Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

7
votes
0answers
352 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
4
votes
0answers
78 views

IIS 7.5 not rolling over logs hourly

I have six IIS 7.5 web servers deployed using a Shared Configuration. The properties for the logging in the configuration are set to log Per Site, W3C, and on an hourly schedule: For five of the ...
3
votes
0answers
87 views

iptables is occasionally logging MAC addresses. Why?

I have logging enabled on specific iptables packet drops. The rules I'm using are IP/port related only and this is what I can easily see in the logs, however occasionally I do get MAC address ...
2
votes
0answers
15 views

How to add a prefix / label for services to supervisor stdout output

I'm using supervisor in docker images when I have to run multiple services in one image e.g. postfix and other mail services. When I redirect the stdout/stderr from all services to supervisor and ...
2
votes
0answers
24 views

How to reliably capture Linux kernel log messages in case of a system debilitating crash (BUG, panic)?

I'd like to have access to the lines/tracebacks/whatever whispered by the kernel right before dying. This has proven problematic, because all interfaces I have access to become disabled. Post-reboot, ...
2
votes
0answers
25 views

Analyzing squid3 access.log log files with a all-in-one shell script

I'm just going to write a shell script that me the essential functions such as SARG offers. Sort by URLs with most hits (Top100 in 10min out of 10k) Sum of status / error codes As well as sorting by ...
2
votes
0answers
43 views

How does one separate log data sent to a remote rsyslog server?

I have messages from multiple apache2 web servers logging to a rsyslog server. I've used a template to separate each /var/log/syslog file into its own folder based off of the ip address of the server ...
2
votes
0answers
57 views

AWS Cloudwatch Agent not picking up changes

I'm stumped. I have two log files being watched by the AWS CloudWatch agent. The first one, /var/log/nginx/access.log, works perfectly fine. The second, /var/log/otherserver/access.log, is not having ...
2
votes
0answers
151 views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
2
votes
0answers
73 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...
2
votes
0answers
86 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
2
votes
0answers
88 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
293 views

IIS 8 logging stops at midnight UTC

I have one IIS 8 server where the w3logsvc dies at midnight UTC (we're Central Time, so we're UTC -6). I have to manually start the service to get it back running again. I have the logging set to use ...
2
votes
0answers
223 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
2
votes
0answers
124 views

On Apache2/mod_perl2, stderr output doesn't go to logfile nominated by ErrorLog

I like to maintain separate Apache2 logfiles for each of my named virtual hosts, like this: <VirtualHost *:80> ServerName myhost.example.com ErrorLog /var/log/apache2/myhost-error.log ...
2
votes
0answers
93 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
585 views

Setting up bind9 9.7.3 logging: no size limitation, no file swapping

bind is configured to limit the log file size to 2m and to add up to 3 versions of the log files. During the testing of this bind server, is has occured that bind does not stop logging if the file ...
2
votes
0answers
240 views

How to log total connection time in Apache

I'm currently logging "The time taken to serve the request, in microseconds" using the %D directive (as specified on https://httpd.apache.org/docs/2.4/mod/mod_log_config.html). However, this seems to ...
2
votes
0answers
120 views

Logrotate directories (not files)

I have an application creating logfiles in a structure like this: maillog/ 2012-07-02/ production_environment-2012-07-02__23_51_50-1341265910-some name.log ...
2
votes
0answers
263 views

Implications of unified2 logging with multiple instances of snort

I am beginning to migrate my snort logging from alert_syslog to unified2 using barnyard2 as the processor. In some cases I have multiple instances of snort running on the same system. Since I have ...
2
votes
0answers
214 views

Why would Exchange 2010 Delivery Reports show random results?

Looking for ideas on how to troubleshoot. MY Delivery Reports in ECP or Search-MessageTrackingReport in EMS will yeild what seems like random results for both internal an external email tracking. By ...
2
votes
0answers
425 views

Make Tomcat 7.0 flush logs to disk?

How do I get Apache Tomcat 7.0, running as a service on Windows Server 2008, to flush its logs to disk without restarting the service daemon? I did find delay on tomcat writing to logs in windows ...
2
votes
0answers
392 views

Logging mysql queries under MAMP Pro (MAC)

I am using MAMP Pro 2.0.5 (latest) and copied the my-medium.cnf file and placed it into /mamp/conf/ and renamed it to my.cnf under the [mysqld] i placed log = ...
2
votes
0answers
595 views

In tomcat, how to redirect console output of the web apps to logfile?

I am running Tomcat 7 inside Netbeans in windows. Is there any way of redirecting System.out.println to log file? Right now I'm getting it on my console. Is there any way I can change the logging ...
1
vote
0answers
27 views

Puppet missing deprecation warnings

I'm running a Puppet 3.4.3 master which I use to provision VMs. I noticed that a lot of deprecation warnings I can see when provisioning locally are missing when using the server as master. (For ...
1
vote
0answers
11 views

Tomcat 7: how to log x509 cert dn with AccessLogValve

I have Tomcat7 running on RHEL6 with mutual authentication using x509 certificates for the entire container. From the user point of view in the browser, everything seems to work fine with a cert ...
1
vote
0answers
47 views

Filebeat and downstream availability

I read here and there that a broker (like Redis) might not be required in the log pipeline (typically ELK) when Filebeat is used. From Filebeat's official page: [Filebeat] is intelligent enough ...
1
vote
0answers
79 views

Excessive Windows Security Event Logs

I'm working on modifying our current Windows log setup and have ran across an issue I can't quite seem to find the answer to. We currently have nxlog configured on each DC to send windows event IDs ...
1
vote
0answers
34 views

php-fpm error log is trucated

I'm setting up test environment where I have nginx and php-fpm on centos 7. I have successfully setup everything and I can run php code. This is my configuration: nginx version: nginx/1.9.9 ...
1
vote
0answers
22 views

Simple progress for rsync when piping output to a log file

I ran rsync with nohup and --progress: nohup rsync --progress --[other-options] source destination & tail -f nohup.out When I'm tailing the file, I see the output with a changing last line ...
1
vote
0answers
75 views

Why does graylog2 delete old indicies?

According to http://docs.graylog.org/en/1.3/pages/index_model.html, graylog2 deletes old indicies based on the "elasticsearch_max_number_of_indices". Why can't graylog2 allow no. of indicies to grow? ...
1
vote
0answers
32 views

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting ...
1
vote
0answers
45 views

How to modify the message string being logged by syslog?

I have a few linux systems with the keyboard and console shared via a KVM switch. When I switch between them, I get a lot of unwanted syslog messages regarding the keyboard connecting and ...
1
vote
0answers
39 views

Can iptables log all type of tcp connection?

Can iptables log tcp Split-Handshake and Simultaneous-Open connections as well as tcp Three Way Handshake? Here is these two kind of tcp connection descriptions. Here I find how to log new tcp ...
1
vote
0answers
110 views

How can I separate logs with rsyslog from a remote location for devices using the same IP?

I have a number of Yealink SIP phones at different locations that I am trying to centralize log collection for. I have set up a CentOS server at my main location with rsyslog. I am forwarding all ...
1
vote
0answers
30 views

Easily create a logcheck rule from a log message?

I’d like to more easily create logcheck rules from log messages. Ideally I’d like to have something set up such that I just take a logcheck message I receive, and pipe it to some tool, and it spits ...
1
vote
0answers
153 views

Audit trail for all actions taken with admin privileges

PCI DSS 10.2 says, "Implement automated audit trails for all system components to reconstruct the following events:" and 10.2.2 continues, "All actions taken by any individual with root or ...
1
vote
0answers
91 views

Rotation and continuous writing of large log files with rsyslogd

I have an extremely busy log file (let's call it /var/log/service.log) that is also frequently searched for troubleshooting reasons. Output to it is nearly continuous and 24/7. It probably puts out ...
1
vote
0answers
470 views

What is wrong with my logstash configuration?

Background I have two types of log files: output from an ETL process, and then output from a downstream processor. We call these "ETL" and "Processor" logs. The ETL logs are in their own folder ...
1
vote
0answers
76 views

fluentd modular configuration

Is there any way to setup fluentd/td-agent in a way that it's configuration will be modular? I know there is @include directive but this works only if every time I add something new I modify main ...
1
vote
0answers
77 views

Event Log trigger configuration for scheduled tasks not working despite working with the eventviewer

I'm trying to start a task that gets triggered by specific events. The XML configuration for the filter I'm using is the following: <QueryList> <Query Id="0" Path="Security"> ...
1
vote
0answers
2k views

PostgreSQL - Invalid byte sequence for encoding “UTF8”: 0xe7 0x75 0x20

Here is the problem : Everything worked fine with my postgresql system until I decided to click on the "rotate logs" button in the server status tab (from pgAdmin). After that, I faced this issue, ...
1
vote
0answers
14 views

Is it possible to limit what is logged in ODBC logging in IIS 6.0?

I am using ODBC logging in IIS 6.0. I cannot change that. Is there a way to limit it's logging to just the actual pages requested as opposed to every single tiny thing requested on a page? I don't ...
1
vote
0answers
484 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
40 views

Flush IIS7 logs manually on remote machine

I know how to flush IIS7 logs when I'm logged on some machine: netsh http flush logbuffer How can I do it on another machine?
1
vote
0answers
109 views

Rsyslog won't monitor mysql-slow.log when written to by mysql

I'm going mad. I'm trying to get rsyslog to send log files to logentries.com. This works perfectly until I try to log mysql-slow.log. The config is pretty simple module(load="imfile" ...
1
vote
0answers
182 views

curl error logs not seen before in the apache error logging

Typically my apache error logs get hit with a large volume of the typical 'phpmyadmin' (requests and a huge qty of spelling variations), wordpress admin, joomla and a whole load more. But last night ...
1
vote
0answers
323 views

Lighttpd to include IP address in error.log

I have lighttpd/1.4.31 (ssl) on Debian 7.6 and I would for the standard error.log to include the IP address of the host which caused the error. Is it possible? The accesslog.format directive allows ...
1
vote
0answers
395 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
1
vote
0answers
145 views

How to retrieve a list of disk devices from Windows Server 2012R2

In Windows Server 2012R2 Event Viewer shows error ID 15: Log Name: System Source: disk Date: 9/29/2014 3:16:49 PM Event ID: 15 Task Category: None Level: Error ...