Tag Info

Hot answers tagged

3

Specifically answering the question regarding whether it's possible to reduce the overhead of spawning more SSH connections: Yes. You can use the ControlMaster feature present since OpenSSH 5.5. This blog post will have more details: http://puppetlabs.com/blog/speed-up-ssh-by-reusing-connections I'm not sure if that would affect how much logging happens. ...


1

Based on your responses to @user2629636 - ie traffic sniffing is not detected, the probable answer is "you can't". TCP has no knowledge of the domain name associated with an IP address. Depending on what you are trying to do you may be able to assign a unique IP address (possibly an RFC1918 address) to each domain name, and then use IPTables to trigger the ...


1

You must use version 0.90.10 of Elasticsearch with Graylog2 0.20. It is using the binary protocol and those are not generally compatible between versions, unfortunately. This line: org.elasticsearch.transport.RemoteTransportException: Failed to deserialize exception response from stream is what gives the problem away, the protocol is different, so the ...


1

Add $ssl_cipher to your log_format configuration. Refer to http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables for all SSL-related variables. Example Define a custom log_format in the http context (e.g. /etc/nginx/nginx.conf): log_format combined_ssl '$remote_addr - $remote_user [$time_local] ' ...


1

I believed the problem lied in that the new(er) Solr web-interface uses a ton of Javascript and other redirects, something maybe the basic monit http checker can’t handle. Turns out there is a special page for this at either http://localhost:8983/admin/ping or, in case of my multicore setup, http://localhost:8983/solr/<MY_COLLECTION_NAME>/admin/ping ...


1

Typically that is functionality found in all log analysis and log management tools, which are the terms I would expect to describe the process of converting of machine generated data into intelligence. If you want to reduce the amount of data that you store even before analysis reduces it manageable reports: most software comes with configuration switches ...


1

FTP logs are usually found in /var/log/messages and sftp logs in /var/log/secure. But if the ftp and sftp aren't configured, the info present in the logs wouldn't be useful enough to check what you need presently. If you have setup 3rd party ftp server like pure-ftpd then you can configure it to have detailed log. Also you can configure it to have a separate ...


1

retro-actively; no. By default the SFTP server does not log actions, only the login events for SSH/SFTP are logged in /var/log/secure. The default plain FTP server vsftpd does log some actions /var/log/xferlog; get and put actions are logged but when I tested the FTP dele commands were not :( Still that may be sufficient to determine if anyone was ...


1

I dont think you'd feel it in memory or CPU. You might feel it in Disk I/O, tough, as you will be writing perhaps 2-3% more to disk for every request. So if your Disk I/O is extremely limited, you may have a problem, otherwise you should be home free.


1

For the Debian installation, there are two directories: /etc/service and /service. For your service to be effectively controlled, they should be more-or-less mirror images of each other. In your example, for service pants, there should be a symlink /etc/service/pants and a symlink /service/pants, each should point to /etc/sv/pants. You can "cheat" and ...


1

Since you're using rsyslog you have the option to filter messages quite easily. A basic example to discard messages is this one: #/etc/rsyslog.cof # this is original log file including all authpriv messages regarding admin authpriv.* /var/log/secure.admin # These rules filter the remote key based logins for admin :msg, contains, "Accepted publickey for ...



Only top voted, non community-wiki answers of a minimum length are eligible