes
3answers
25 views

Log pid than cpu higher than a value

I'm looking for a way to log the pid of process higher than a fixed value of cpu (ex 40%). I tried with command like this : ps -eo pcpu,pid,user,args | sort -k 1,2 -r | head -10 But, first, it sorts ...
2
votes
3answers
488 views

netconsole or serial logging in XenServer DomU

I have some problems with stability of Debian guests in my XenServer hosts. To debug this problem I wanted to use netconsole kernel module, unfortunately, because the Ethernet controller is emulated, ...
1
vote
0answers
52 views

What is wrong with my logstash configuration?

Background I have two types of log files: output from an ETL process, and then output from a downstream processor. We call these "ETL" and "Processor" logs. The ETL logs are in their own folder ...
3
votes
1answer
36 views

Windows Events for Remote Desktop logon failure

According to ref the logon types 10 and 3 in windows events are represnting Logon Type 10 = RemoteInteractive Logon & Logon Type 3 = Network Logon But when i tried to connect a Windows machine ...
1
vote
1answer
26 views

Logrotate script not uploading to s3

I am trying to use logrotate to upload log files from my rails and nginx commands once a day. When I run the logrotate command manually the files successfully upload, but it never does it on its own. ...
0
votes
2answers
34 views

SFTP logging doesn't work

I have some problemas trying to log sftp actions. I've configured some files but it doesn't write in the log file. I'm using Debian 7. User configuration: ...