Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

9
votes
0answers
428 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
4
votes
0answers
44 views

How to maximize utilization of fluentd server?

I have a fluentd server that is processing an average of 1000 req/s. This server is composed by 32 cpus. In this server are running 32 fluentd docker containers with the same configuration. The entry ...
3
votes
0answers
27 views

exclude IP from nginx access log

How to exclude some IP address from access log? This is my config: server { listen 443 ssl; [...] access_log /var/www/web/log/access.log; error_log /var/www/web/log/error.log; location / { ...
3
votes
0answers
351 views

IIS 8 logging stops at midnight UTC

I have one IIS 8 server where the w3logsvc dies at midnight UTC (we're Central Time, so we're UTC -6). I have to manually start the service to get it back running again. I have the logging set to use ...
2
votes
0answers
24 views

Node.js program failing to read .log text file with Buffer error

I am attempting to view a log with a program called 'logger'. When I run node logger I get the following error: <Buffer 66 72 75 69 74 69 73 68 79 0a> The 'logger' program file looks as ...
2
votes
0answers
166 views

Nginx log to syslog on TCP port

I need to redirect Nginx access and error logs to a remote syslog server. From http://nginx.org/en/docs/syslog.html I saw that I can do: error_log syslog:server=192.168.1.1; However I need to ...
2
votes
0answers
46 views

How to add a prefix / label for services to supervisor stdout output

I'm using supervisor in docker images when I have to run multiple services in one image e.g. postfix and other mail services. When I redirect the stdout/stderr from all services to supervisor and ...
2
votes
0answers
42 views

How to reliably capture Linux kernel log messages in case of a system debilitating crash (BUG, panic)?

I'd like to have access to the lines/tracebacks/whatever whispered by the kernel right before dying. This has proven problematic, because all interfaces I have access to become disabled. Post-reboot, ...
2
votes
0answers
64 views

Analyzing squid3 access.log log files with a all-in-one shell script

I'm just going to write a shell script that me the essential functions such as SARG offers. Sort by URLs with most hits (Top100 in 10min out of 10k) Sum of status / error codes As well as sorting by ...
2
votes
0answers
171 views

How does one separate log data sent to a remote rsyslog server?

I have messages from multiple apache2 web servers logging to a rsyslog server. I've used a template to separate each /var/log/syslog file into its own folder based off of the ip address of the server ...
2
votes
0answers
117 views

AWS Cloudwatch Agent not picking up changes

I'm stumped. I have two log files being watched by the AWS CloudWatch agent. The first one, /var/log/nginx/access.log, works perfectly fine. The second, /var/log/otherserver/access.log, is not having ...
2
votes
0answers
123 views

fluentd modular configuration

Is there any way to setup fluentd/td-agent in a way that it's configuration will be modular? I know there is @include directive but this works only if every time I add something new I modify main td-...
2
votes
0answers
225 views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
2
votes
0answers
102 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...
2
votes
0answers
104 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
2
votes
0answers
92 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 10.10.10....
2
votes
0answers
351 views

Ubuntu 12.04 crash analysis - strange binary data on all open files at the moment of crash

A couple of hours ago we got a system crash on Ubuntu 12.04. We checked all the log files and there is nothing suspicious to blame to. Last stuff that was logged was some dovecot activity. There are ...
2
votes
0answers
240 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
2
votes
0answers
141 views

On Apache2/mod_perl2, stderr output doesn't go to logfile nominated by ErrorLog

I like to maintain separate Apache2 logfiles for each of my named virtual hosts, like this: <VirtualHost *:80> ServerName myhost.example.com ErrorLog /var/log/apache2/myhost-error.log </...
2
votes
0answers
97 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
305 views

log/dump response body

Is there any way to log response body in Apache 2? I need the exact content that will be sent to user browser. I tried mod_security audit logging, but it won't log response body for all requests. (...
2
votes
0answers
614 views

Setting up bind9 9.7.3 logging: no size limitation, no file swapping

bind is configured to limit the log file size to 2m and to add up to 3 versions of the log files. During the testing of this bind server, is has occured that bind does not stop logging if the file ...
2
votes
0answers
250 views

How to log total connection time in Apache

I'm currently logging "The time taken to serve the request, in microseconds" using the %D directive (as specified on https://httpd.apache.org/docs/2.4/mod/mod_log_config.html). However, this seems to ...
2
votes
0answers
123 views

Logrotate directories (not files)

I have an application creating logfiles in a structure like this: maillog/ 2012-07-02/ production_environment-2012-07-02__23_51_50-1341265910-some name.log production_environment-2012-07-...
2
votes
0answers
285 views

Implications of unified2 logging with multiple instances of snort

I am beginning to migrate my snort logging from alert_syslog to unified2 using barnyard2 as the processor. In some cases I have multiple instances of snort running on the same system. Since I have ...
2
votes
0answers
224 views

Why would Exchange 2010 Delivery Reports show random results?

Looking for ideas on how to troubleshoot. MY Delivery Reports in ECP or Search-MessageTrackingReport in EMS will yeild what seems like random results for both internal an external email tracking. By ...
2
votes
0answers
474 views

Make Tomcat 7.0 flush logs to disk?

How do I get Apache Tomcat 7.0, running as a service on Windows Server 2008, to flush its logs to disk without restarting the service daemon? I did find delay on tomcat writing to logs in windows ...
2
votes
0answers
440 views

Logging mysql queries under MAMP Pro (MAC)

I am using MAMP Pro 2.0.5 (latest) and copied the my-medium.cnf file and placed it into /mamp/conf/ and renamed it to my.cnf under the [mysqld] i placed log = /Volumes/www/public/logs/mysql-queries....
2
votes
0answers
662 views

In tomcat, how to redirect console output of the web apps to logfile?

I am running Tomcat 7 inside Netbeans in windows. Is there any way of redirecting System.out.println to log file? Right now I'm getting it on my console. Is there any way I can change the logging ...
1
vote
0answers
11 views

NXlog cant writes/read to cache for “savePos”

I can't configure NXlog to send Windows Event Logon logs. the logs are created before NXlog starts, so NXlog needs to remember When was the last time that he grabbed the Event logs. The problem occurs ...
1
vote
0answers
27 views

Is /var/log/auth.log incomplete a symptom of unauthorized access?

Today I found that /var/log/auth.log file only has records from latest week, and I'm suspecting that I was hacked by using an insecure SSH password, and the attacker deleted access logs to avoid ...
1
vote
0answers
22 views

Awstats shows no operating system

I have AWStats running for two applications and for both no operating system is displayed. Instead only "unknown" is shown (100%). All the other stats are interpreted correctly, only the operating ...
1
vote
0answers
23 views

How to record audit logs for only one specified file in FreeBSD?

On Red Hat Linux I can specify the file I want to record audit logs for with this command: auditctl -a exit,always -F path=/tmp/foo.txt -F perm=war I cannot figure out how to do a similar thing on ...
1
vote
0answers
17 views

Mysql query log is empty after boot

I can't figure out why is general and slow query log empty after computer restart. After restarting the server with systemctl the logs get populated. After reboot the files are created just empty. $ ...
1
vote
0answers
10 views

Capping log file size: FIFO and maxsize

I am looking for a generic way to hard-cap erratically growing logfiles. The existing answers (linked below) suggest using a polling algo with logrotate, but that approach does not enforce a hard ...
1
vote
0answers
24 views

BIND9 logging only specified view

For diagnosing purposes I need to log BIND9 queries. BIND9 is configured with two zones/views (internal/external). I've configured logging but there is a lot of unnecessary queries being logged - ...
1
vote
0answers
56 views

iptables doesn't recognize --log-prefix

I'm having difficulty getting iptables to log. Here are the relevant commands: /usr/sbin/iptables -N LOG_DROP /usr/sbin/iptables -A LOG_DROP -m limit --limit 2/min -j LOG --log-prefix "iptables drop:...
1
vote
0answers
54 views

Puppet missing deprecation warnings

I'm running a Puppet 3.4.3 master which I use to provision VMs. I noticed that a lot of deprecation warnings I can see when provisioning locally are missing when using the server as master. (For ...
1
vote
0answers
33 views

Tomcat 7: how to log x509 cert dn with AccessLogValve

I have Tomcat7 running on RHEL6 with mutual authentication using x509 certificates for the entire container. From the user point of view in the browser, everything seems to work fine with a cert ...
1
vote
0answers
78 views

Filebeat and downstream availability

I read here and there that a broker (like Redis) might not be required in the log pipeline (typically ELK) when Filebeat is used. From Filebeat's official page: [Filebeat] is intelligent enough ...
1
vote
0answers
125 views

Excessive Windows Security Event Logs

I'm working on modifying our current Windows log setup and have ran across an issue I can't quite seem to find the answer to. We currently have nxlog configured on each DC to send windows event IDs ...
1
vote
0answers
61 views

php-fpm error log is trucated

I'm setting up test environment where I have nginx and php-fpm on centos 7. I have successfully setup everything and I can run php code. This is my configuration: nginx version: nginx/1.9.9 ...
1
vote
0answers
36 views

Simple progress for rsync when piping output to a log file

I ran rsync with nohup and --progress: nohup rsync --progress --[other-options] source destination & tail -f nohup.out When I'm tailing the file, I see the output with a changing last line (...
1
vote
0answers
432 views

Why does graylog2 delete old indicies?

According to http://docs.graylog.org/en/1.3/pages/index_model.html, graylog2 deletes old indicies based on the "elasticsearch_max_number_of_indices". Why can't graylog2 allow no. of indicies to grow? ...
1
vote
0answers
141 views

How can I output logs to a file from the content of a service with systemd

Well, I have a service configured with systemctl. This is the config file: [Unit] Description=The description of the service (: After=network.target [Service] ExecStartPre=/bin/echo 'Starting ...
1
vote
0answers
52 views

How to modify the message string being logged by syslog?

I have a few linux systems with the keyboard and console shared via a KVM switch. When I switch between them, I get a lot of unwanted syslog messages regarding the keyboard connecting and ...
1
vote
0answers
49 views

Can iptables log all type of tcp connection?

Can iptables log tcp Split-Handshake and Simultaneous-Open connections as well as tcp Three Way Handshake? Here is these two kind of tcp connection descriptions. Here I find how to log new tcp ...
1
vote
0answers
220 views

How can I separate logs with rsyslog from a remote location for devices using the same IP?

I have a number of Yealink SIP phones at different locations that I am trying to centralize log collection for. I have set up a CentOS server at my main location with rsyslog. I am forwarding all ...
1
vote
0answers
43 views

Easily create a logcheck rule from a log message?

I’d like to more easily create logcheck rules from log messages. Ideally I’d like to have something set up such that I just take a logcheck message I receive, and pipe it to some tool, and it spits ...
1
vote
0answers
321 views

Audit trail for all actions taken with admin privileges

PCI DSS 10.2 says, "Implement automated audit trails for all system components to reconstruct the following events:" and 10.2.2 continues, "All actions taken by any individual with root or ...