Hot answers tagged

4

You can try using cut to cut out the columns you are interested in. tail -f whatever | cut -d ' ' -f 3- [PROD] - INFO: GET 200 - 5ms [PROD] - INFO: POST 200 - 7ms This -d sets a space as the field delimiter, and -f specifies to display only the third and subsequent fields. Specifying fields can get more complex, too. Suppose you only really want to get ...


3

No... errors are simple that ... errors. There will also be a matching request (with a status code) in your access log. There may be one-or-more errors with any 4xx or 5xx status returns (which, again, should be reflected in your access log).


3

You encounter this issue because sending via tcp is not working with rsyslog due to Gelf's null-byte message delimiter spec. From the official rsyslog documentation: (http://www.rsyslog.com/doc/v8-stable/tutorials/gelf_forwarding.html) "Please note that the case above only works for UDP transport. When using TCP, Graylog expects a Nullbyte as message ...


2

After running sudo fixfiles restore and restarting the syslogd afterwards, this worked again for me. It's a known issue after upgrading CentOS 7 as described in CentOS 7.0 Release Notes - Known Issues - Security policycoreutils component, BZ#1082676 Due to a bug in the fixfiles scripts, if the exclude_dirs file is defined to exclude directories from ...


2

There are a number of tools available that are designed for scanning logs. fail2ban is one of the these. You would need to setup an expression to match and configure the appropriate action. This could include temporarily blacklisting the user on the firewall. You may catch poorly configured servers that have initial retry times configured in seconds ...


2

You should be able to find the source by checking the MAC addresses embeded in the data "44 a8 12 41 1d 2b 13 8b 9c ab 34 89 10 00". 44:a8:12:41:1d:2b should be your interface's MAC address. 13:8b:9c:ab:34:89 should be the remote device's MAC address. Try checking your cache to see if you have any other addresses for those MAC addresses. arp -a should be ...


2

Much of the problems experienced with martian source is caused by network topography considerations. The following may need to be addressed: Router: The router may be routing through illegal addresses; make sure that the router is configured correctly. Multiple NICS: If a computer has multiple NIC cards plugged in to the same switch, then ...


2

rotate 0 from the man page rotate count Log files are rotated count times before being removed or mailed to the address specified in a mail directive. If count is 0, old versions are removed rather than rotated. You probably want rotate 9 As to why you are seeing all the other files, my guess is that they are old (check the date/time) and ...


1

You will need to define a custom log pattern (http://httpd.apache.org/docs/current/mod/mod_log_config.html) which can include the value of an environment variable using the %{VARNAME}e notation. Using the variables that mod_ssl makes available (https://httpd.apache.org/docs/2.4/mod/mod_ssl.html) you could include at a minimum something like %{HTTPS}e which ...


1

There are multiple logs in /var/log/asterisk, check them all Debugging from the console You can also start asterisk from the console and enable debugging for iax2 # asterisk -r asterisk*CLI> iax2 set debug on asterisk*CLI> Then try connecting again from your client. You should see more info on the console. For more info in iax2 debugging ...


1

Give a try with below in your apache virtualhost config. php_value error_log /usr/local/zend/var/log/my_host_php_error.log and Just open /etc/apache2/mods-enabled/php5.load this file and check if below line is uncommented. LoadModule php5_module /usr/lib/apache2/modules/libphp5.so if yes, uncomment it and restart apache.


1

Not sure if linking is possible, but I'm using Elasticsearch (to store the data and make it searchable) and Graylog (to query and actual search for the data; it provides a Webinterface and an API) for similar tasks. I would recommend to have a look at booth tools at least; it's of great help to have all your logs in one place and be able to search through ...


1

You could try using awk. If the lines are all prepended by 4 fields then ...| awk '{$1=$2=$3=$4=""; print $0}' but you may need to explicitly flush the output ...| awk '{$1=$2=$3=$4=""; print $0; fflush() }' This basically nulls the first 4 fields. Note that if you then wanted to print just certain fields the first field is still $5, but then I ...


1

1> To configure mod_dumpio you need to enable dump_io. $ sudo a2enmod dump_io 2> in apache2.conf file write this line LogLevel dumpio:trace7 DumpIOInput On DumpIOOutput On 3) Then restart apache server


1

You can checkout dbitail. A Java tool I created, able to read local and distant log files using SSH. It is fairly simple to use. Some more explanations: https://github.com/pschweitz/DBITail/wiki Just download version corresponding to your operating system, of native jar release executable within your Java Runtime (requires java 8_40 or higher): https://...



Only top voted, non community-wiki answers of a minimum length are eligible