Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

1
vote
1answer
2k views

Access to “Windows Security” logs for “eventlog” group

Security logs are not available for users in eventlog group. I've checked this down to security event log file. eventlog group has all permissions. Unfortunately I cannot add my user to ...
0
votes
1answer
127 views

Where to find logs from Postgres 11.1 on FreeBSD 11.2?

Having built Postgres 11.1 on my FreeBSD 11.2 machine, where might I find the logs output from Postgres. Specifically, when attempting to start Postgres for the first time, I get an error message ...
0
votes
0answers
21 views

How to configure ELK on one server and Filebeat on another server?

I have 2 servers with Ubuntu 18.04 : monitoring.example.com with ELK www.example.com with my site in production and Filebeat Here is the configuration of the ELK server : https://docs.google.com/...
2
votes
1answer
2k views

TOMCAT Disable org.apache.http.wire logging

I need to shut up the org.apache.http.wire logging level because its logging every single HTTP request and it produces Gigabytes of logging, I'm using the default logging of tomcat6 which I think it ...
0
votes
1answer
24 views

Trying to send output to log file with tee using systemd but the log file isn't being created?

I want to run a node application via systemd and have its output go to both stdout and a log file. The node app is in the folder named www/www.appname.com and I want to have the log file in www/log....
1
vote
1answer
2k views

How to change Windows DFS replication log file path?

I have enabled DFS replication for a couple shares on my Windows Server 2003 machine and it works fine, except that I would like the debug logs to be written to a different drive (it logs in to the ...
0
votes
1answer
2k views

Read only permissions on some Linux logs

I would like to limit a certain user (let's call it logger) to be able to only read some (not all) logfile (web, php framework, radius,etc).I am not sure how to do it the "best" way. So far I have a ...
1
vote
3answers
1k views

How to track down connectivity drops

My company just changed it's old firewall (Zyxel ZyWALL 70) with a new one (Zyxel ZyWALL USG 300). Everything seems to be working fine but sometimes, in a non-periodic span of time, connectivity ...
2
votes
3answers
1k views

Is there a reason to use /dev/lognull instead of /dev/null when logging with syslog-ng?

At my office I recently wondered aloud to all, "Why shouldn't these logs be redirected to /dev/null instead of /dev/lognull?" I was told that there is (or was) a reason, but no one could remember it. ...
0
votes
2answers
2k views

Why is my auth.log file empty?

I have an ubuntu 14.04 server running a service, and I'm currently setting up some logging visualization, but I noticed my /var/log/auth.log is empty. I assumed it wouldn't have much since I've ...
1
vote
1answer
141 views

Why SSL does not work between my 2 servers?

I have 2 servers with Ubuntu 18.04: monitoring.example.com (with ELK on a single server) www.example.com (with Filebeat) on the server ELK Create directories to store SSL certificates $ sudo mkdir ...
4
votes
1answer
2k views

Adding timestamps to supervisord logs

Is it possible to let supervisord add timestamps to the outputs in stdout_logfile and stderr_logfile? I couldn't find it anything about that in the documentation.
0
votes
2answers
4k views

centos cron logs are not executed

I have been trying to setup a cronjob on CentOS but it doesn't seem to work. I have been deleting the cron's logfile to see all newly created logs and I have been restarting crond but /var/log/conf ...
1
vote
0answers
32 views

Writing MongoDB logs to a remote logging server

I am trying to forward MongoDB logs from several remote servers to a central logging server. To do this, I changed my mongod.conf files to use syslog like so: systemLog: destination: syslog ...
2
votes
3answers
4k views

echo_read_request_body doesn't work. How to log POST request body (nginx)?

I need to log POST data. I have added to my config location / { echo_read_request_body; access_log /var/log/nginx/domains/site.post.log postdata; } And also added this to http ...
0
votes
1answer
2k views

Log Rotation Causing nxlog Failure

I'm using nxlog to watch two vCenter log files on a Windows Server 2008 system and I have a very simple config to ship messages to Logstash. Nxlog began failing yesterday after a file was rotated. ...
0
votes
1answer
96 views

Why can't set bin log for MariaDB in Debian 9?

It is simple to set bin log for mysql in centos,just uncomment the line in /etc/my.cnf. Before uncomment in my.cnf. #log_bin = /var/log/mysql/mysql-bin.log Uncomment it in my.cnf. log_bin = /var/...
0
votes
0answers
8 views

PSAD only send notifications for scans coming from a given IP range

I installed PSAD on a honeypot-kind of installation, the idea is to catch the port scans coming from within my organization's network. The organization has a class B network, and for the love of me ...
2
votes
1answer
107 views

SSHd logs in Docker container not shown by `docker logs`

When using CMD ["/usr/sbin/sshd", "-D"] in a Dockerfile, docker logs does not show the logging: cat > Dockerfile.stdout <<EOF FROM alpine:latest RUN apk add --no-cache openssh-server \ ...
1
vote
3answers
943 views

Syslog does not record logs received over TCP to a file

I am trying to setup a centralized rsyslog server on CentOS 6.5 for Cisco routers and switches. On the Cisco devices, I've set the correct date/time and enabled timestamps, logging to the server over ...
1
vote
2answers
931 views

Ubuntu 14.04. auth.log deleted

the log file auth.log has dissappeared on my ubuntu 14.04 server. Fail2ban log says that suddenly the file was gone: 2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36 2016-04-...
2
votes
1answer
2k views

How to log execution of a specific binary/script using auditd or other

I have the following situation in hand. I have one or more specific execuatble files in /usr/bin, I will call one /usr/bin/execute , and they may either be a compiled binary or a script file, such as ...
3
votes
8answers
38k views

How to track down the cause of Windows Server 2008 crashing?

I have Windows Server 2008 running under VMware. Recently, its started to crash roughly every day, with continuous 100% CPU utilization, and no response in the GUI. Is there a step-by-step ...
3
votes
2answers
3k views

systemd-logind spams in log

In /var/log/auth.log appears too many messages "Removed session" Jun 2 17:42:39 srv-1 systemd-logind[13785]: Removed session c36006. Jun 2 17:42:39 srv-1 systemd-logind[13785]: Removed session ...
0
votes
1answer
934 views

How to provision dashboards into kibana?

I am giving my developers the gift of kibana using the elasticsearch that is bundled with logstash. They will have kibana in their vagrant boxes. Goal: Install and configure kibana dashboards via ...
0
votes
1answer
3k views

PHP Warning: Missing boundary in multipart/form-data POST data in Unknown on line 0

I'm logging every error on my server into a file and time to time I'm solving the cause of them. I have several log entry with the PHP warning: [11-Jun-2017 10:49:27 Europe/Berlin] PHP Warning: ...
0
votes
0answers
150 views

log4j2 in Tomcat 8: Unexpected log rotation

I tried to fix a log rotation problem with log4j2 in a webapp running on Apache Tomcat/8.0.32 (Ubuntu) on Ubuntu 16.04.4 (see related stackoverflow question). Tomcat runs on OracleJRE 1.8.0_181. I ...
0
votes
2answers
2k views

MySQL Error Log purge / log rotate

My MySQL enterprise server has limiting disk space for logging. Error log file increasing size day by day and difficult to limit the size of error log. Can I Limit MySQL Error Log file size? Is ...
2
votes
1answer
2k views

Audit trail for all actions taken with admin privileges

PCI DSS 10.2 says, "Implement automated audit trails for all system components to reconstruct the following events:" and 10.2.2 continues, "All actions taken by any individual with root or ...
5
votes
2answers
3k views

“Index Patterns: Please specify a default index pattern” in Kibana

I'm trying to create a simple hello world for ELK and be able to see kibana reports via the internet. I've installed kibana, logstash, nginx and elastic search. Here's my /etc/logstash/conf.d/10-...
0
votes
0answers
12 views

Modified X-Forward-For header does not show up in logs

I am running a haproxy behind the aws ALB. In order to prevent logging spoofed IP addresses in the haproxy we are modifying the X-Forward-For header taking the last IP only from the list using: http-...
0
votes
0answers
35 views

Logrotate not removing the logs

I have the following logrotate script /path/to/folder/*.logs { daily rotate 30 notifempty sharedscripts copytruncate compress dateext preremove if file --mime-type "$1" ...
0
votes
1answer
2k views

JSON vs Key-Value for Splunk

Rolling out splunk I'm debating switching to JSON. Splunk supports spath now and even endorses JSON towards user friendliness (ref: http://dev.splunk.com/view/logging-best-practices/SP-CAAADP6 ) ...
1
vote
2answers
845 views

logrotate status files extremely large

Apache2 on an Ubuntu 16.04 box was showing issues on the websites it's hosting. It was at 100% capacity. Looking further with du, The majority of the ~100gb hard drive was filled by two files in /var/...
0
votes
1answer
47 views

Stackdriver logs stopped appearing in GCP Stackdriver Logging Console

Background I have a Flask server running on GCE's container-optimized image. This server prints a log for every request. Normally, I can view the logs my application prints in GCP Stackdriver Logging ...
0
votes
0answers
17 views

Firewalld Logging

Im using firewalld on my centos7 router [192.168.1.254]. Through the router im forwarding all packets @port 22 & 80 to 192.168.1.10 [another centos7 workstation]. Please advise how may I log all ...
0
votes
0answers
26 views

Logging - Apache Access log Unknown Characters Ubuntu

Hi I would like why access.log on apache looks like this? Could someone help me? at the bottom part it appears appears to be good. ^_?^H^@^[D?\^@^Ciym?\x??^K~?_?O?HeR"^33 ^[>>?RwIe^R??^...
2
votes
4answers
8k views

rsyslog relp - preventing remote logs from being written to my local /var/log

I've set up a logging server using rsyslog with relp. It works just fine as far as receiving remote logs and placing them in /var/spool/rsyslog. My problem is: most of these messages are appearing in ...
5
votes
1answer
3k views

Django with Apache and mod_wsgi: no system log unless setting Debug = True

I'm using apache web server and mod_wsgi to transfer request to django. $ apache2ctl -v Server version: Apache/2.4.10 (Raspbian) Server built: Sep 17 2016 16:40:43 I'm using this apache site to ...
-1
votes
0answers
50 views

In regards to the W3C log format for IIS what does the sc-win32-status mean?

I don't really know what this means, I did however notice from another question that if I type net helpmsg # in cmd I'll get a result. Where do these numbers and where do they come from? Are they ...
0
votes
1answer
17 views

Logwatch does not report on httpd (apache2)

Problem: I'm using Debian GNU/Linux 8 and my Logwatch does not have a "Begin httpd" section at all for my Apache pools. /usr/share/logwatch/default.conf/logfiles/http.conf is set for some custom ...
2
votes
2answers
114 views

Best practices for giving outside developer SSH access?

N00b here - I'm upgrading my website so that it isn't using a deprecated version of MySql/ PHP. I'm not comfortable enough with the code so I'm using an outside developer. Due to this being database ...
0
votes
1answer
67 views

Issue : log-rotate is not working

I am configuring log rotation one of my production server. I am having a weired issue. I have configured the log rotation for a file on daily basis. But unfortunately the rotation is not working. I ...
0
votes
1answer
3k views

Event ID 521 - Critical Logging Failure on Domain Controllers

I'm tasked with the monitoring and analysis of variious logs via our SIEM solution; LogRhythm. I noticed a few weeks back that we had large volumes of this event originating from all of our domain ...
2
votes
1answer
2k views

Logstash: Failed to flush outgoing items

First of all, I'm a total newbie to logstash. Despite the fact that I've managed to achieve some basic logging (trying to parse an apache log file without the build in COMBINEDAPACHELOG). However, I ...
4
votes
4answers
4k views

How do I secure my Asterisk server?

Our asterisk server was compromised. some calls were made to Asia countries last weekend. Thought we have improved our network configuration, we still want to determine how the intrusion was done, we ...
0
votes
1answer
35 views

Extracting responses from Microsoft DNS Server Analytical logs

Is it possible to extract the DNS responses from Microsoft DNS Server Analytical logs (Microsoft-Windows-DNS-Server/Analytical)? The logs contain a field called "PacketData" in the EventData section ...
1
vote
2answers
40 views

Getting sensible information out of Windows Update log

I'm parsing history.log from debian hosts to produce a csv with dates/packages/versions. After running a suite of tests in testing environment, I then update those packages on actual hosts. I want ...
1
vote
0answers
41 views

Using linux environment variable in rsyslog template

I'm trying to add an environment variable to my rsyslog template. I tried using 'getenv()' function without any luck, I always get an empty string in return. I'm attaching an example of my rsyslog ...
0
votes
1answer
2k views

Remotely diagnosing server 2012 boot problems with no KVM

I have a rented dedicated server that seems to have run into some issues. Unfortunately I have rented from a company who will only give hardware support leaving me in the dark. My server had been ...