Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

learn more… | top users | synonyms (2)

3
votes
0answers
17 views

IIS 7.5 not rolling over logs hourly

I have six IIS 7.5 web servers deployed using a Shared Configuration. The properties for the logging in the configuration are set to log Per Site, W3C, and on an hourly schedule: For five of the ...
3
votes
0answers
412 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
3
votes
0answers
168 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
3
votes
0answers
637 views

Apparmor denies ntpd access to its own logs

ntpd complains that it cannot access its own logs # ntpd -qgddd ... 11 Sep 16:23:00 ntpd[7262]: can't open /var/log/ntpstats/peerstats.20130911: Permission denied ... 11 Sep 16:23:01 ntpd[7262]: ...
2
votes
0answers
42 views

gzip_ratio not printing in nginx logs

I'm configuring the nginx access_log to output in JSON format to use with other tools. The data I want includes info about the compression. I have gzip on, but the only thing I'm getting for the ...
2
votes
0answers
57 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
2
votes
0answers
68 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 ...
2
votes
0answers
273 views

Amazon EC2 Ubuntu and upstart logging permissions

I have set up this upstart script on a Amazon Ec2 Ubuntu 12.04 TLS instance for executing a node.js application. The script uses setuid and setgid. It works fine without using setuid and setgid but ...
2
votes
0answers
162 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
2
votes
0answers
81 views

On Apache2/mod_perl2, stderr output doesn't go to logfile nominated by ErrorLog

I like to maintain separate Apache2 logfiles for each of my named virtual hosts, like this: <VirtualHost *:80> ServerName myhost.example.com ErrorLog /var/log/apache2/myhost-error.log ...
2
votes
0answers
88 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
455 views

Setting up bind9 9.7.3 logging: no size limitation, no file swapping

bind is configured to limit the log file size to 2m and to add up to 3 versions of the log files. During the testing of this bind server, is has occured that bind does not stop logging if the file ...
2
votes
0answers
190 views

How to log total connection time in Apache

I'm currently logging "The time taken to serve the request, in microseconds" using the %D directive (as specified on https://httpd.apache.org/docs/2.4/mod/mod_log_config.html). However, this seems to ...
2
votes
0answers
110 views

Logrotate directories (not files)

I have an application creating logfiles in a structure like this: maillog/ 2012-07-02/ production_environment-2012-07-02__23_51_50-1341265910-some name.log ...
2
votes
0answers
189 views

Implications of unified2 logging with multiple instances of snort

I am beginning to migrate my snort logging from alert_syslog to unified2 using barnyard2 as the processor. In some cases I have multiple instances of snort running on the same system. Since I have ...
2
votes
0answers
98 views

Linux ftp server supporting millisecond timestamps in transferlog

I'm looking for an ftp server for linux that will satisfy the following constraints Should be able to log when a file transfer (STOR command) is initiated. Should be able to log the time taken for ...
2
votes
0answers
180 views

Why would Exchange 2010 Delivery Reports show random results?

Looking for ideas on how to troubleshoot. MY Delivery Reports in ECP or Search-MessageTrackingReport in EMS will yeild what seems like random results for both internal an external email tracking. By ...
2
votes
0answers
319 views

Make Tomcat 7.0 flush logs to disk?

How do I get Apache Tomcat 7.0, running as a service on Windows Server 2008, to flush its logs to disk without restarting the service daemon? I did find delay on tomcat writing to logs in windows ...
2
votes
0answers
292 views

Logging mysql queries under MAMP Pro (MAC)

I am using MAMP Pro 2.0.5 (latest) and copied the my-medium.cnf file and placed it into /mamp/conf/ and renamed it to my.cnf under the [mysqld] i placed log = ...
1
vote
0answers
59 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
15 views

Possible to have FQDN in Debian Logfiles?

Is it possible to have instead the hostname the fqdn inside debian log files? Example: Now its: Mar 2 18:00:12 www rsyslogd: [origin software="rsyslogd" swVersion="5.8.11" x-pid="2442" ...
1
vote
0answers
16 views

Flush IIS7 logs manually on remote machine

I know how to flush IIS7 logs when I'm logged on some machine: netsh http flush logbuffer How can I do it on another machine?
1
vote
0answers
27 views

Log to file in Asterisk: append with newline

(I am testing on Asterisk 11.7.0~dfsg-1ubuntu1) I am using the following format to append to a logfile, according to the documentation: same => n,Set(FILE(/tmp/mylog.txt,,,a)=my-log-message) ...
1
vote
0answers
59 views

Rsyslog won't monitor mysql-slow.log when written to by mysql

I'm going mad. I'm trying to get rsyslog to send log files to logentries.com. This works perfectly until I try to log mysql-slow.log. The config is pretty simple module(load="imfile" ...
1
vote
0answers
150 views

curl error logs not seen before in the apache error logging

Typically my apache error logs get hit with a large volume of the typical 'phpmyadmin' (requests and a huge qty of spelling variations), wordpress admin, joomla and a whole load more. But last night ...
1
vote
0answers
138 views

Lighttpd to include IP address in error.log

I have lighttpd/1.4.31 (ssl) on Debian 7.6 and I would for the standard error.log to include the IP address of the host which caused the error. Is it possible? The accesslog.format directive allows ...
1
vote
0answers
134 views

Apache access log format does not record SSL_PROTOCOL for all connections

We're trying to track the ssl protocol used by clients to our site/web services, the connections could be by browser, or, for the web services all sorts of soap libraries etc. I've created a custom ...
1
vote
0answers
77 views

How to retrieve a list of disk devices from Windows Server 2012R2

In Windows Server 2012R2 Event Viewer shows error ID 15: Log Name: System Source: disk Date: 9/29/2014 3:16:49 PM Event ID: 15 Task Category: None Level: Error ...
1
vote
0answers
140 views

Using OSSEC to monitor windows services

I'm using OSSEC to trying and monitor services on servers such as Windows Event Log. I would like to know if a service has stopped or started and get emailed accordingly. I have tried a rule that ...
1
vote
0answers
330 views

nginx logging: Is there a way to log request time in milliseconds since Unix epoch?

I'm aware of the $msec logging parameter which gives the request time as seconds since Unix epoch with millisecond granularity. However, the format of this includes a period '.' e.g. '1407233265.472' ...
1
vote
0answers
98 views

Python uWSGI logs have no read permissions

I am running a Python Flask server on uWSGI over an EC2 Ubuntu 14.04 LTS. The server is configured as follows: [uwsgi] http-socket = :9000 plugin = python wsgi-file = /path/to_wsgi.py ...
1
vote
0answers
292 views

How to configure nDPI for iptables

I am new to nDPI, I have installed nDPI but when I add rules like; iptables -I OUTPUT -m ndpi --http -j REJECT it shows error iptables v1.4.7: Couldn't load match ...
1
vote
0answers
191 views

IIS 8 logging stops at midnight UTC

I have one IIS 8 server where the w3logsvc dies at midnight UTC (we're Central Time, so we're UTC -6). I have to manually start the service to get it back running again. I have the logging set to use ...
1
vote
0answers
43 views

“\xc2:\xc2” in HTTP proxy GET request

Recently I came across lines like these in an HTTP server's access_log (I've changed the real image to "someimage.jpg" - you can browse the images folder directly since directory listing is allowed, ...
1
vote
0answers
163 views

Syslog-ng not logging on debian

I have syslog-ng running but it does not seem to be logging to /var/log anymore. Looking at the logs it apparently used to awhile back: -rw------- 1 root root 0 Sep 8 00:55 messages ...
1
vote
0answers
22 views

Tomcat Logging Multiple Days Behind

I have been noticing on our largish production deployment of Tomcat that some logs display this issue of being "multiple days behind" in the logging output. We have a 3rd-party vendor application ...
1
vote
0answers
106 views

Graphing/Aggregating IIS Logs from Windows Azure

I've got IIS logging etc enabled in my Azure Web Roles - so they're there in case i want to reference them, but i'd like to pull them all in to somewhere central and run stats across them to get ...
1
vote
0answers
55 views

Custom Log Paths in Apache Virtualhost Config

On my local Windows LAMP Dev server, I set up test sites with the domains like this... http://projectName.dev http://www.projectName.dev I then have a simple program that also adds the appropriate ...
1
vote
0answers
365 views

Most efficient way to pipe web beacon logs to Apache Flume?

The Setup I've setup a simple Nginx server that logs (in a JSON) format, which is then piped to an S3 bucket with Apache Flume. All the Nginx server does is respond with a web beacon tracking pixel ...
1
vote
0answers
31 views

Multiple IPsec tunnels implented with raccon - need tunnel specific debug output

I have a network appliance box serving as an end point for several site to site IPsec VPN tunnels. raccon's docs specify that a log file can be written to with the -l option. My clunky approach to ...
1
vote
0answers
339 views

TOMCAT Disable org.apache.http.wire logging

I need to shut up the org.apache.http.wire logging level because its logging every single HTTP request and it produces Gigabytes of logging, I'm using the default logging of tomcat6 which I think it ...
1
vote
0answers
31 views

Using Windows Multipoint Server 2011, Is there a log for number of times a program has been run?

Is there something built-in to Windows MultiPoint Server 2011 to log which users have logged in, how long they've been logged in and which programs they've run? I'd even settle for a simple run count ...
1
vote
0answers
229 views

Neo4j Web Server Hangs: Logging Issue?

I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs. lsof -i | grep 7474 states ...
1
vote
0answers
141 views

log/dump response body

Is there any way to log response body in Apache 2? I need the exact content that will be sent to user browser. I tried mod_security audit logging, but it won't log response body for all requests. ...
1
vote
0answers
139 views

iptables log nowhere to be found

I'm trying to log when IPTables drops connections mostly for analysis. Problem is, my log seems to be written to... nowhere. By this time I know that iptables logs through kern facility and for this, ...
1
vote
0answers
76 views

Cause for large number of duplicate web requests

I am seeing odd traffic to my web site. On occasion, probably a few times a day, I will get a flurry of requests for the same URI from the same IP address for several minutes, at rates from maybe one ...
1
vote
0answers
45 views

Why empty fields in Rsyslog?

In our Rsyslog database, we are using rsyslog version 5.8.6, we have so many empty fields for some columns, for example, EventBinaryData, EventSource, EventUser, EventCategory, all these fields are ...
1
vote
0answers
122 views

Writing templates for rsyslog

When I'm trying to send log from rsyslog to syslog-ng, the hostnames are getting shortened. Instead of inbound.server.com, I only recieve inbound at the syslog-ng side even though I have FQDN option ...
1
vote
0answers
287 views

iptables: how to decide what to log for a web server?

There are many ways to log traffic for a web server. For example, if I want to log all incoming traffic, I can place the following line as the first rule appended to the INPUT chain: -A INPUT -j LOG ...
1
vote
0answers
90 views

Cross-referencing charts (e.g. munin) with log files

Is there a charting package like Munin (or an addon for it) that will let me click on a graph period and then see all the logs on that box for that period? e.g. if I see a huge spike in disk I/O 12 ...