Questions tagged [log-files]
A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.
1
vote
0answers
25 views
Convert absolute time in log lines to relative intervals
Given a normal text-format line-oriented log file with timestamps in absolute form, is there any convenient tool that converts them to relative time-intervals?
e.g.
2019-01-11 19:31:35 UTC LOG: ...
0
votes
0answers
20 views
OpenVPN access server unkown IP addresses
I am seeing random IP addresses in my OpenVPN server logs -
20:38:08 2019 TLS Error: cannot locate HMAC in incoming packet from [AF_INET] xxx.xxx.xxx.xx:45345'
09:14:22 2019 TLS Error: cannot locate ...
0
votes
2answers
35 views
Delete a log while is written using SED - /var/log/messages
I had a filesystem that was over 60%. I found that the file /var/log/messages had more than 4 million lines so I decided to delete 2 million lines in order to clear some space. I executed the command ...
-1
votes
0answers
28 views
how to find cause of shutdown
I have a HP proliant server with centOS 6.9 as OS and DB2 10.5.5 as database. these errors were in diag:
1. A fatal error occurred in data protection services
2. An unexpected and critical ...
0
votes
0answers
30 views
How to open multiple log files with less and logrotate?
I use logrotate for nginx and php logs. By default it names files like:
access.log
access.log.1
access.log.2.gz
...
access.log.10.gz
I want to open all of the log files in less so I can search ...
0
votes
1answer
52 views
Can this be consider as a ddos (logfiles)
our server crashed yesterday for the 1 time after one whole year. So i checked the logs and find some strange things. There is one ip that make about 450 individual site-requests in a 12 min period of ...
3
votes
2answers
33 views
Cloudwatch logs - audit user access
I have a list of users in .passwd and access_log being uploaded to Cloudwatch.
I need to make weekly report who from this list did access to server.
Is there any way to automate this rather than ...
2
votes
1answer
36 views
Get MSI log for Active Setup
One of my users has Outlook unable to start with "Cannot start Microsoft Office Outlook. Cannot open the Outlook Window" and I've already ruled out existing add-ins. (This is just for background ...
0
votes
0answers
18 views
how to parse the slowest requests from nginx log
I have the format in nginx access log defined like
log_format combined_ssl_host '$remote_addr - $remote_user [$time_local] '
'$host $ssl_protocol '
...
-3
votes
1answer
41 views
All log files seemingly deleted [closed]
I wanted to change to the log directory on ubuntu server, and check duplicity log, but I don't know what happened, it seems that all log files and sub-directories have gone missing! This is the ...
2
votes
1answer
32 views
How to read boot log in rescue mode?
I have a remote server running Ubuntu 16.04 server that hangs on boot. In order to find the error I booted it in rescue mode, mounted devices to /mnt and chrooted to /mnt.
Here's what I did so far:
...
0
votes
0answers
5 views
Logrotate truncates log lines on rotation
using apache DC/OS / Apache Mesos, the logs are written to stdout on the console and DC/OS / Apache Mesos streams to a file and configures Logrotate using the below basic config.
"/.../.../stdout" {
...
0
votes
1answer
37 views
where is rotation policy of logs under /var/log/messages-*
I would like to know how messages log file /var/log/messages are rotated.
I checked in /etc/logrotate.conf file and inside /etc/logrotate.d/ directory but nothing that could explain the rotation.
...
0
votes
1answer
73 views
directive 'catch_workers_output = yes' don't work as I want
I have CentOS 7 with apache 2.4.35 with pmp event and php-fpm
all works fine but all php errors are go to one big file for all my virtual hosts.
I read all docs about it and find that
...
0
votes
2answers
78 views
Clearing “/var/log/journal”
I want to clear my "/var/log/journal" directory.
I'm using debian 8
root@nyc3-x8:/var/log# uname -a
Linux nyc3-x8 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux
And my ...
0
votes
1answer
27 views
Using auditd and retaining log files for 6 months.
Disclaimer: I'm not an accredited nor very experienced sysadmin but have been tasked with some sysadmin responsibilities
Task: Find a way to log all account management activities (e.g., account ...
-1
votes
1answer
20 views
Only 2 client IP addresses in IIS log file
I am a programmer asked to analyze IIS log files from a Windows 2008 web server. The domain is a state agency and users are from the agency's intranet, plus redirections from the web. Each log file ...
0
votes
0answers
73 views
Deploy to AWS EB and immediately get probed by Chinese-sounding hack
That's twice now I've deployed separate apps to AWS via Elastic Beanstalk and within 12 hours of instantiation, while I'm looking through the log files I see this:
------------------------------------...
2
votes
1answer
77 views
What is the best practice for logs integrity and authenticity?
We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
0
votes
1answer
33 views
Can't empty log files
The servers at my work have a script made by me that every midnight copies log files to a folder, copies this folder to Amazon S3 and zeroes the original files.
However, I saw that the original files ...
0
votes
2answers
31 views
Can Perfmon be configured to survive a hard-reset or flush reports on the go?
I am having trouble configuring perfmon here (Windows Server 2016 if it's relevant). My situation: our server recently get random hit and we are diagnosing the problem, so I put a Data Collector Set. ...
0
votes
0answers
39 views
rsyslog - queues with expiration time
I've configured rsyslog with Disk Assisted options to forward logs to Logstash server. Last night, the status of network of Logstash became unstable. Consequently, bunch of backlog files that contain ...
1
vote
1answer
558 views
System logs are empty (/var/log/messages; /var/log/secure; etc)
I found that rsyslog stopped writing on logs (messages; secure; cron;etc)
System information:
NAME="Red Hat Enterprise Linux Server"
VERSION="7.4 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VARIANT="Server"
...
0
votes
2answers
73 views
Is it possible to truncate $remote_user in an nginx access log?
We have an nginx server that, in some contexts, receives sensitive data in the HTTP username field. More specifically, it's an API key that clients are sending like curl -u "$API_KEY:" ....
The ...
0
votes
0answers
17 views
print specific ip traffic from log
I'm trying to print out a specific IP address and its request line but have had no luck.
I thought the line would be something like this:awk $6 IP .log | awk -F : '{print $1,$2,$4,$6;}' | sort | ...
0
votes
1answer
91 views
Unable to find my mail log file (looked for the path in 50-default.conf and rsyslog)
I am trying to send emails from my linode ubuntu server but I am unable to. So I had this test script set to log the errors by adding this right before mail()
ini_set('display_errors', 1);
...
0
votes
2answers
1k views
MariaDB won't start after server crash. No error logs
My CentOS 7 server recently crashed by having a hard drive unplugged while it was running and now MariaDB won't start and I'm not getting any error logs.
Everything else on the server seems to be ...
1
vote
2answers
185 views
What is ideal directory for kafka messages
The default value of logs.dir=/tmp/kafka-logsin server.properties. Usually /tmp is avoided from keeping any important files and we are storing messages and offsets!
Any particular reason why one may ...
2
votes
0answers
34 views
SCCM 2012 Task Sequence unexpectedly re-imaged a machine
wondering if anyone has got any ideas here. I have a task sequence that was deployed last week. The deployment settings are;
Action:Install
Purpose: Available
Available to the following: ConfigMgr ...
3
votes
1answer
593 views
How to create a GDPR compliant HTTP server access log with focus on remote IP anonymization and nginx?
EU's General Data Protection Regulation (GDPR), and the German DSGVO implementation, are very strict when it comes to individual-related data (such as IP addresses). However this question is not about ...
0
votes
3answers
1k views
rotate logs with logrotate and move old files
Logrotate don't move file to oldlogs folder and exit abnormally with code 1.
I tried to launch manually it with -d option but no errors are showed.
This is my configuration:
/var/log/myfolder/*.log
{
...
1
vote
1answer
336 views
Why does Samba PAM login session log data always say “closed”?
I keep getting these logs in my /var/log/auth.log every 10-20 seconds:
Jun 22 11:31:12 debian smbd[1795]: pam_unix(samba:session): session closed for user nobody
Jun 22 11:31:08 debian smbd[1794]: ...
0
votes
1answer
101 views
Can I safely trim /var/tmp/phd/log/daemons.log?
I have a server running Phabricator and this log file has no logrotate.
It is getting too big and now I need to trim it. Can I safely remove some of its content?
0
votes
0answers
46 views
Where do I look for error logs (about locales not generated) in a docker container
I have a docker instance, where I installed on debian stretch php7 and apache2. Php sends these error messages : Cannot set locale to en_US.UTF-8.
Inside the docker instance, as root, I cannot ...
0
votes
0answers
21 views
How do I check if a 2012R2 server core is a downgraded full server? (removed gui)
Is there a log file entry or directory that shows that the installation is not originally a server core installation but a full server with the gui removed?
I'm either searching for the wrong thing ...
0
votes
0answers
64 views
Managing log file size via cron
I have a tomcat server running on my ec2 instance. Recently, my catalina.out log file got pretty huge to the point it was quickly filling up and causing memory overflow on the server. I have it more ...
5
votes
4answers
3k views
NGINX Access Log by Location
Hello so I have two platforms where one operates as a subdirectory. I would like to be able to have an access and error log for each application; however it is not working as I intended :(
Here is ...
-1
votes
1answer
29 views
Apache Logs - identify IP that made series of specific requests
Given the following apache access log:
127.0.0.1 - - [04/May/2018:11:19:03 +0300] "GET /file1 HTTP/1.1" 200 ...
127.0.0.1 - - [04/May/2018:11:19:03 +0300] "GET /file1 HTTP/1.1" 200 ...
127.1.1.1 - - ...
0
votes
1answer
126 views
Blocking postfix requests and access
I have noticed that I keep getting trash access to my postfix/smtpd in the /var/log/mail.log I see many repeats of
May 2 11:09:04 mercury postfix/smtpd[25364]: warning: unknown[164.39.218.210]: SASL ...
2
votes
1answer
300 views
Missing Apache 2.4 error.log
Ubuntu 16.04
Apache 2.4
I have several virtual hosts defined. Every one defines an own error.log:
ErrorLog ${APACHE_LOG_DIR}/www.xyz.de.80.error.log
CustomLog ${APACHE_LOG_DIR}/www.xyz.de.80.access....
0
votes
1answer
27 views
How to associate .log files with LTFViewer on Windows 2008?
Large Text File Viewer is fast for opening megabyte and gigabyte large log files.
However on Windows Server 2008 (SBS) the File Explorer fails to open .log files with this application. LTF viewer ...
0
votes
0answers
31 views
Can two computers simultaneously read/write to a file on a windows file share? One reads one writes.s
I am trying to log certain information from my Azure VMs. I am using a Azure File Share to share/store logs, each machine writes to a unique file several times in a minute. I have one VM (call it ...
0
votes
0answers
21 views
What does a series @^ in the kernel.log mean [duplicate]
My server crashed today. After a cold reset I looked at the kernel.log and found the following:
Mar 14 14:45:07 romulus kernel: [1663261.548575] docker0: port
2(vethfbcd09f) entered forwarding state
...
2
votes
1answer
641 views
Interpreting DHCP related message from rsyslog
In /var/log/messages from an EC2 instance there are a lot of lines such as:
<date/timestamp> ip-<IP_HERE> ec2net: [get_meta] Trying to get http://169.254.169.254/latest/meta-data/network/...
0
votes
0answers
80 views
Trouble with separating apache log by year,month directory on AWS Linux AMI
I'm using AWS EC2 with Amazon Linux AMI, and need to separate apache logs by date.
When I used Ubuntu, I used cronolog like below.
CustomLog "|/usr/local/cronolog/sbin/cronolog /var/log/apache2/%Y/%m/...
3
votes
0answers
964 views
kubernetes kubelet logging to files and logrotate
kubelet has an option to store log files in a log-dir (https://github.com/kubernetes/kubernetes/issues/21248).
I start kubelet with the options --logtostderr=false --log-dir=/var/log/kubelet (I have ...
0
votes
0answers
210 views
PHP error logs and files being created with different umask
I have the umask set up on my Apache2 server using umask 002. This is added to the end of /etc/apache2/envvars during the docker container build.
I have the following script to test:
// Create file
...
0
votes
0answers
22 views
Can newsyslog rotate user logs with wildcard paths?
I can setup newsyslog to rotate files matching a glob pattern using the G flag, but I want to rotate the user logs files from their http logs, and I can't figure out how to set the permissions for the ...
0
votes
0answers
329 views
How can I know who created this VMware snapshot?
Someone made a snapshot of a production VM (vSphere 5.1) a month ago. The snapshot is still there. Apparently this person doesn't know that snapshots are not backup operation...
I would like to find ...
0
votes
0answers
125 views
Snort output auto generated names
I’m using snort’s configuration:
output alert_csv: alert.csv timestamp,sig_id,dst
But everytime that Snort finishes, I can see a file named alert.csv, instead of alert.csv.<timestamp> as other ...
