Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

1
vote
1answer
27 views

What is required for logging start/stop of the service?

I would like to log entry when some service was started/stopped. For example this post (Last restart/start time of a windows service) explains how to view logs. The problem is, when I start/stop ...
0
votes
0answers
12 views

Details Log on IIS 8.5

On my IIS log I found errors that occur randomly when a client calls my WCF service. The error log is this: #Software: Microsoft Internet Information Services 8.5 #Version: 1.0 #Date: 2018-12-13 10:...
0
votes
1answer
14 views

How to let netfilter trigger a userspace hook when logging?

I would like to immediately process certain types of packets if/when they arrive with a custom (bash) script. As NetFilter is kernel space, I understand I need to look for a userspace logging tools ...
1
vote
0answers
23 views

Log loadballancing using HAproxy

I'm trying to loadballance logs to a pool of rsyslog server using HAproxy but I'm failing to find a suitable solution when the source is a single client. HAproxy opens a session to one of the backend ...
0
votes
0answers
14 views

Centralize logs from Lambda functions

I have several AWS lambda functions, I'd like all their logs to ship into a central logging service such as datadog or papetrail. I know the function logs goto CloudWatch where I can write another ...
0
votes
0answers
11 views

Wordpress - “GET /wp-content/…” server overload

I've been dealing with strange reoccurring spikes in server usage on my WordPress website. They happen once every 35-40 minutes or so. The usual usage when not spiking is around 10%, but reaches all ...
1
vote
0answers
30 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
1
vote
1answer
29 views

Kubernetes upgrade to 1.13.0 gives Forbidden error on kubectl logs

I've recently upgraded my on-premises Kubernetes cluster from 1.12.1 to 1.13.0 for obvious reasons, but now my kubectl running on the master node cannot get the container logs anymore from any node, ...
0
votes
0answers
13 views

Where to find logs from Postgres 11.1 on FreeBSD 11.2?

Having built Postgres 11.1 on my FreeBSD 11.2 machine, where might I find the logs output from Postgres. Specifically, when attempting to start Postgres for the first time, I get an error message ...
1
vote
1answer
58 views

How to ignore event source log

I have an event source running regularly. The problem is that http-get-dos from fail2ban will catch the IP if the user left the tab open for a large amount of time. So , I am thinking, how can I ...
0
votes
0answers
17 views

How to stop uwsgi logging worker activity

My uwsgi logs get completely filled by useless logging information about the uwsgi workers and I am trying to find a way to stop my disks filling will this data. And more importantly, these obscure ...
1
vote
4answers
46 views

How do i remove the path names from the files i have archived.. UBUNTU

I've been tasked to archive certain files into a new directory at /home/archive/. I used this command: mkdir /home/archive cd /home/archive tar -cvf log.tar \ /var/log/auth.log /var/log/...
0
votes
0answers
19 views

Logs stopped on FTP server

I have FTP server which is receiving logs from Cisco-WSA, but suddenly the logs stopped, Checked the vsftpd service it's up and running, restarted it multiple times too. Checked telnet on ftp ...
0
votes
0answers
10 views

Heroku logging on papertrail gone missing?

I have a ruby app on Heroku that crashed. I'm trying to track down the logs to figure out why. When it crashed, after I rebooted, I looked at the logs, but it deleted the logs from before the reboot....
0
votes
0answers
14 views

Building GROK pattern for parsing

I have my head scratching with translating this regular expression ^\[(?P<Timestamp>.*)\] (?P<Channel>.+?)\.(?P<Severity>[A-Z]+): (? P<Message>.*?)\ (?P<Context>[\[|\{]...
0
votes
0answers
75 views

Blacklisting ip addresses on google cloud platform

We have a chrome extension project that uses google cloud vision api. The api key is getting stolen from the chrome extension. In the logs we see several ip addresses stealing quota. In order to ...
1
vote
1answer
28 views

AWS Elastic Beanstalk S3 log archiving and instance termination/recreation

I've recently moved an application to Elastic Beanstalk. I'm currently in the process of setting up log files to be archived. One of the business requirements is x days of log retention, which is ...
2
votes
0answers
20 views

BIND logging - general vs. unmatched

The BIND9 Administrator's reference manual states that the general category is "the catch-all; many things still aren't classified into categories, and they all end up here." On the other hand, the ...
0
votes
1answer
39 views

What is localhost.webcache in tcpdump

I'm trying to verify that a user is actually logging into my machine and I figured out that looking at tcpdump would be reasonable. I'm using the new omhttp module for Rsyslog to send logs via http ...
1
vote
1answer
33 views

How do I use Nagios to monitor a log file that generates a random ID

This the log file that I want to monitor: /test/James-2018-11-16_15215125111115-16.15.41.111-appserver0.log I want Nagios to read it this log file so I can monitor a specific string. The issue is ...
0
votes
0answers
18 views

Ubuntu - outgoing traffic monitoring

I'm new in this topic, so there are things I don't understand yet. For one port (22) I need to monitor the outgoing traffic and be able to tell it's origin (service or user). I thought it'll be as ...
0
votes
1answer
43 views

Why doesn't my docker actually log anything?

I have the following python file: import time from datetime import datetime while True: time.sleep(1) print(datetime.now()) I've added it to a Dockerfile: FROM python:3.7 WORKDIR /...
1
vote
0answers
24 views

SSD errors under NetApp E-Series 5424

We're having some weird issues with our Storage (netapp e-series 5425) and a bunch of SSDs. Technically they work fine, we can do all operations on it, whatever runs on it runs fine, but we keep ...
-3
votes
1answer
41 views

All log files seemingly deleted [closed]

I wanted to change to the log directory on ubuntu server, and check duplicity log, but I don't know what happened, it seems that all log files and sub-directories have gone missing! This is the ...
0
votes
0answers
18 views

heroku - how to log all http traffic?

I'm trying to diagnose an issue with a Django app running on a Heroku dyno. I want to be able to inspect all http requests and responses, both incoming and outgoing. I want to do this at the system ...
1
vote
1answer
13 views

Nginx - Error Log still being shown

I have defined in my server block location = /wp-login.php {deny all;access_log off;log_not_found off;} However I am still seeing error messages being logged: 2018/11/03 19:00:53 [error] 6477#6477: ...
0
votes
0answers
36 views

How to use hourly support in logrotate (3.8.7)?

I currently have logrotate version(3.8.7). I would like to use the new hourly feature which was introduced in (3.8.5). I have tested forced logrotation for testing, but I need to set it for daily ...
1
vote
1answer
34 views

nohup multiple sequential commands not logging output

I have a python script (which takes a lot of time to complete the execution) that I need to run several times varying the parameters. And it's executed in a remote machine. For instance and test ...
0
votes
0answers
30 views

Changing logging level for segfault of service managed by systemd

We have a Python daemon managed by systemd that occasionally hits a segfault calling out to a C library. While we're fixing this segfault issue, we want the logs to clearly indicate to us when the ...
0
votes
0answers
19 views

Multiple multiline parsers in Kubernetes Filebeat config

I'm using Filebeat to ship logs to Kubernetes. How can I configure multiline collation differently based on different conditions? E.g., use a Java log regex for my Java containers, and a PHP regex for ...
1
vote
1answer
63 views

What is the meaning of these HAProxy configuration lines?

I've seen several examples (see below) of HAProxy logging configuration that all look like this: /etc/haproxy/haproxy.cfg global log /dev/log local0 log /dev/log local1 notice ...
0
votes
0answers
5 views

Logrotate truncates log lines on rotation

using apache DC/OS / Apache Mesos, the logs are written to stdout on the console and DC/OS / Apache Mesos streams to a file and configures Logrotate using the below basic config. "/.../.../stdout" { ...
0
votes
1answer
21 views

How to find invocation of an application in Event log?

I have a custom developed application (stand-alone) installed in Windows 2012 R2 server and the drive is mapped to end user's Windows 10 workstation. User opens the mapped drive and double click on ...
1
vote
0answers
32 views

Logging of MySQL Queries and Forwarding to Syslog/Event log

I was to able to enable Error log, General Query log, Slow Query Log and Binary Log and was able to forward the logs to Syslog. I have few questions about logging. 1) The error log is automatically ...
0
votes
1answer
36 views

where is rotation policy of logs under /var/log/messages-*

I would like to know how messages log file /var/log/messages are rotated. I checked in /etc/logrotate.conf file and inside /etc/logrotate.d/ directory but nothing that could explain the rotation. ...
0
votes
2answers
53 views

Rsyslog Remote Logging: Garbled Text when using TLS

I've set up Rsyslog with TLS on two Debian machines and configured remote logging (log-server, log-shipper). However, I am getting "garbled" Text in the logs on the server: Oct 22 07:58:45 log-...
0
votes
1answer
54 views

Putty “printable output” logging prints all input keys/characters

I'm using Putty on my Windows PC. I noticed my log files created using Putty's default "Printable output" logging will log all key press, even those I have deleted. For example, if I want to type ...
0
votes
1answer
23 views

Complete information into Postfix logs

I'm succesfully using Postfix on Debian to relay my internal e-mail and I am sending logs from the mail.log file to a Logstash instance, and I am showing them on a Kibana dashboards to look for not ...
1
vote
1answer
54 views

What is the best ZFS configuration for logging purposes?

I am planning for hardware that will be used for log management purposes. The software we plan to run on top of the hardware supports tiering and the plan is to go with three tiers as follows: tier ...
0
votes
0answers
37 views

See docker container logs on host while using gelf driver

I am using gelf as log driver for my docker container. In log options i provided udp endpoint. Now when i start the container, everything is working as expected. My question is, if it is possible to ...
5
votes
1answer
97 views

Lot of 400 errors in the Apache logs

We have a hard time debugging 400 errors on our website. We have a lot of errors like this: 10.0.0.1 - - [08/Oct/2018:14:28:07 +0200] "GET /les-news/palmares/detail/article/la-lettre-de-motivation-...
0
votes
0answers
10 views

vsftpd actions aren't being logged for some users

It seems like my actions aren't being logged where I'd expect: ls -lhat /var/log/ gives me: -rw------- 1 root root 25M Oct 5 15:14 secure -rw------- 1 root root 135M Oct 5 15:14 ...
1
vote
1answer
36 views

Sign In Logs With No Client App

We've been having some issues with our Office 365 services, specifically Exchange online. Some of our users are getting attacked from various countries in attempts to get into their accounts. We're ...
0
votes
0answers
40 views

Log Client Ciphersuite in HAProxy

We know of log configurations that can log negotiated cipher-suite info in successful connections. But what we need to do is to log the client cipher-suite info that HAProxy gets hold of during TLS ...
0
votes
1answer
69 views

PHP 7 FPM slow log file location

In my www.conf file, there is this line: slowlog = log/$pool.log.slow Where is that on Ubuntu?
0
votes
1answer
45 views

OpenVPN server dedicated log missing log.conf?

I'm trying to run an OpenVPN server with it's own log, not just writing to the Syslog with everything else. For some reason it looks like you can only set a different log location by using a command ...
1
vote
1answer
68 views

View auditd logs in journalctl

I'm using CentOS 7. trying to view auditd logs in journalctl When I try journalctl -u auditd I see the following output: -- Logs begin at Wed 2018-09-05 08:59:19 EDT, end at Wed 2018-09-19 15:01:01 ...
0
votes
1answer
16 views

How to log incoming interface/IP for Postfix and Dovecot?

I have a dual-homed mail server, so it have IP1 and IP2 on it. I set it up so it answers on both IPs while send via single link only. The only thing I miss is how to figure out (and log it) which ...
0
votes
1answer
47 views

Apache queries mariadb database -> how to log queries?

I got a apache2 vhost-configuration with BasicAuth. With the AuthDBDUserPWQery directive I'm checking a mariadb in the background, if the user-pw-combination exists. For troubleshooting I want to see ...
0
votes
2answers
28 views

Log non HTTP requests/traffic that hit port 80 and 443 in Apache?

I'm trying to log all traffic (IP address and data whatever form of data is received) that hits a specific port (80 and 443 in my case) if it isn't valid for that port. So, for example, if someone ...