Questions tagged [log-files]
A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.
1,028
questions
1
vote
1answer
49 views
How to use sed text processing
please i need your help on this topic.
i have 3 temp files and nbf.txt.
i want to copy each hour lines from this 3 temp files to nbf.txt:
inside each temp file we have
temp file for each hour:
tmp1
...
0
votes
1answer
22 views
OpenVPN server log - what is the “us=” identifier following the timestamp?
I use OpenVPN 2.3.10 in server mode, with logging set to verb 4.
In the log, every line begins by a timestamp (Mon May 11 10:40:10 2020) and then us=, followed by a 5- or 6-digit number. What is this ...
0
votes
1answer
13 views
Awstats + Postfix logs - no senders/recipients?
I am trying to configure awstats (v7.6 from repo on Ubuntu 18.04) to process postfix log files. But I don't have much log data to work with.
Awstats is reporting that it has processed the data and the ...
0
votes
0answers
5 views
Haproxy log file with pfsense
I am trying to read the /var/log/haproxy.log file with the command: clog -f haproxy.log but nothing happens. No window opens. How do I see my error log? I’m on pfsense.
Thank you so much!
1
vote
1answer
93 views
Why would Apache log different response sizes for the same url?
I noticed a couple (ostensibly-)harmless log entries, and--I'm admittedly overthinking this by a mile--got curious about Apache2 response sizes.
This Ukranian crawler † hit my web daemon, two seconds ...
1
vote
1answer
82 views
200 status for requests from IP not allowed by htaccess?
I have a Debian 9 server which is continually beaten on by bots. I check the access logs for 200s every day just to be sure my countermeasures are working. The logs are full of 403 status requests ...
0
votes
2answers
116 views
Custom headers in nginx: log first, clean afterwards
I need to parse nginx access_log and associate records with user accounts. To do so, I decided to use a custom header:
App sends custom header (like x-userid)
Nginx stores that value in access_log ...
0
votes
0answers
15 views
UFW activated, but still failed connections in auth.log
I activated the ufw on my ubuntu 18 server. After resetting to defaults, deny all incomming, I opened port 22, 80 and 443 and enabled the logging.
In the ufw log, I can see a lot of blocked request.
...
0
votes
1answer
24 views
How to analyse vsftpd log files with goaccess
I'm trying to use goaccess log analysis tool, to analyse vsftpd FTP server's logs. I'm aware that being a web server log analyser, goaccess is not the best tool for this. That being said, it's ...
0
votes
1answer
21 views
Guaranteed rename logfile AFTER logfile is no longer being written to
I have the following set up.
In a remote machine I have a process continuously running which subscribes to some data and writes it to stdout (lets call the process the subscriber). I call the ...
1
vote
1answer
26 views
How to quickly check if specific keywords exist in a lot of log files in shell?
I have run a program that writes a lot of log files in a lot of directories.
For example, there are hundreds directories, and every one includes thousands of log files.
I need to find out the files ...
0
votes
1answer
24 views
can logstash package individual log types into packages an scp them over to a central node?
I am curious whether logstash only processes logs and streams them at the event/line level or can it package all apache access logs for example and send them over zipped up to a central node?
0
votes
2answers
1k views
What are missed lines in fail2ban?
I had millions of lines such as these in my log file yesterday:
Feb 25 18:00:00 mond2 sshd[29574]: Bad protocol version identification '\003' from 54.37.78.250 port 50306
Feb 25 18:00:00 mond2 sshd[...
0
votes
0answers
24 views
Why does the access.log nginx file contain two different agent users for a single request?
I try to debugg an Angular error with an online Webbrowser Simulator "Saucelabs.com" running Safari. When I watch my debugg file on the nginx in access.log I see the following line:
xxx.xxx.xxx.xxx - ...
0
votes
0answers
12 views
Rotated logs with newsyslog, but PostgreSQL doesn't write to new one until I restart it
I installed PostgreSQL on my mac using homebrew and it's been working great. I recently increased the amount of logging going on because I need to use pgbadger, so naturally I set up log rotation ...
0
votes
1answer
81 views
Apache Access Log
I use fail2ban to detect malcious requests to any of my hosted domains, which is working very well, with one exception.
If a requests is sent to the IP instead of a fqdn or a subdomain, it gets ...
0
votes
1answer
127 views
Find exim account sending lots of emails. (Spamming)
I have an Exim server with several domains configured. In each domain I have several email accounts. From time to time a computer configured with one of this emails gets infected and starts sending ...
0
votes
0answers
39 views
Is there any performance or deadlock impact in multiple instances writing to a single log file in NFS
I have to deploy Drupal-7 web app under AWS load balancer. For better log management, I want to keep single web app log file for all the VM instances under the load balancer. Log location in instances ...
0
votes
0answers
17 views
How do I reliably watch rotating log files
I am building a custom log analysis solution and all the logs that are fed into the database are streamed to a log file called lsb.events[*]. After some size or number of lines, the files are rotated ...
0
votes
0answers
45 views
Understanding iptables log, which process
last time i watched out my iptables-log and i dont know , how i get the reason or which process ordered the connection establishment.
Jan 8 23:02:17 ipo-dara kernel: [49323.868478] iptables-dropped:...
0
votes
1answer
58 views
openSUSE: “Permission denied” error on Cron log file
using: openSUSE Leap 42.2
/etc/cron.d/mysite file content:
* * * * * wwwrun /usr/bin/php /srv/www/mysite/cron.php >> /var/log/apache2/mysite.cron 2>&1
/etc/cron.d/ dir content:
/etc/...
0
votes
1answer
59 views
Cron Job for deleting daily apache Log
on my Ubuntu cloud server often happens when i visit apache log fiiles to be 5-10 GB in a day or two, i'm a user of vestaCP and destination of log files is: var/log/apache/domains/domain.error.log and ...
0
votes
1answer
40 views
iptables-dropped packet understanding
Today I read in my the below iptables-dropped packet logs and I don't really understand this log. I hope somebody can help me.
I only opened an inbound SSH port 2221 and for my outgoing traffic I ...
3
votes
1answer
120 views
Logcheck Ignore Logrotate
I inherited a system using both logcheck and logrotate. The issue I'm having is that logrotate is sending a nasty e-mail saying something along the lines of:
*** WARNING ***: Log file (X) is smaller ...
0
votes
1answer
45 views
Can I find username login log in Active directory server?
I join computer into active directory(AD) domian. User in AD can login to computer by using username, password in AD. Computer was install deep freeze so it can not keep anything after restart. I ...
3
votes
2answers
248 views
How do I separate Apache server log entries for a domain that is different than my server's?
I'm using the following version of Apache ...
httpd -v
Server version: Apache/2.4.6 (CentOS)
Server built: Apr 24 2019 13:45:48
I have a lot of entries in my /var/log/httpd/access_log file that ...
0
votes
0answers
42 views
Where can I find Artifactory logs relating to the LDAP authentication process?
One of my users is facing an issue logging into my JFrog Artifactory 6.0.3 which uses LDAP authentication on an ADLDS server : he is met with the message "Username or Password Are Incorrect" when ...
0
votes
0answers
107 views
How to troubleshoot a log flooding issue with a monitoring agent?
I have email flooding issue with OMS agent installation a monitoring agent in Azure Log Analytics. Once the agent is installed on servers, there's huge amount of emails being sent regarding agent ...
0
votes
0answers
35 views
Nginx is logging 301 entries in the wrong access file
I have a question about how 301 entries are logged. A bit of background:
I created a new Ubuntu/Nginx server and added a site. By default, NGINX logs to /var/log/nginx/access.log
I edited one site ...
0
votes
0answers
290 views
PHP error_log not working
I'm using slim framework and I've added error_reporting(E_ALL); to the first line of my public/index.php file.
I'm using apache2 and Ubuntu 18.
This is conf file
<VirtualHost *:80>
...
0
votes
0answers
37 views
View 503 errors in real time?
I know I can use tail -f /access.log to view my log file in real time.
Can I use tail or grep or some sort of combinations to only view 503 errors in real time within that log file?
0
votes
0answers
20 views
Migrate Azure Web App Custom Logs to Azure Storage Account
My team is currently creating an Azure Web App (.NET framework). The app creates custom .log files for the application and stores them on the D:\ drive. The log files can get pretty large. I believe ...
0
votes
0answers
43 views
doubts about options in a tcp connection
in a log i have the following legend:
IN=enp4s0 OUT=enp2s0 MAC=XX:XX:XX:XX:XX:XX:08:00:XX:XX:XX:XX:08:00 SRC=192.168.1.45 DST=13.226.38.81 LEN=240 TOS=00 PREC=0x00 TTL=127 ID=260 DF PROTO=TCP SPT=...
0
votes
1answer
36 views
How to locate log files?
I'm getting a 500 error on a PHP file. In another question on SE it says to look for log files in /var/log. However, I am on shared/paid hosting and that folder is empty. Should I be looking elsewhere ...
1
vote
1answer
1k views
Application logging broken under Tomcat 9: permission denied to /var/log/myapp
I have a Java webapp that runs under Apache Tomcat on Ubuntu Linux. When I upgraded from Tomcat 9 from Tomcat 8, the application was no longer able to write log files to /var/log/myapp. I can't ...
1
vote
2answers
376 views
Where are “Debug Dump Files” located in windows?
Windows has a tool called "Disk Cleanup" (German: Datenträgerbereinigung).
There it lists "Debug Dump Files" which can be deleted.
Unfortunately it doesn't tell me which files are meant. It can't be ...
0
votes
1answer
204 views
Constant SSL handshake errors from random IP's on fresh server
I just set up a new server from, I've got as far as the following:
Secured it (no root or password logins, UFW etc)
Installed a LEMP stack.
After tailing the nginx error log, I'm seeing constant ...
0
votes
1answer
114 views
Apache 2.4 ErrorLogFormat - How to show client IP address? - %a is blank
It appears upgrading from Apache 2.2 to 2.4 changed the format of the errorlog file. Error logs used to show the remote client IP address.
Apache 2.2 errorlog: [Thu Aug 29 08:28:46 2019] [error] [...
3
votes
2answers
1k views
Can I delete access log files in nginx. Will it cause an issue
My access log file takeing more than 100 Go can i delete safely the access log file
Could i delete it as root ?
Can other users access to this file after recreating it ?
0
votes
0answers
19 views
Why my nginx error log is using more than 90gb?
I am new here
I would like to know why my error.log on nginx is using so much space,the only way I can "clean" my error log is restarting the server but I don't know why this happens or how I could ...
0
votes
0answers
58 views
Ubuntu /var/log/btmp.1 file looks like a hex dump when I attempt to open it in a text editor. How can i parse the file into plain text? [duplicate]
It looks like the typical large btmp file, where someone or many are attempting a brute force on my system. I intend to install a fail2ban or similar solution to mitigate attempts. I also have ssh ...
0
votes
1answer
92 views
How to identify mail user from Syslog and mail.log? [duplicate]
I have a user on my system who appears to be sending large quantities of mail and I'm having difficulty identifying who he is. I don't know his IP address or username by which he authenticated.
One ...
0
votes
1answer
54 views
Log files keep growing fast on Debian testing (bullseye)
I've just reinstalled my system (Debian testing, bullseye). But I found a problem that I've never met before. Three log files in /var/log keep growing fast: /var/log/messages, /var/log/user.log and /...
2
votes
1answer
208 views
Add log files to /var/log/apache2
I am trying to store the Lumen php framework logs in /var/log/apache2/ instead of its installation dir/storage/logs/ folder.
Lumen-side is fine as I can write log files in /tmp/ just fine.
Something ...
0
votes
1answer
76 views
AWS S3 Bucket - Logs for open bucket which is accessed by browser or any scan program
If any s3 bucket is opened whose directory listing can be seen in a browser or any python based scan program, where should I check logs for such bucket?
If any s3 bucket is not public but its objects ...
0
votes
0answers
30 views
Is Fortigate firewall 'log_id' field a chrono or a type?
The definition of the field 'log_id' in the Fortigate log header is:
A five or ten-digit unique identification number. The number
represents that log message and is unique to that log message. ...
1
vote
0answers
25 views
Can I use different log files for FortiGate rules?
Fortigate firewalls use different log files per type and device. Here is the log file name format:
<logtype> - <logdevice> - <date> T <time> . <id>.log
For example: ...
0
votes
2answers
78 views
Many HTTP CONNECT request for not owned domains
I had a cloud server with two ip, and each ip is configured respectively with apache and wildfly server. In each of them there are some domain/vhost setup in production.
Checking the apache access ...
2
votes
1answer
57 views
Pipe logs across network efficiently?
I want to accumulate logs on a central server. Typing appropriate keywords into Google takes me to all sorts of sophisticated tools like fluentd and elk - but I don't want to aggregate the logs and ...
0
votes
0answers
258 views
Zabbix: Understanding the nodata() function when monitoring log files
Let's say I have an item for monitoring a specific log, which has a 3 minutes interval. My trigger is defined as follows:
{Template:log[/var/log/some.log].iregexp("(one|two|three)")}=1
and {Template:...
