Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

2
votes
1answer
30 views

How to prevent Git client hanging during post-receive hook

I have a Git repository that contains a collection of config files and python scripts. On the server repository, I have a post-receive hook that will: checkout the master branch, setup a python ...
3
votes
2answers
43 views

Reducing the verbosity of auditd, my minimal rules catch stuff they should not (apparmor)

My auditd rules and my needs are fairly simple, I want only to log root actions. # auditctl -l -a always,exit -S all -F euid=0 -F perm=x -F key=ROOT_ACTION That is the only rule, and it works: type=...
0
votes
0answers
16 views

Understanding ICMP log [closed]

I am studing IPTABLES and yesterday I was visiting a company and to connect to their network I had to turn of my firewall. It was assigned the local IP to my wireless interface. I got this logs a few ...
0
votes
0answers
16 views

Support for extended ASCII characters in rsyslog

My rsyslog server is not able to correctly decode messages containing extended ASCII characters such as some french letters; e.g. é, ç. I have done a lot of search in google and tried many things but ...
0
votes
2answers
458 views

How can I see in Windows Server 2012 AD what users were logged in to certain computers

Is it possible with Windows Server 2012 AD what users were logged in to certain computers? I would like to see list of all users that were using some computer. i.e. logged to certain computers ever or ...
0
votes
0answers
18 views

Real-time viewing of XML logged events

I have a number of systems that generate XML events and I want to record these events centrally so they can be viewed in realtime. The only thing the different events have in common is that they are ...
0
votes
2answers
34 views

Is there unique information or other reasons a Windows event 'Message' should not be discarded?

Perhaps showing my ignorance, but is there any reason to keep the Message from a Windows event, when ingesting into a log system? Is it the case that these are composed of data from other attributes, ...
1
vote
0answers
29 views

SSHd logs in Docker container not shown by `docker logs`

When using CMD ["/usr/sbin/sshd", "-D"] in a Dockerfile, docker logs does not show the logging: cat > Dockerfile.stdout <<EOF FROM alpine:latest RUN apk add --no-cache openssh-server \ ...
0
votes
0answers
19 views

Apache log issue: AH00082: an unknown filter was not added: :

My error_logs are annoyingly filled with the following: [date] [core:error] [pid 1097:tid 1399] [client 123.123:123] AH00082: an unknown filter was not added: : I have seen references to similar ...
0
votes
0answers
25 views

Missing 503 responses in NGINX logs

I can see in my backend application logs that we're sending 503 responses. Yet I cannot find the corresponding log lines in the NGINX error.log or access.log. Do I need extra configuration to include ...
1
vote
0answers
34 views

Disable logging of requests from certain IPs apache2

I wan't to stop logging accesses from two of my local IPs, this is what I added to apache2.conf: ... <VirtualHost *:80> SetEnvIf Remote_Addr "192.168.0.1" dontlog SetEnvIf Remote_Addr "192....
1
vote
1answer
34 views

How to check which DNS Alias is used to access the server?

I have a host with a database installed on it. In order to access the database, the clients use a DNS Alias (CNAME) - AliasOne - and the database port. DNS Aliases are managed by colleagues in ...
0
votes
1answer
20 views

How to view memory usage of containers after reboot?

I have Docker containers running on my Ubuntu machine. Every so often (couple weeks) it becomes completely unresponsive. I suspect it's a memory leak issue with one of the containers. How can I view ...
0
votes
0answers
9 views

saving day old log files in /var/log/apache2/rotate with compression

One of the production servers at my work has a /varlog/apache2 directory that looks like this: servername.com-access.log rotated/servername.com-access.log-20190127 rotated/servername.com-access.log-...
0
votes
0answers
22 views

nginx save every request every made including headers

I want to set up a nginx rule that will log every request ever made on my site including cookies. For example for a single php script I can get the full request body with this code: print_r($_SERVER);...
0
votes
1answer
30 views

Logcheck doesn't have permission to read log files

I use logcheck to monitor log files, but instead of receiving reports by email I want to send them outside with bash script. So I've used -o: sudo -u logcheck /usr/sbin/logcheck -o 2>&1 | ...
0
votes
0answers
27 views

What are these 404 log entries /-/-/-/-/-/-/-/-/-/-/?

These log entries /-/-/-/-/-/-/-/-/-/-/ (in the 404 logs of my WordPress Redirection Plugin) must be some sort of attempted exploit, but of what? Traversing the directories looking for something? ...
0
votes
0answers
20 views

Log parser for Prometheus

I am implementing Prometheus monitoring solution. The RED Method ensure the service provided by our application meet our SLO and SLA. Thus, we want to extract the Rate, Error and Duration from our ...
1
vote
0answers
28 views

Convert absolute time in log lines to relative intervals

Given a normal text-format line-oriented log file with timestamps in absolute form, is there any convenient tool that converts them to relative time-intervals? e.g. 2019-01-11 19:31:35 UTC LOG: ...
0
votes
0answers
18 views

Does Debian keep log message from initrd

I currently face issues with LVM scanning for devices during a boot of Debian Stretch. The entire OS (but /boot) resides on a LV. I can see the relevant warning messages on the console but they do not ...
1
vote
1answer
47 views

rsyslog/syslog-ng pattern to log ssh and related sftp session for an user

I'd like to log an user specific ssh and following sftp session into a file which would have username in the filename: I have this: Jan 8 13:43:38 mx1 sshd[84622]: Connection from 17x.xx.xx.xx port ...
2
votes
1answer
51 views

system center operation management ( SCOM ) log collection and full text searching

I want to collect all events in all windows servers (nearly 50 server) (from windows event viewer) in SCOM, and full text search on it. My question is: how can I do it?
0
votes
0answers
27 views

nginx log application prefix

I want to separately log location prefix to access log. location /app1/ { proxy_pass http://backend1; } location /app2/ { proxy_pass http://backend2; } Right now my log looks ...
2
votes
1answer
72 views

Run a backup script at systemd shutdown (e.g. copy logs to S3 before instance termination by auto scaling)

I am trying to send log files to S3 before instance termination. I created .service file in /lib/systemd/system-shutdown/upload-backup.service, which is this. Description=Testing Before=shutdown....
1
vote
1answer
55 views

What is required for logging start/stop of the service?

I would like to log entry when some service was started/stopped. For example this post (Last restart/start time of a windows service) explains how to view logs. The problem is, when I start/stop ...
1
vote
0answers
52 views

Details Log on IIS 8.5

On my IIS log I found errors that occur randomly when a client calls my WCF service. The error log is this: #Software: Microsoft Internet Information Services 8.5 #Version: 1.0 #Date: 2018-12-13 10:...
0
votes
1answer
29 views

How to let netfilter trigger a userspace hook when logging?

I would like to immediately process certain types of packets if/when they arrive with a custom (bash) script. As NetFilter is kernel space, I understand I need to look for a userspace logging tools ...
1
vote
0answers
30 views

Log loadballancing using HAproxy

I'm trying to loadballance logs to a pool of rsyslog server using HAproxy but I'm failing to find a suitable solution when the source is a single client. HAproxy opens a session to one of the backend ...
1
vote
0answers
47 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
1
vote
1answer
72 views

Kubernetes upgrade to 1.13.0 gives Forbidden error on kubectl logs

I've recently upgraded my on-premises Kubernetes cluster from 1.12.1 to 1.13.0 for obvious reasons, but now my kubectl running on the master node cannot get the container logs anymore from any node, ...
0
votes
0answers
42 views

Where to find logs from Postgres 11.1 on FreeBSD 11.2?

Having built Postgres 11.1 on my FreeBSD 11.2 machine, where might I find the logs output from Postgres. Specifically, when attempting to start Postgres for the first time, I get an error message ...
1
vote
1answer
63 views

How to ignore event source log

I have an event source running regularly. The problem is that http-get-dos from fail2ban will catch the IP if the user left the tab open for a large amount of time. So , I am thinking, how can I ...
1
vote
4answers
60 views

How do i remove the path names from the files i have archived.. UBUNTU

I've been tasked to archive certain files into a new directory at /home/archive/. I used this command: mkdir /home/archive cd /home/archive tar -cvf log.tar \ /var/log/auth.log /var/log/...
0
votes
0answers
23 views

Logs stopped on FTP server

I have FTP server which is receiving logs from Cisco-WSA, but suddenly the logs stopped, Checked the vsftpd service it's up and running, restarted it multiple times too. Checked telnet on ftp ...
0
votes
0answers
18 views

Heroku logging on papertrail gone missing?

I have a ruby app on Heroku that crashed. I'm trying to track down the logs to figure out why. When it crashed, after I rebooted, I looked at the logs, but it deleted the logs from before the reboot....
1
vote
1answer
48 views

AWS Elastic Beanstalk S3 log archiving and instance termination/recreation

I've recently moved an application to Elastic Beanstalk. I'm currently in the process of setting up log files to be archived. One of the business requirements is x days of log retention, which is ...
2
votes
0answers
28 views

BIND logging - general vs. unmatched

The BIND9 Administrator's reference manual states that the general category is "the catch-all; many things still aren't classified into categories, and they all end up here." On the other hand, the ...
0
votes
1answer
96 views

What is localhost.webcache in tcpdump

I'm trying to verify that a user is actually logging into my machine and I figured out that looking at tcpdump would be reasonable. I'm using the new omhttp module for Rsyslog to send logs via http ...
1
vote
1answer
43 views

How do I use Nagios to monitor a log file that generates a random ID

This the log file that I want to monitor: /test/James-2018-11-16_15215125111115-16.15.41.111-appserver0.log I want Nagios to read it this log file so I can monitor a specific string. The issue is ...
0
votes
1answer
56 views

Why doesn't my docker actually log anything?

I have the following python file: import time from datetime import datetime while True: time.sleep(1) print(datetime.now()) I've added it to a Dockerfile: FROM python:3.7 WORKDIR /...
1
vote
0answers
30 views

SSD errors under NetApp E-Series 5424

We're having some weird issues with our Storage (netapp e-series 5425) and a bunch of SSDs. Technically they work fine, we can do all operations on it, whatever runs on it runs fine, but we keep ...
-3
votes
1answer
42 views

All log files seemingly deleted [closed]

I wanted to change to the log directory on ubuntu server, and check duplicity log, but I don't know what happened, it seems that all log files and sub-directories have gone missing! This is the ...
0
votes
0answers
22 views

heroku - how to log all http traffic?

I'm trying to diagnose an issue with a Django app running on a Heroku dyno. I want to be able to inspect all http requests and responses, both incoming and outgoing. I want to do this at the system ...
1
vote
1answer
15 views

Nginx - Error Log still being shown

I have defined in my server block location = /wp-login.php {deny all;access_log off;log_not_found off;} However I am still seeing error messages being logged: 2018/11/03 19:00:53 [error] 6477#6477: ...
1
vote
1answer
98 views

nohup multiple sequential commands not logging output

I have a python script (which takes a lot of time to complete the execution) that I need to run several times varying the parameters. And it's executed in a remote machine. For instance and test ...
0
votes
0answers
88 views

Multiple multiline parsers in Kubernetes Filebeat config

I'm using Filebeat to ship logs to Kubernetes. How can I configure multiline collation differently based on different conditions? E.g., use a Java log regex for my Java containers, and a PHP regex for ...
1
vote
1answer
91 views

What is the meaning of these HAProxy configuration lines?

I've seen several examples (see below) of HAProxy logging configuration that all look like this: /etc/haproxy/haproxy.cfg global log /dev/log local0 log /dev/log local1 notice ...
0
votes
0answers
6 views

Logrotate truncates log lines on rotation

using apache DC/OS / Apache Mesos, the logs are written to stdout on the console and DC/OS / Apache Mesos streams to a file and configures Logrotate using the below basic config. "/.../.../stdout" { ...
0
votes
2answers
26 views

How to find invocation of an application in Event log?

I have a custom developed application (stand-alone) installed in Windows 2012 R2 server and the drive is mapped to end user's Windows 10 workstation. User opens the mapped drive and double click on ...
1
vote
0answers
55 views

Logging of MySQL Queries and Forwarding to Syslog/Event log

I was to able to enable Error log, General Query log, Slow Query Log and Binary Log and was able to forward the logs to Syslog. I have few questions about logging. 1) The error log is automatically ...