Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

3
votes
0answers
80 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
2
votes
0answers
16 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
2
votes
0answers
14 views

IIS 6 immediate log flush

In troubleshooting an issue with a web service, I need to examine the HTTP log created by IIS 6 on a Win2003 box. As I'm sure you are aware there is a log buffer that prevents writing to file every ...
2
votes
0answers
42 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
38 views

How can I configure IIS to save log files in a given folder without creating a W3SVCXXX folder under it?

You can configure IIS to save its logs in any folder you want; however, even if you configure this setting at the site level, it will always create another folder under the one you choose, called ...
2
votes
0answers
190 views

Amazon EC2 Ubuntu and upstart logging permissions

I have set up this upstart script on a Amazon Ec2 Ubuntu 12.04 TLS instance for executing a node.js application. The script uses setuid and setgid. It works fine without using setuid and setgid but ...
2
votes
0answers
214 views

Apparmor denies ntpd access to its own logs

ntpd complains that it cannot access its own logs # ntpd -qgddd ... 11 Sep 16:23:00 ntpd[7262]: can't open /var/log/ntpstats/peerstats.20130911: Permission denied ... 11 Sep 16:23:01 ntpd[7262]: ...
2
votes
0answers
108 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
2
votes
0answers
52 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
140 views

qmail log ALL outgoing mails

I have Plesk 11 and it's working with qmail I think. One of my customers have extrem high outgoing mail traffic. I want to log all his outgoing mails. How can I configure qmail to log all mails in ...
2
votes
0answers
160 views

How to log total connection time in Apache

I'm currently logging "The time taken to serve the request, in microseconds" using the %D directive (as specified on https://httpd.apache.org/docs/2.4/mod/mod_log_config.html). However, this seems to ...
2
votes
0answers
94 views

Logrotate directories (not files)

I have an application creating logfiles in a structure like this: maillog/ 2012-07-02/ production_environment-2012-07-02__23_51_50-1341265910-some name.log ...
2
votes
0answers
165 views

Implications of unified2 logging with multiple instances of snort

I am beginning to migrate my snort logging from alert_syslog to unified2 using barnyard2 as the processor. In some cases I have multiple instances of snort running on the same system. Since I have ...
2
votes
0answers
88 views

Linux ftp server supporting millisecond timestamps in transferlog

I'm looking for an ftp server for linux that will satisfy the following constraints Should be able to log when a file transfer (STOR command) is initiated. Should be able to log the time taken for ...
2
votes
0answers
155 views

Why would Exchange 2010 Delivery Reports show random results?

Looking for ideas on how to troubleshoot. MY Delivery Reports in ECP or Search-MessageTrackingReport in EMS will yeild what seems like random results for both internal an external email tracking. By ...
2
votes
0answers
219 views

Make Tomcat 7.0 flush logs to disk?

How do I get Apache Tomcat 7.0, running as a service on Windows Server 2008, to flush its logs to disk without restarting the service daemon? I did find delay on tomcat writing to logs in windows ...
2
votes
0answers
232 views

Logging mysql queries under MAMP Pro (MAC)

I am using MAMP Pro 2.0.5 (latest) and copied the my-medium.cnf file and placed it into /mamp/conf/ and renamed it to my.cnf under the [mysqld] i placed log = ...
1
vote
0answers
43 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
0answers
12 views

Simple web tool for viewing log

I'm developing a server deployment script that installs a bunch of stuff and generates a log in the process. I'd like users of the script to be able to view what's happening, on a web page, in real ...
1
vote
0answers
76 views

Auditctl - filtering out cron messages

Im using auditctl and get a lot of logging events for crond. I do not wish to log any cron/crond events. node=127.0.0.1 type=CRED_DISP msg=audit(1405678801.149:5571): user pid=1757 uid=0 auid=0 ...
1
vote
0answers
47 views

Where does cPanel, Apache, or Nginx log php script access?

Synopsis Earlier today a website went down due to some database issues. After some investigation I found out that some tables were missing data. In order for me to rule out "accidental deletion" by ...
1
vote
0answers
155 views

How to configure nDPI for iptables

I am new to nDPI, I have installed nDPI but when I add rules like; iptables -I OUTPUT -m ndpi --http -j REJECT it shows error iptables v1.4.7: Couldn't load match ...
1
vote
0answers
33 views

“\xc2:\xc2” in HTTP proxy GET request

Recently I came across lines like these in an HTTP server's access_log (I've changed the real image to "someimage.jpg" - you can browse the images folder directly since directory listing is allowed, ...
1
vote
0answers
46 views

Using OSSEC HIPS alongside rsyslog, overkill?

I have been tasked to harden our company linux servers. One of the problems that was outlined was the fact that logs are stored on the server which poses two problems: Difficult to aggregate and ...
1
vote
0answers
101 views

View dropped/rejected SMTP sessions in Exchange 2010

I am troubleshooting a problem trying to SMTP into an Exchange 2010 machine. I would like to view SMTP logs to see dropped or rejected sessions in order to try to figure out exactly why the sessions ...
1
vote
0answers
125 views

How do I increase the logging level for Puma?

Currently I am only getting ActiveRecord and view-rendering output in my Rails application log file, since I switched to Puma from WEBrick. I haven't been able to find where I can modify the output ...
1
vote
0answers
18 views

Tomcat Logging Multiple Days Behind

I have been noticing on our largish production deployment of Tomcat that some logs display this issue of being "multiple days behind" in the logging output. We have a 3rd-party vendor application ...
1
vote
0answers
62 views

Graphing/Aggregating IIS Logs from Windows Azure

I've got IIS logging etc enabled in my Azure Web Roles - so they're there in case i want to reference them, but i'd like to pull them all in to somewhere central and run stats across them to get ...
1
vote
0answers
67 views

Rotate svnserve logs; HUP needed?

I have SVN running on CentOS Linux 6.4 with svnserve and pass --log-file=/var/log/svn.log in the config file. This log is very large now and I need to start rotating it. I figure to add it to ...
1
vote
0answers
45 views

Custom Log Paths in Apache Virtualhost Config

On my local Windows LAMP Dev server, I set up test sites with the domains like this... http://projectName.dev http://www.projectName.dev I then have a simple program that also adds the appropriate ...
1
vote
0answers
230 views

Most efficient way to pipe web beacon logs to Apache Flume?

The Setup I've setup a simple Nginx server that logs (in a JSON) format, which is then piped to an S3 bucket with Apache Flume. All the Nginx server does is respond with a web beacon tracking pixel ...
1
vote
0answers
26 views

Multiple IPsec tunnels implented with raccon - need tunnel specific debug output

I have a network appliance box serving as an end point for several site to site IPsec VPN tunnels. raccon's docs specify that a log file can be written to with the -l option. My clunky approach to ...
1
vote
0answers
190 views

TOMCAT Disable org.apache.http.wire logging

I need to shut up the org.apache.http.wire logging level because its logging every single HTTP request and it produces Gigabytes of logging, I'm using the default logging of tomcat6 which I think it ...
1
vote
0answers
28 views

Using Windows Multipoint Server 2011, Is there a log for number of times a program has been run?

Is there something built-in to Windows MultiPoint Server 2011 to log which users have logged in, how long they've been logged in and which programs they've run? I'd even settle for a simple run count ...
1
vote
0answers
480 views

Timzone incorrect for log files only?

I have a small server running centos 6.4 and it is working quite nicely for some time. One thing that still bugs me is that the time in my log files is different then the time the 'date' command ...
1
vote
0answers
127 views

Neo4j Web Server Hangs: Logging Issue?

I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs. lsof -i | grep 7474 states ...
1
vote
0answers
56 views

log/dump response body

Is there any way to log response body in Apache 2? I need the exact content that will be sent to user browser. I tried mod_security audit logging, but it won't log response body for all requests. ...
1
vote
0answers
131 views

iptables log nowhere to be found

I'm trying to log when IPTables drops connections mostly for analysis. Problem is, my log seems to be written to... nowhere. By this time I know that iptables logs through kern facility and for this, ...
1
vote
0answers
458 views

X-Forwarded-For not showing up in tomcat7 access log

I'm trying to print out the remote client IP on a tomcat running behind an ELB and for some reason it's not being printed out to the access log. my elb configuartion is : 80 -> 8080 443 -> 8080 ...
1
vote
0answers
64 views

Cause for large number of duplicate web requests

I am seeing odd traffic to my web site. On occasion, probably a few times a day, I will get a flurry of requests for the same URI from the same IP address for several minutes, at rates from maybe one ...
1
vote
0answers
42 views

Why empty fields in Rsyslog?

In our Rsyslog database, we are using rsyslog version 5.8.6, we have so many empty fields for some columns, for example, EventBinaryData, EventSource, EventUser, EventCategory, all these fields are ...
1
vote
0answers
104 views

Writing templates for rsyslog

When I'm trying to send log from rsyslog to syslog-ng, the hostnames are getting shortened. Instead of inbound.server.com, I only recieve inbound at the syslog-ng side even though I have FQDN option ...
1
vote
0answers
282 views

iptables: how to decide what to log for a web server?

There are many ways to log traffic for a web server. For example, if I want to log all incoming traffic, I can place the following line as the first rule appended to the INPUT chain: -A INPUT -j LOG ...
1
vote
0answers
57 views

Process Accounting: Enabling Specific File Logging

I would like to thank everyone who reads this in advance for donating their time to hear my plea. I will try to be as clear as possible. What I am trying to do is figure out a way to enable Process ...
1
vote
0answers
65 views

Cross-referencing charts (e.g. munin) with log files

Is there a charting package like Munin (or an addon for it) that will let me click on a graph period and then see all the logs on that box for that period? e.g. if I see a huge spike in disk I/O 12 ...
1
vote
0answers
292 views

I can't get the dump_io module working

To debug my webapp behaviour behind some weird network, I need to dump all HTTP request coming to the Apache2 server (on a standard Ubuntu). So I tryed to activate the dump_io module : a2enmod ...
1
vote
0answers
103 views

No external src ip in log files (my router ip appears instead)

I recently retired my workhorse WRT54G router/AP in favor of a Linksys EA2700. Since then, all inbound traffic (bound to an Ubuntu 10.02 box running LAMP)logged to Syslog, Apache's error and access ...
1
vote
0answers
297 views

Setting up bind9 9.7.3 logging: no size limitation, no file swapping

bind is configured to limit the log file size to 2m and to add up to 3 versions of the log files. During the testing of this bind server, is has occured that bind does not stop logging if the file ...
1
vote
0answers
100 views

Exchange Admin Audit log

i was looking at the admin audit logs today and found it very usefull. But it doesn't include the source computer launching the commands. An example, i have the EMC on my computer modifying some ...
1
vote
0answers
85 views

Extract Distinct restful MVC routes from IIS logs

This is a cross post from StackOverflow that after some consideration I believe can be asked here (not getting anything on SO). My shop is using MVC3/FUBU on IIS 7. I recently put something into ...