Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

0
votes
0answers
17 views

Stackdriver logs stopped appearing in GCP Stackdriver Logging Console

Background I have a Flask server running on GCE's container-optimized image. This server prints a log for every request. Normally, I can view the logs my application prints in GCP Stackdriver Logging ...
-1
votes
0answers
18 views

In regards to the W3C log format for IIS what does the sc-win32-status mean?

I don't really know what this means, I did however notice from another question that if I type net helpmsg # in cmd I'll get a result. Where do these numbers and where do they come from? Are they ...
2
votes
2answers
96 views

Best practices for giving outside developer SSH access?

N00b here - I'm upgrading my website so that it isn't using a deprecated version of MySql/ PHP. I'm not comfortable enough with the code so I'm using an outside developer. Due to this being database ...
0
votes
1answer
39 views

Issue : log-rotate is not working

I am configuring log rotation one of my production server. I am having a weired issue. I have configured the log rotation for a file on daily basis. But unfortunately the rotation is not working. I ...
1
vote
2answers
31 views

Getting sensible information out of Windows Update log

I'm parsing history.log from debian hosts to produce a csv with dates/packages/versions. After running a suite of tests in testing environment, I then update those packages on actual hosts. I want ...
1
vote
0answers
27 views

Using linux environment variable in rsyslog template

I'm trying to add an environment variable to my rsyslog template. I tried using 'getenv()' function without any luck, I always get an empty string in return. I'm attaching an example of my rsyslog ...
0
votes
1answer
13 views

Logwatch does not report on httpd (apache2)

Problem: I'm using Debian GNU/Linux 8 and my Logwatch does not have a "Begin httpd" section at all for my Apache pools. /usr/share/logwatch/default.conf/logfiles/http.conf is set for some custom ...
0
votes
0answers
18 views

No new Jenkins logs being written

I just noticed my Jenkins last wrote jenkins.log in /var/log/jenkins for more than 6 months ago. This is from my Jenkins config: # log location. this may be a syslog facility.priority JENKINS_LOG=/...
-1
votes
0answers
23 views

Apache security - Drupal 8 related

In one of the log entries I see something strange which to me suggest an attempt to execute code. I have never seen this and cannot yet decipher this, does anyone have any idea what this log entry ...
0
votes
0answers
27 views

Unable to send php7.3 fpm-alpine error logs to std within docker containers

I cannot get the php-fpm error logs appear in docker std. So far I've tried many suggestions but for some reason no progress at all. I am posting my whole setup so that someone could kindly help me to ...
1
vote
1answer
35 views

Distinguish ssh connections from different origins behind NAT

I have a jump server, that many of the clients that connect to it, are sitting behind a NAT, unfortunately, all those clients also uses the same user to connect. Given I have root access for the jump ...
1
vote
0answers
34 views

TLS websocket proxy with deep packet inspection/traffic logging

I have a very specific scenario in which maschines (IoT) are communicating with a central server over websockets. I need to inspect the websockets traffic (wss/tls) for audit and monitoring reasons (...
1
vote
1answer
15 views

logrotate doesn't seems to work as expected

Below is my log rotation configuration for /var/log/messages. /var/log/messages { rotate 4 size 100M missingok notifempty compress delaycompress sharedscripts ...
0
votes
0answers
12 views

php fpm log executed script

when taking a look at my /var/log/php-fpm.log I notice a lot of [02-Apr-2019 18:01:16] WARNING: [pool wordpress] child 26356 exited on signal 11 (SIGSEGV - core dumped) after 492.828741 seconds from ...
0
votes
1answer
22 views

Appending new lines in Tomcat Catalina log rotate

Application running on Tomcat is using log4j for some unknown reason is appending (randomly) new log lines somewhere in the middle of the log file log4j.properites looks like: log4j.rootLogger=INFO, ...
2
votes
0answers
42 views

What causes these strange characters (@^@^@^@^) in /var/log/messages? [duplicate]

One of my servers stops responding occasionally, today I checked the logs and I seen the attached entries. I assumed it uses too much memory and crashes, but seeing this log, I am not sure, what can ...
0
votes
0answers
26 views

IIS operation cancelled by client is logging response code 0 instead of 500 after request header logging

We have IIS 8.5 hosted REST based Web API services. The default logging is W3C format. Client can cancel the ongoing request and these are logged with the status code of 500. When request header ...
0
votes
0answers
21 views

What all does a system state restore point save the state of in Windows Server 2016?

I'm fairly certain, all though not all together certain that it saves / restores the state of: The Registry Installed Software Server Settings (which I would assume generally get installed in the ...
0
votes
1answer
23 views

Extracting responses from Microsoft DNS Server Analytical logs

Is it possible to extract the DNS responses from Microsoft DNS Server Analytical logs (Microsoft-Windows-DNS-Server/Analytical)? The logs contain a field called "PacketData" in the EventData section ...
0
votes
1answer
12 views

Configuring Apache to log referrer url

I'm trying to make Apache server log the referrer URL in all requests including 404 and 200 for example someone has embedded an image hosted on my websites on his own website. the image is loaded ...
-2
votes
1answer
20 views

How to see all incoming requests to my server? [closed]

I have a third party app and I would like to see how it communicates with the server. Why kind of software/server I am supposed to run to log all possible connections attempts to all possible ports? (...
0
votes
1answer
20 views

Tomcat - Application logs can't be cleared without stopping

I have some Tomcats where the application log (the one with [tomcat name].[hostname].[node].[webapp].log name format) can't be cleared unless I stop the Tomcat and clear the log. The log size turns ...
0
votes
1answer
34 views

Do not log successful apache requests

I want to get rid of superfluous logging in Apache. I've find tutorial how to use setenvif module for that purpose, setting variable dontlog. The only problem is, I don't see on the criteria list ...
0
votes
1answer
31 views

Filter docker messages from syslog

Looks like docker is writing duplicate messages to syslog. For instance Mar 6 23:53:45 ip-xx-xxx-xxx-xx docker[45287]: 2019/03/06 23:53:45 GET 200 xx.xxx.xxx.xxx /cas/...
1
vote
0answers
24 views

Apache CustomLog using Content-Type

Using Apache 2.4, I am trying to create a custom log file format which will only log out page views, instead of all request resources (images, css, etc). The site is built using PHP and therefore the ...
0
votes
1answer
24 views

logstash charset error (gelf)

I had some trouble with Logstash and Nginx (all running on Docker). On my docker-compose file i was trying to enable logging from Nginx container to Logstash: nginx: container_name: nginx image: ...
1
vote
2answers
53 views

How can I extract tag from syslog message, and us it as path variable?

I have severals servers logging to the central syslog server, which collect the logs using syslog-ng. I send logs with a tag using the logger command : $ logger -n 01.02.03.04 "Hello from $HOST at $(...
0
votes
1answer
14 views

Unique ID for sftp user in log

I am logging SFTP behaviour in /var/log/auth.log. Output looks like this May 27 05:58:16 test-server sshd[20044]: User child is on pid 20049 May 27 05:58:16 test-server sshd[20049]: subsystem request ...
2
votes
1answer
48 views

Rsyslog, exclude logs

i have a custom daemon that gives logs to rsyslog facility "local1" with two security levels - "info" and "debug". I need to write "info" logs to /var/log/info and "debug" logs to /var/log/debug. I ...
0
votes
0answers
89 views

log4j2 in Tomcat 8: Unexpected log rotation

I tried to fix a log rotation problem with log4j2 in a webapp running on Apache Tomcat/8.0.32 (Ubuntu) on Ubuntu 16.04.4 (see related stackoverflow question). Tomcat runs on OracleJRE 1.8.0_181. I ...
2
votes
1answer
37 views

How to prevent Git client hanging during post-receive hook

I have a Git repository that contains a collection of config files and python scripts. On the server repository, I have a post-receive hook that will: checkout the master branch, setup a python ...
4
votes
2answers
68 views

Reducing the verbosity of auditd, my minimal rules catch stuff they should not (apparmor)

My auditd rules and my needs are fairly simple, I want only to log root actions. # auditctl -l -a always,exit -S all -F euid=0 -F perm=x -F key=ROOT_ACTION That is the only rule, and it works: type=...
0
votes
0answers
33 views

Support for extended ASCII characters in rsyslog

My rsyslog server is not able to correctly decode messages containing extended ASCII characters such as some french letters; e.g. é, ç. I have done a lot of search in google and tried many things but ...
1
vote
2answers
527 views

How can I see in Windows Server 2012 AD what users were logged in to certain computers

Is it possible with Windows Server 2012 AD what users were logged in to certain computers? I would like to see list of all users that were using some computer. i.e. logged to certain computers ever or ...
0
votes
0answers
20 views

Real-time viewing of XML logged events

I have a number of systems that generate XML events and I want to record these events centrally so they can be viewed in realtime. The only thing the different events have in common is that they are ...
0
votes
2answers
37 views

Is there unique information or other reasons a Windows event 'Message' should not be discarded?

Perhaps showing my ignorance, but is there any reason to keep the Message from a Windows event, when ingesting into a log system? Is it the case that these are composed of data from other attributes, ...
1
vote
0answers
69 views

SSHd logs in Docker container not shown by `docker logs`

When using CMD ["/usr/sbin/sshd", "-D"] in a Dockerfile, docker logs does not show the logging: cat > Dockerfile.stdout <<EOF FROM alpine:latest RUN apk add --no-cache openssh-server \ ...
0
votes
0answers
81 views

Apache log issue: AH00082: an unknown filter was not added: :

My error_logs are annoyingly filled with the following: [date] [core:error] [pid 1097:tid 1399] [client 123.123:123] AH00082: an unknown filter was not added: : I have seen references to similar ...
0
votes
0answers
65 views

Missing 503 responses in NGINX logs

I can see in my backend application logs that we're sending 503 responses. Yet I cannot find the corresponding log lines in the NGINX error.log or access.log. Do I need extra configuration to include ...
1
vote
0answers
38 views

Disable logging of requests from certain IPs apache2

I wan't to stop logging accesses from two of my local IPs, this is what I added to apache2.conf: ... <VirtualHost *:80> SetEnvIf Remote_Addr "192.168.0.1" dontlog SetEnvIf Remote_Addr "192....
1
vote
1answer
49 views

How to check which DNS Alias is used to access the server?

I have a host with a database installed on it. In order to access the database, the clients use a DNS Alias (CNAME) - AliasOne - and the database port. DNS Aliases are managed by colleagues in ...
0
votes
1answer
23 views

How to view memory usage of containers after reboot?

I have Docker containers running on my Ubuntu machine. Every so often (couple weeks) it becomes completely unresponsive. I suspect it's a memory leak issue with one of the containers. How can I view ...
0
votes
0answers
10 views

saving day old log files in /var/log/apache2/rotate with compression

One of the production servers at my work has a /varlog/apache2 directory that looks like this: servername.com-access.log rotated/servername.com-access.log-20190127 rotated/servername.com-access.log-...
0
votes
0answers
23 views

nginx save every request every made including headers

I want to set up a nginx rule that will log every request ever made on my site including cookies. For example for a single php script I can get the full request body with this code: print_r($_SERVER);...
0
votes
1answer
41 views

Logcheck doesn't have permission to read log files

I use logcheck to monitor log files, but instead of receiving reports by email I want to send them outside with bash script. So I've used -o: sudo -u logcheck /usr/sbin/logcheck -o 2>&1 | ...
0
votes
0answers
27 views

What are these 404 log entries /-/-/-/-/-/-/-/-/-/-/?

These log entries /-/-/-/-/-/-/-/-/-/-/ (in the 404 logs of my WordPress Redirection Plugin) must be some sort of attempted exploit, but of what? Traversing the directories looking for something? ...
0
votes
0answers
64 views

Log parser for Prometheus

I am implementing Prometheus monitoring solution. The RED Method ensure the service provided by our application meet our SLO and SLA. Thus, we want to extract the Rate, Error and Duration from our ...
1
vote
0answers
28 views

Convert absolute time in log lines to relative intervals

Given a normal text-format line-oriented log file with timestamps in absolute form, is there any convenient tool that converts them to relative time-intervals? e.g. 2019-01-11 19:31:35 UTC LOG: ...
0
votes
0answers
21 views

Does Debian keep log message from initrd

I currently face issues with LVM scanning for devices during a boot of Debian Stretch. The entire OS (but /boot) resides on a LV. I can see the relevant warning messages on the console but they do not ...
1
vote
1answer
74 views

rsyslog/syslog-ng pattern to log ssh and related sftp session for an user

I'd like to log an user specific ssh and following sftp session into a file which would have username in the filename: I have this: Jan 8 13:43:38 mx1 sshd[84622]: Connection from 17x.xx.xx.xx port ...