Questions tagged [log-files]
A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.
0
votes
0answers
14 views
Logwatch MySQL on Raspbian [closed]
I've installed logwatch 7.4.3 on my raspbian system. Now I wonder why it does not report about my installed mysql server. /usr/share/logwatch/default.conf has set Service = All and does not exclude ...
0
votes
0answers
13 views
how to parse the slowest requests from nginx log
I have the format in nginx access log defined like
log_format combined_ssl_host '$remote_addr - $remote_user [$time_local] '
'$host $ssl_protocol '
...
-3
votes
1answer
38 views
All log files seemingly deleted [on hold]
I wanted to change to the log directory on ubuntu server, and check duplicity log, but I don't know what happened, it seems that all log files and sub-directories have gone missing! This is the ...
-1
votes
0answers
9 views
How to generate AWStats report directly from log file?
I have been using goaccess to analyze my web server access log files, and with goaccess, generating a HTML report is as simple as goaccess access.log -o report.html.
Today I installed AWStats (from ...
-1
votes
0answers
10 views
Nginx doesn't update access.log after second visit
I want to get record to access.log every time the page requested by visitor.
Now when someone come to the site first time nginx writes record about it and same if somebody pres F5 key. But there are ...
2
votes
1answer
22 views
How to read boot log in rescue mode?
I have a remote server running Ubuntu 16.04 server that hangs on boot. In order to find the error I booted it in rescue mode, mounted devices to /mnt and chrooted to /mnt.
Here's what I did so far:
...
0
votes
0answers
5 views
Logrotate truncates log lines on rotation
using apache DC/OS / Apache Mesos, the logs are written to stdout on the console and DC/OS / Apache Mesos streams to a file and configures Logrotate using the below basic config.
"/.../.../stdout" {
...
0
votes
1answer
30 views
where is rotation policy of logs under /var/log/messages-*
I would like to know how messages log file /var/log/messages are rotated.
I checked in /etc/logrotate.conf file and inside /etc/logrotate.d/ directory but nothing that could explain the rotation.
...
0
votes
0answers
12 views
FreeBSD printing logmsg in cycle
my mistake probably overload system. I configured syslog client (maybe server too). After boot on console in cycle printing "logmsg: pri 2, flags 17, from Device". How I must solve this problem?
...
0
votes
1answer
38 views
directive 'catch_workers_output = yes' don't work as I want
I have CentOS 7 with apache 2.4.35 with pmp event and php-fpm
all works fine but all php errors are go to one big file for all my virtual hosts.
I read all docs about it and find that
...
0
votes
2answers
34 views
Clearing “/var/log/journal”
I want to clear my "/var/log/journal" directory.
I'm using debian 8
root@nyc3-x8:/var/log# uname -a
Linux nyc3-x8 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux
And my ...
0
votes
1answer
19 views
Using auditd and retaining log files for 6 months.
Disclaimer: I'm not an accredited nor very experienced sysadmin but have been tasked with some sysadmin responsibilities
Task: Find a way to log all account management activities (e.g., account ...
-1
votes
1answer
18 views
Only 2 client IP addresses in IIS log file
I am a programmer asked to analyze IIS log files from a Windows 2008 web server. The domain is a state agency and users are from the agency's intranet, plus redirections from the web. Each log file ...
0
votes
0answers
35 views
Deploy to AWS EB and immediately get probed by Chinese-sounding hack
That's twice now I've deployed separate apps to AWS via Elastic Beanstalk and within 12 hours of instantiation, while I'm looking through the log files I see this:
------------------------------------...
2
votes
1answer
71 views
What is the best practice for logs integrity and authenticity?
We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
0
votes
1answer
33 views
Can't empty log files
The servers at my work have a script made by me that every midnight copies log files to a folder, copies this folder to Amazon S3 and zeroes the original files.
However, I saw that the original files ...
0
votes
2answers
28 views
Can Perfmon be configured to survive a hard-reset or flush reports on the go?
I am having trouble configuring perfmon here (Windows Server 2016 if it's relevant). My situation: our server recently get random hit and we are diagnosing the problem, so I put a Data Collector Set. ...
0
votes
0answers
39 views
rsyslog - queues with expiration time
I've configured rsyslog with Disk Assisted options to forward logs to Logstash server. Last night, the status of network of Logstash became unstable. Consequently, bunch of backlog files that contain ...
1
vote
1answer
296 views
System logs are empty (/var/log/messages; /var/log/secure; etc)
I found that rsyslog stopped writing on logs (messages; secure; cron;etc)
System information:
NAME="Red Hat Enterprise Linux Server"
VERSION="7.4 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VARIANT="Server"
...
0
votes
0answers
20 views
Ubuntu 14.04 Server - /dev/vda1 fully used up [duplicate]
I have an Ubuntu 14.04 Server that's had its memory recently full. I haven't logged on to the server for about 3-4 months. However, recently, I had to check something and I found out that the tab ...
0
votes
2answers
61 views
Is it possible to truncate $remote_user in an nginx access log?
We have an nginx server that, in some contexts, receives sensitive data in the HTTP username field. More specifically, it's an API key that clients are sending like curl -u "$API_KEY:" ....
The ...
0
votes
0answers
17 views
print specific ip traffic from log
I'm trying to print out a specific IP address and its request line but have had no luck.
I thought the line would be something like this:awk $6 IP .log | awk -F : '{print $1,$2,$4,$6;}' | sort | ...
0
votes
1answer
53 views
Unable to find my mail log file (looked for the path in 50-default.conf and rsyslog)
I am trying to send emails from my linode ubuntu server but I am unable to. So I had this test script set to log the errors by adding this right before mail()
ini_set('display_errors', 1);
...
0
votes
2answers
574 views
MariaDB won't start after server crash. No error logs
My CentOS 7 server recently crashed by having a hard drive unplugged while it was running and now MariaDB won't start and I'm not getting any error logs.
Everything else on the server seems to be ...
1
vote
2answers
123 views
What is ideal directory for kafka messages
The default value of logs.dir=/tmp/kafka-logsin server.properties. Usually /tmp is avoided from keeping any important files and we are storing messages and offsets!
Any particular reason why one may ...
2
votes
0answers
29 views
SCCM 2012 Task Sequence unexpectedly re-imaged a machine
wondering if anyone has got any ideas here. I have a task sequence that was deployed last week. The deployment settings are;
Action:Install
Purpose: Available
Available to the following: ConfigMgr ...
2
votes
1answer
352 views
How to create a GDPR compliant HTTP server access log with focus on remote IP anonymization and nginx?
EU's General Data Protection Regulation (GDPR), and the German DSGVO implementation, are very strict when it comes to individual-related data (such as IP addresses). However this question is not about ...
0
votes
3answers
634 views
rotate logs with logrotate and move old files
Logrotate don't move file to oldlogs folder and exit abnormally with code 1.
I tried to launch manually it with -d option but no errors are showed.
This is my configuration:
/var/log/myfolder/*.log
{
...
1
vote
1answer
218 views
Why does Samba PAM login session log data always say “closed”?
I keep getting these logs in my /var/log/auth.log every 10-20 seconds:
Jun 22 11:31:12 debian smbd[1795]: pam_unix(samba:session): session closed for user nobody
Jun 22 11:31:08 debian smbd[1794]: ...
0
votes
1answer
69 views
Can I safely trim /var/tmp/phd/log/daemons.log?
I have a server running Phabricator and this log file has no logrotate.
It is getting too big and now I need to trim it. Can I safely remove some of its content?
0
votes
0answers
43 views
Where do I look for error logs (about locales not generated) in a docker container
I have a docker instance, where I installed on debian stretch php7 and apache2. Php sends these error messages : Cannot set locale to en_US.UTF-8.
Inside the docker instance, as root, I cannot ...
0
votes
0answers
21 views
How do I check if a 2012R2 server core is a downgraded full server? (removed gui)
Is there a log file entry or directory that shows that the installation is not originally a server core installation but a full server with the gui removed?
I'm either searching for the wrong thing ...
0
votes
0answers
59 views
Managing log file size via cron
I have a tomcat server running on my ec2 instance. Recently, my catalina.out log file got pretty huge to the point it was quickly filling up and causing memory overflow on the server. I have it more ...
5
votes
4answers
2k views
NGINX Access Log by Location
Hello so I have two platforms where one operates as a subdirectory. I would like to be able to have an access and error log for each application; however it is not working as I intended :(
Here is ...
-1
votes
1answer
29 views
Apache Logs - identify IP that made series of specific requests
Given the following apache access log:
127.0.0.1 - - [04/May/2018:11:19:03 +0300] "GET /file1 HTTP/1.1" 200 ...
127.0.0.1 - - [04/May/2018:11:19:03 +0300] "GET /file1 HTTP/1.1" 200 ...
127.1.1.1 - - ...
0
votes
1answer
76 views
Blocking postfix requests and access
I have noticed that I keep getting trash access to my postfix/smtpd in the /var/log/mail.log I see many repeats of
May 2 11:09:04 mercury postfix/smtpd[25364]: warning: unknown[164.39.218.210]: SASL ...
2
votes
1answer
275 views
Missing Apache 2.4 error.log
Ubuntu 16.04
Apache 2.4
I have several virtual hosts defined. Every one defines an own error.log:
ErrorLog ${APACHE_LOG_DIR}/www.xyz.de.80.error.log
CustomLog ${APACHE_LOG_DIR}/www.xyz.de.80.access....
0
votes
1answer
24 views
How to associate .log files with LTFViewer on Windows 2008?
Large Text File Viewer is fast for opening megabyte and gigabyte large log files.
However on Windows Server 2008 (SBS) the File Explorer fails to open .log files with this application. LTF viewer ...
0
votes
0answers
30 views
Can two computers simultaneously read/write to a file on a windows file share? One reads one writes.s
I am trying to log certain information from my Azure VMs. I am using a Azure File Share to share/store logs, each machine writes to a unique file several times in a minute. I have one VM (call it ...
0
votes
0answers
21 views
What does a series @^ in the kernel.log mean [duplicate]
My server crashed today. After a cold reset I looked at the kernel.log and found the following:
Mar 14 14:45:07 romulus kernel: [1663261.548575] docker0: port
2(vethfbcd09f) entered forwarding state
...
2
votes
1answer
310 views
Interpreting DHCP related message from rsyslog
In /var/log/messages from an EC2 instance there are a lot of lines such as:
<date/timestamp> ip-<IP_HERE> ec2net: [get_meta] Trying to get http://169.254.169.254/latest/meta-data/network/...
0
votes
0answers
73 views
Trouble with separating apache log by year,month directory on AWS Linux AMI
I'm using AWS EC2 with Amazon Linux AMI, and need to separate apache logs by date.
When I used Ubuntu, I used cronolog like below.
CustomLog "|/usr/local/cronolog/sbin/cronolog /var/log/apache2/%Y/%m/...
3
votes
0answers
814 views
kubernetes kubelet logging to files and logrotate
kubelet has an option to store log files in a log-dir (https://github.com/kubernetes/kubernetes/issues/21248).
I start kubelet with the options --logtostderr=false --log-dir=/var/log/kubelet (I have ...
0
votes
0answers
177 views
PHP error logs and files being created with different umask
I have the umask set up on my Apache2 server using umask 002. This is added to the end of /etc/apache2/envvars during the docker container build.
I have the following script to test:
// Create file
...
0
votes
0answers
20 views
Can newsyslog rotate user logs with wildcard paths?
I can setup newsyslog to rotate files matching a glob pattern using the G flag, but I want to rotate the user logs files from their http logs, and I can't figure out how to set the permissions for the ...
0
votes
0answers
248 views
How can I know who created this VMware snapshot?
Someone made a snapshot of a production VM (vSphere 5.1) a month ago. The snapshot is still there. Apparently this person doesn't know that snapshots are not backup operation...
I would like to find ...
0
votes
0answers
104 views
Snort output auto generated names
I’m using snort’s configuration:
output alert_csv: alert.csv timestamp,sig_id,dst
But everytime that Snort finishes, I can see a file named alert.csv, instead of alert.csv.<timestamp> as other ...
1
vote
1answer
365 views
How to show timezone in apache error logs
How to show timezone in the apache 2.4.25 ErrorLog.
I have put the ErrorLogFormat in VirtualHost :
ErrorLogFormat "%{cu}t"
But than I only get 2018-02-08 10:02:59.246032.
Which is the time in the +...
0
votes
1answer
1k views
Possible to log X-FORWARDED-FOR to nginx error_log?
Nginx allows custom log formats for access logs -- right now I'm logging http_x_forwarded_for and it's working fine.
The problem is my error log only shows the LB IP. After Googling and reading ...
0
votes
0answers
56 views
Odd line in nginx access.log
I have an AWS Elastic Beanstalk server and looking though my /var/log/nginx/access.log, alongside the usual variations on GET /phpmyadmin/scripts/_setup.php, there is a very puzzling line:
$...
