Questions tagged [log-files]
A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.
1,045
questions
0
votes
1answer
22 views
What does ClientCancel mean in the HTTPERR log
In our IIS log files, I noticed on occasion there are pageviews missing. Further investigating this issue I took a look at the %systemroot%\System32\LogFiles\HTTPERR log files. Here I found that the ...
0
votes
1answer
59 views
How to rotate compressed log file on centos 7?
I have customized kafka server and the app is creating log files and configures log rotation. My problem is that I need to compress the rotation logs that were created.
I tried to create new log ...
0
votes
0answers
64 views
Apache access log not logging content-length for data served via PHP
I have a php script that handles files downloads, it sends content-length header properly and the browsers receive it. But in the Apache access log they show up as "-".
In the past this used ...
0
votes
0answers
61 views
forward logfiles of any format using rsyslog
I want to forward the log-files of some applications on my linux-system (periodically) from server A to server B.
I could probably use FTP but there are probably other tools which are more "...
1
vote
2answers
73 views
passing real IP address from one nginx instance to another and writing it in the logs
Moving a request to my internal nginx server I add to the call:
proxy_set_header X-Real-IP $remote_addr;
when I try to print this value in the log the internal nginx the container crashes:
...
0
votes
1answer
34 views
Meaning of Log File (DDOS) [duplicate]
We are currently facing attacks (probably DDOS) on our server. The incoming network traffic goes from an average of 20Mbps to 1Gbps in just 2-3 minutes. The lines in our log files usually look like:
...
0
votes
1answer
31 views
Are firewall logs filled with incoming SSDP requests typical for networks with a Windows 7 box?
While reviewing firewall logs that were sent to me from a Windows 7 box (the box is not a server) on a tiny network, I saw thousands of incoming SSDP UDP entries. The SSDP entries were nearly ...
0
votes
0answers
19 views
Null after logrotate copytruncate
I am using logrotate to manage my logs. As I have to manage a bunch of log files. My logrotate config looks like
/log/typeA*.log
/log/typeB*.log
/log/typeC*.log{
daily
rotate 7
...
2
votes
1answer
86 views
Linux audit files(data=)
type=TTY msg=audit(08/12/2020 02:33:30.163:107) : tty pid=2709 uid=e4ws5 auid=root ses=1 major=4 minor=1 comm=sh data="/bin/bash -i",<nl>
Can anyone tell me how in this audit.log there ...
-1
votes
1answer
90 views
Which tool ISPs use for browsing logs?
It is known that ISP has to log various network data for various purposes, such as law enforcement needs.
However, what are some examples of software tools used by ISPs to browse this huge amount of ...
-1
votes
1answer
55 views
Can somebody help me on how to zip these individual log files within while loop
I am able to break o/p of a big logfile (filename.log) into individual log files of 1 min each (filename.log.140108) using while loop, but I want these files to be saved as zip files due to capacity ...
0
votes
0answers
35 views
How to restore the error.log functionality in Apache, bitnami Wappstack?
I am using the Bitnami Wappstack 7.4.10 in windows, with PHP 7.4 and Apache 2.4.46 . By accident I made a script that had an infinite loop that also produced an error in every iteration, so the log ...
0
votes
1answer
45 views
Copying Content from a file to another when a new line is added using poweshell script
I have a file named server1.txt and one more file named server1_copy.txt. In server1.txt, all logs will be added from the application. So whenever a new line is added in the server1.txt, we need to ...
0
votes
1answer
64 views
How do I know who pings my server and keep a log of it?
I believe it is a very newbie question and I am one indeed. On AWS instance, how do I know who pings my server and if is possible to keep a log of it?
I added the example output from the answer by @...
0
votes
0answers
251 views
Apache Error log format: how to find current format?
I am building a log parser in PHP and have trouble with apache error log format.
With access log, it's easy to see the default LogFormat in apache config file then check in my virtual hosts for any ...
-2
votes
1answer
43 views
How to know which file(file name) is transfered through FTP/SFTP
Think of a situation I transferred a file through FTP, in which log I can find the name of the file transferred. Kindly mention the location of the log file.
Thanks In Advance.
1
vote
0answers
52 views
AWS Windows 10 Error 0x80070780: The file cannot be accessed by the system
We have log files stored on one of our AWS machines, however, a significant amount of the log files have been corrupted without any clearly apparent reason.
When trying to open/read/write/rename/...
0
votes
1answer
864 views
How to detect PHP's fsockopen on your server logs?
As stated in the Title.
How can I detect an incoming connection from PHP's fsockopen method in my web server logs?
Which log file records this activity if it gets recorded at all.
Server: Ubuntu 16.04 ...
0
votes
0answers
104 views
wazuh /var/ossec/data mount point is 100% full
In my case, there are two wazuh workers and one master. Wazuh master sends the logs to the elasticsearch and we visualize agent logs using wazuh plugin on kibana.
We recieve good amount of logs in ...
0
votes
0answers
18 views
How does logrotate handle an initial entry in logrotate.status?
I have two files to rotate, one file called error.log and one file called info.log. I created both files and a logrotate script yesterday at around 14:00.
The log files shall be rotated to a sub path ...
0
votes
1answer
21 views
“Snatching & preserving” versions of a file which gets overwritten repeatedly
On a system I'm working on, there are several processes which occasionally write a certain file (we can think about it as a sort of a log, although it's not quite that). Unfortunately, they all write ...
0
votes
1answer
47 views
Exiting Virt-top shows error message in server logs
I see message in /var/log/messages after quitting virt-top command :
libvirtd: 2020-07-11 12:36:22.206+0000: 3462: error
:virNetSocketReadWire:1806 : End of file while reading data:
Input/output ...
3
votes
0answers
844 views
Windows 10 KVM guests cause Ubuntu 20.04 host to crash (revised)
I got extremely confused and decided to re-write the question from scratch, so if some of the comments do not make sense, that is why. Apoplogies to anyone whose time I wasted.
I am having a problem ...
0
votes
1answer
22 views
MariaDB 10.4.13 on Fedora 31
Learning MariaDB on Fedora 31. Installed successfully, able to connect; however, cannot seem to get the error log global variables to register.
Steps taken:
Created maria.log file in /var/log/
Added
[...
0
votes
0answers
34 views
getting all files in a directory via SFTP with a variable appended before file names
I am downloading all files in a directory via SFTP using below syntax:
sshpass -p 'mypass' sftp name@$IP:/var/log/*
With above one-liner, I'm able to download all files from /var/log
But I want the $...
0
votes
1answer
127 views
graphical logfile viewer for fail2ban?
is there a GUI or other nicer way to study fail2ban logs other than command line? my Ubuntu 18.04.4 is behind a router with a range of ports forwarded, including 22 for ssh, so UFW and fail2ban are ...
1
vote
1answer
55 views
Push log files to AWS Cloudwatch
I have a log file (example: apilog.txt) inside my docker container running in an EC2 instance.
I need to push the content in that file to AWS Cloudwatch log groups.
How can I achieve this task .
...
0
votes
0answers
101 views
Postfix not printing all the status=sent logs in /var/log/maillog?
We have configured a postfix mail server, it takes email IDs from a CSV file, which has 13,500 recipients. The email is sent to all the recipients at a time, but in /var/log/maillog we only get around ...
1
vote
1answer
54 views
How to use sed text processing
please i need your help on this topic.
i have 3 temp files and nbf.txt.
i want to copy each hour lines from this 3 temp files to nbf.txt:
inside each temp file we have
temp file for each hour:
tmp1
...
0
votes
1answer
39 views
OpenVPN server log - what is the “us=” identifier following the timestamp?
I use OpenVPN 2.3.10 in server mode, with logging set to verb 4.
In the log, every line begins by a timestamp (Mon May 11 10:40:10 2020) and then us=, followed by a 5- or 6-digit number. What is this ...
0
votes
1answer
121 views
Awstats + Postfix logs - no senders/recipients?
I am trying to configure awstats (v7.6 from repo on Ubuntu 18.04) to process postfix log files. But I don't have much log data to work with.
Awstats is reporting that it has processed the data and the ...
0
votes
1answer
348 views
Haproxy log file with pfsense
I am trying to read the /var/log/haproxy.log file with the command: clog -f haproxy.log but nothing happens. No window opens. How do I see my error log? I’m on pfsense.
Thank you so much!
1
vote
1answer
105 views
Why would Apache log different response sizes for the same url?
I noticed a couple (ostensibly-)harmless log entries, and--I'm admittedly overthinking this by a mile--got curious about Apache2 response sizes.
This Ukranian crawler † hit my web daemon, two seconds ...
1
vote
1answer
101 views
200 status for requests from IP not allowed by htaccess?
I have a Debian 9 server which is continually beaten on by bots. I check the access logs for 200s every day just to be sure my countermeasures are working. The logs are full of 403 status requests ...
1
vote
2answers
3k views
Custom headers in nginx: log first, clean afterwards
I need to parse nginx access_log and associate records with user accounts. To do so, I decided to use a custom header:
App sends custom header (like x-userid)
Nginx stores that value in access_log ...
0
votes
0answers
75 views
UFW activated, but still failed connections in auth.log
I activated the ufw on my ubuntu 18 server. After resetting to defaults, deny all incomming, I opened port 22, 80 and 443 and enabled the logging.
In the ufw log, I can see a lot of blocked request.
...
0
votes
1answer
439 views
How to analyse vsftpd log files with goaccess
I'm trying to use goaccess log analysis tool, to analyse vsftpd FTP server's logs. I'm aware that being a web server log analyser, goaccess is not the best tool for this. That being said, it's ...
0
votes
1answer
24 views
Guaranteed rename logfile AFTER logfile is no longer being written to
I have the following set up.
In a remote machine I have a process continuously running which subscribes to some data and writes it to stdout (lets call the process the subscriber). I call the ...
1
vote
1answer
33 views
How to quickly check if specific keywords exist in a lot of log files in shell?
I have run a program that writes a lot of log files in a lot of directories.
For example, there are hundreds directories, and every one includes thousands of log files.
I need to find out the files ...
0
votes
1answer
24 views
can logstash package individual log types into packages an scp them over to a central node?
I am curious whether logstash only processes logs and streams them at the event/line level or can it package all apache access logs for example and send them over zipped up to a central node?
0
votes
2answers
2k views
What are missed lines in fail2ban?
I had millions of lines such as these in my log file yesterday:
Feb 25 18:00:00 mond2 sshd[29574]: Bad protocol version identification '\003' from 54.37.78.250 port 50306
Feb 25 18:00:00 mond2 sshd[...
0
votes
0answers
24 views
Why does the access.log nginx file contain two different agent users for a single request?
I try to debugg an Angular error with an online Webbrowser Simulator "Saucelabs.com" running Safari. When I watch my debugg file on the nginx in access.log I see the following line:
xxx.xxx.xxx.xxx - ...
0
votes
1answer
106 views
Apache Access Log
I use fail2ban to detect malcious requests to any of my hosted domains, which is working very well, with one exception.
If a requests is sent to the IP instead of a fqdn or a subdomain, it gets ...
0
votes
1answer
148 views
Find exim account sending lots of emails. (Spamming)
I have an Exim server with several domains configured. In each domain I have several email accounts. From time to time a computer configured with one of this emails gets infected and starts sending ...
0
votes
0answers
79 views
Understanding iptables log, which process
last time i watched out my iptables-log and i dont know , how i get the reason or which process ordered the connection establishment.
Jan 8 23:02:17 ipo-dara kernel: [49323.868478] iptables-dropped:...
0
votes
1answer
205 views
openSUSE: “Permission denied” error on Cron log file
using: openSUSE Leap 42.2
/etc/cron.d/mysite file content:
* * * * * wwwrun /usr/bin/php /srv/www/mysite/cron.php >> /var/log/apache2/mysite.cron 2>&1
/etc/cron.d/ dir content:
/etc/...
0
votes
1answer
168 views
Cron Job for deleting daily apache Log
on my Ubuntu cloud server often happens when i visit apache log fiiles to be 5-10 GB in a day or two, i'm a user of vestaCP and destination of log files is: var/log/apache/domains/domain.error.log and ...
0
votes
1answer
46 views
iptables-dropped packet understanding
Today I read in my the below iptables-dropped packet logs and I don't really understand this log. I hope somebody can help me.
I only opened an inbound SSH port 2221 and for my outgoing traffic I ...
4
votes
1answer
228 views
Logcheck Ignore Logrotate
I inherited a system using both logcheck and logrotate. The issue I'm having is that logrotate is sending a nasty e-mail saying something along the lines of:
*** WARNING ***: Log file (X) is smaller ...
0
votes
1answer
66 views
Can I find username login log in Active directory server?
I join computer into active directory(AD) domian. User in AD can login to computer by using username, password in AD. Computer was install deep freeze so it can not keep anything after restart. I ...
