Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

4
votes
0answers
368 views

Spamassassin logging scores

I have the Spamassassin 3.4 + Ubuntu 14 + Qmail + Clamav. All are running OK. When a SPAM is detected, it is marked as [spam] and delivered to recipients. Readind the spamd log (mail.log for me), I ...
4
votes
0answers
746 views

Consuming multiline json in fluentd

I am new to fluentd. I have applications that run in Docker containers. They are Java apps that log in JSON format. The JSON messages are usually split over multiple lines. I would like to use the ...
4
votes
0answers
249 views

Set CMTrace Font

Might be a bit of a long shot but I was wondering if anyone knew of, or could speculate on, a way to change the default font of CMTrace. It seems to use some Sans-Serif font. I'd like to change it to ...
3
votes
0answers
1k views

kubernetes kubelet logging to files and logrotate

kubelet has an option to store log files in a log-dir (https://github.com/kubernetes/kubernetes/issues/21248). I start kubelet with the options --logtostderr=false --log-dir=/var/log/kubelet (I have ...
3
votes
0answers
125 views

ssh messages polluting my console

While connected to my ubuntu 16.04 server via ssh, my console is polluted with messages like this: root@backup ~ # 2017 May 2 15:05:05 backup fatal: Unable to negotiate with XXX port 45700: no ...
3
votes
0answers
79 views

How many HTTP transactions through a connection in Haproxy

I want to know how many http transactions occur through a specific connection of Haproxy with a client (frontend). If I could associate connection (session) id with the frontend's request I would be ...
3
votes
0answers
626 views

How to view Parse Server logs in Parse Dashboard?

I'm using parse-server 2.2.14, with parse-dashboard 1.0.14. According to this merged pull request, logs can be viewed from the dashboard. But my dashboard just show "No logs in the last 30 days" ...
3
votes
0answers
597 views

IIS 8 logging stops at midnight UTC

I have one IIS 8 server where the w3logsvc dies at midnight UTC (we're Central Time, so we're UTC -6). I have to manually start the service to get it back running again. I have the logging set to use ...
3
votes
0answers
199 views

Logrotate directories (not files)

I have an application creating logfiles in a structure like this: maillog/ 2012-07-02/ production_environment-2012-07-02__23_51_50-1341265910-some name.log production_environment-2012-07-...
3
votes
0answers
756 views

Make Tomcat 7.0 flush logs to disk?

How do I get Apache Tomcat 7.0, running as a service on Windows Server 2008, to flush its logs to disk without restarting the service daemon? I did find delay on tomcat writing to logs in windows ...
2
votes
0answers
28 views

BIND logging - general vs. unmatched

The BIND9 Administrator's reference manual states that the general category is "the catch-all; many things still aren't classified into categories, and they all end up here." On the other hand, the ...
2
votes
0answers
412 views

How to prevent the client IP adress from being written to nginx error log

I can use log_format to remove the client IP from being written to the nginx access log. However, the error log always seems to include the client IP: 2018/05/18 15:43:55 [crit] 1234#1234: *1014 ...
2
votes
0answers
195 views

Log the URI's path after 'proxy_pass' directive is processed

I have a proxy_pass directive configured for some location in nginx config: location /books/ { proxy_pass http://localhost:8888/; } In the log I'd like to see the full URI my requests are proxied ...
2
votes
0answers
475 views

Apache 2.4 stopped logging

I have a VirtualHost being served on an Apache 2.4 box and recently noticed that neither the Error nor Access logs are being written to. I can't recall making any changes to the files that would have ...
2
votes
0answers
782 views

Clarifying EC2's system log following crash

We've recently had an issue with an EC2 instance that bought down our mySQL service. I've checked the system log (AWS Console: Action > Instance Settings > Get System Log) However the output isn't ...
2
votes
0answers
581 views

Forward to remote syslog in CoreOS

I want to aggregate CoreOS logs to Papertrail service, which basically provides a syslog endpoint for aggregate logging. Common advice for this setup seems to be starting a service that does ...
2
votes
0answers
583 views

How to reliably capture Linux kernel log messages in case of a system debilitating crash (BUG, panic)?

I'd like to have access to the lines/tracebacks/whatever whispered by the kernel right before dying. This has proven problematic, because all interfaces I have access to become disabled. Post-reboot, ...
2
votes
0answers
259 views

Analyzing squid3 access.log log files with a all-in-one shell script

I'm just going to write a shell script that me the essential functions such as SARG offers. Sort by URLs with most hits (Top100 in 10min out of 10k) Sum of status / error codes As well as sorting by ...
2
votes
0answers
156 views

Tomcat 7: how to log x509 cert dn with AccessLogValve

I have Tomcat7 running on RHEL6 with mutual authentication using x509 certificates for the entire container. From the user point of view in the browser, everything seems to work fine with a cert ...
2
votes
0answers
665 views

How does one separate log data sent to a remote rsyslog server?

I have messages from multiple apache2 web servers logging to a rsyslog server. I've used a template to separate each /var/log/syslog file into its own folder based off of the ip address of the server ...
2
votes
0answers
444 views

Excessive Windows Security Event Logs

I'm working on modifying our current Windows log setup and have ran across an issue I can't quite seem to find the answer to. We currently have nxlog configured on each DC to send windows event IDs ...
2
votes
0answers
348 views

fluentd modular configuration

Is there any way to setup fluentd/td-agent in a way that it's configuration will be modular? I know there is @include directive but this works only if every time I add something new I modify main td-...
2
votes
0answers
696 views

Generation of Tomcat Stdout and Stderr log files

Is there a way to catch tomcat stdout and tomcat stderr log files it to log4j or any other way so that i can keep track daily basis.These files are only generated when we restart tomcat.And i want ...
2
votes
0answers
288 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...
2
votes
0answers
107 views

Does Cisco IOS XRv support logging of TCP connection (e.g. built and/or teardown)?

I have a demo of Cisco IOS XRv and I would like to setup logging for connections. E.g. for ASA "show logging" shows log messages for every TCP connection built or teardown: Jun 11 12:29:31 10.10.10....
2
votes
0answers
325 views

Redhat 6.4 configured to log Martian packets but is not logging ll header

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf. ...
2
votes
0answers
143 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
619 views

log/dump response body

Is there any way to log response body in Apache 2? I need the exact content that will be sent to user browser. I tried mod_security audit logging, but it won't log response body for all requests. (...
2
votes
0answers
314 views

How to log total connection time in Apache

I'm currently logging "The time taken to serve the request, in microseconds" using the %D directive (as specified on https://httpd.apache.org/docs/2.4/mod/mod_log_config.html). However, this seems to ...
2
votes
0answers
379 views

Implications of unified2 logging with multiple instances of snort

I am beginning to migrate my snort logging from alert_syslog to unified2 using barnyard2 as the processor. In some cases I have multiple instances of snort running on the same system. Since I have ...
2
votes
0answers
1k views

In tomcat, how to redirect console output of the web apps to logfile?

I am running Tomcat 7 inside Netbeans in windows. Is there any way of redirecting System.out.println to log file? Right now I'm getting it on my console. Is there any way I can change the logging ...
1
vote
0answers
27 views

Using linux environment variable in rsyslog template

I'm trying to add an environment variable to my rsyslog template. I tried using 'getenv()' function without any luck, I always get an empty string in return. I'm attaching an example of my rsyslog ...
1
vote
0answers
34 views

TLS websocket proxy with deep packet inspection/traffic logging

I have a very specific scenario in which maschines (IoT) are communicating with a central server over websockets. I need to inspect the websockets traffic (wss/tls) for audit and monitoring reasons (...
1
vote
0answers
24 views

Apache CustomLog using Content-Type

Using Apache 2.4, I am trying to create a custom log file format which will only log out page views, instead of all request resources (images, css, etc). The site is built using PHP and therefore the ...
1
vote
0answers
70 views

SSHd logs in Docker container not shown by `docker logs`

When using CMD ["/usr/sbin/sshd", "-D"] in a Dockerfile, docker logs does not show the logging: cat > Dockerfile.stdout <<EOF FROM alpine:latest RUN apk add --no-cache openssh-server \ ...
1
vote
0answers
38 views

Disable logging of requests from certain IPs apache2

I wan't to stop logging accesses from two of my local IPs, this is what I added to apache2.conf: ... <VirtualHost *:80> SetEnvIf Remote_Addr "192.168.0.1" dontlog SetEnvIf Remote_Addr "192....
1
vote
0answers
28 views

Convert absolute time in log lines to relative intervals

Given a normal text-format line-oriented log file with timestamps in absolute form, is there any convenient tool that converts them to relative time-intervals? e.g. 2019-01-11 19:31:35 UTC LOG: ...
1
vote
0answers
74 views

Details Log on IIS 8.5

On my IIS log I found errors that occur randomly when a client calls my WCF service. The error log is this: #Software: Microsoft Internet Information Services 8.5 #Version: 1.0 #Date: 2018-12-13 10:...
1
vote
0answers
30 views

Log loadballancing using HAproxy

I'm trying to loadballance logs to a pool of rsyslog server using HAproxy but I'm failing to find a suitable solution when the source is a single client. HAproxy opens a session to one of the backend ...
1
vote
0answers
71 views

Journalctl seems to be ignoring since and until

I'm trying to get the logs of a problem that's been happening for over a week by this point. I'm trying to use journalctl to print the logs but it doesn't seem to give me anything more or less than ...
1
vote
0answers
35 views

SSD errors under NetApp E-Series 5424

We're having some weird issues with our Storage (netapp e-series 5425) and a bunch of SSDs. Technically they work fine, we can do all operations on it, whatever runs on it runs fine, but we keep ...
1
vote
0answers
90 views

Logging of MySQL Queries and Forwarding to Syslog/Event log

I was to able to enable Error log, General Query log, Slow Query Log and Binary Log and was able to forward the logs to Syslog. I have few questions about logging. 1) The error log is automatically ...
1
vote
0answers
333 views

How to get logging to work in PureFTPd in an Alpine Docker container?

I am building upon gists/pure-ftpd to create FTP server instances in a Docker container. Here is my server start command, which I am hacking on: # Args explained at http://debianhelp.co.uk/pureftp....
1
vote
0answers
38 views

AWS: identifying Access keys usage origin

In the process of trying to achieve a Well Architected Framework, one of the relevant issues to remediate in the Security pillar is the one related to the following question: "How are you managing ...
1
vote
0answers
87 views

Avoiding php-fpm logs being split by newline

We have a PHP server that is running in a container. The logging for PHP-FPM is done by writing to stderr and then kubernetes is forwarding those messages to the appropriate place. We have some error ...
1
vote
0answers
168 views

redundant systemd-journal-remote for systemd-journal-upload instances

I'm using systemd-journal-upload on serveral nodes to forward their journals to a single systemd-journal-remote sink, loghost01: /var/log/journal ├── <foo-bar> │   ├── system.journal │   └── ...
1
vote
0answers
58 views

Glassfish - log System.err to second location or do something after logrotate

we have a GF4 server that produces a lot of logs. Currently it is setup like this: com.sun.enterprise.server.logging.GFFileHandler.excludeFields <> com.sun.enterprise.server.logging....
1
vote
0answers
44 views

Server 2012 User logins log

As part of a technical team at an institution I am needing a way to view users logging onto computers in realtime What I would like to know is if I can have an auto updating program/script that will ...
1
vote
0answers
51 views

How to use commandline tools (psexec, netuse) that require credentials without exposing them plain text in the logs?

First of all, here are my limitations: I'm running PSExec and Netuse from a batch file. I need to run as a different user than the currently logged in one. We have a strict permission scheme where ...
1
vote
0answers
46 views

NUL in Apache2 error's log

On my server is Debian 9 with Apache2, and quite often apache2 just stop working and I have to log into SSH and manually start it. So I looked into Apache2 error's log and I found lot of NULs, like ...