Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

Filter by
Sorted by
Tagged with
0 votes
1 answer
29 views

How to log PHP file name in Apache log?

I'm using Apache 2 + PHP 8, and have PHP warnings and errors written in Apache error log files. Here is an example of logs being written: [Wed Aug 10 08:15:54.502158 2022] [php:warn] [pid 15437] [...
user avatar
0 votes
0 answers
7 views

Losing Audit Logs When Tracing a Container

As you know, Linux Audit is not installed on Ubuntu Focal by default. I installed it, and my goal is to trace what containers do. I have this seccomp profile: { "defaultAction": &...
user avatar
  • 1
0 votes
0 answers
8 views

AWS RDS general_logs migration fail

I have a MySQL database deployed in AWS RDS on a t3.small instance. Last week Friday we had a deployment of some new functionality and something extremely strange happened that cleared many of the ...
user avatar
  • 131
0 votes
0 answers
8 views

Debugging reads and writes of an NFS (Amazon EFS)

I have a Kirby CMS website (PHP server behind nginx reverse proxy) running in Amazon EFS. The most recent update of the site lead to 502 Bad Gateway and 504 Gateway Timeout errors. Looking at the ...
user avatar
  • 103
0 votes
0 answers
9 views

to send log from /opt/filename/logs/... to the syslog server which works on Windows (Kiwi app)

I am using linux redhat 8 which is connected to FND, I need to log my messages on syslog server which is working on Windows and I installed Kiwi to capture the logs. the logs are not in the /var/logs ...
user avatar
0 votes
1 answer
22 views

Samba Server Doesn't logging

I'm trying to logging with Windows in a Samba Server, but it does not connect. When I look in the logs it gives me the message [2022/07/20 08:35:19.749737, 0] ../lib/param/loadparm.c:1844(...
user avatar
0 votes
0 answers
13 views

Replicating Loki Logs to a Central Instance

I have an embedded device, running (among other things) an InfluxDB and a Loki instance. This device is on the move: usually it is on its own without internet connectivity, but occasionally it has ...
user avatar
  • 111
0 votes
0 answers
21 views

Repository of regular expressions for logs

Does a public repository of regular expressions exist for parsing out the dynamic fields of common logs on Linux machines? SSH logins, kernel faults, etc.
user avatar
  • 1
0 votes
0 answers
25 views

Understanding slow queries from mysqldumpslow

I'm maintaining a system which sporadically (no exact time) but only at night causes the entire server to crash for a few seconds and the users seeing "Error Connection Refused" until the ...
user avatar
0 votes
0 answers
15 views

How to find that which docker container having weird traffic?

I have a VPS that hosts only docker containers and proxy manager. Recently I received an alert from my service provider and they told me that my VPS is doing password brutality to some platforms (e.g. ...
user avatar
  • 1
0 votes
0 answers
41 views

Can run daily logrotate without cron?

On my docker, i use amazonlinux:2 at this default enviroment not install cron. I want to use logrotate for rotating log of application every daily. Can Logrotate work automatic without cron? This file ...
user avatar
0 votes
0 answers
25 views

rsyslog: suppress duplicate messages

Background A stateless application starts, runs, and stops every 1 second. If the application encounters an error, that error is logged. rsyslogd 8.1901.0 (aka 2019.01) Problem When the error occurs,...
user avatar
0 votes
2 answers
25 views

How do you limit Exceptions loggings in production

First, please note this might be a JavaScript question, on Node or on the browser, or a Ruby question, whether logging is in files or to the database, etcetera. This is why I'm asking in serverfault; ...
user avatar
  • 101
0 votes
0 answers
48 views

how to log the port details in nginx access-log?

I am maintaining nginx as the load balancer for the servers. Now I am maintaining the access-logs, I need the details of the port of which I am receiving the request from the external servers. For ...
user avatar
0 votes
0 answers
45 views

How to analyse intrusion on my debian server [duplicate]

I ve run a server since a few days and I have now 3 docker containers appearing in my docker ps -a that i ve never run or created : CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES b44143529951 ...
user avatar
2 votes
1 answer
55 views

Ansible dual log format

On Ansible config I can set if output log should be human-readable or JSON. Human readable format is displayed task-by-task as it runs and JSON only after playing ends. It is possible to output to ...
user avatar
  • 31
0 votes
1 answer
25 views

Using Windows Event Logs versus using a text file

I'm porting a Unix server application that writes logs to text file, typically generating about 15MB of logs per day; and the log file is rotated daily by a cron job. The porting is to be a Windows ...
user avatar
  • 101
0 votes
0 answers
74 views

systemd StandardOutput to a file _and_ to the journal?

I am regularly doing a long running (~5 day) data processing programme. I'm using Ubuntu and running the command with a systemd transient task via systemd-run --unit data_import /path/to/my-script.sh. ...
user avatar
  • 30.1k
0 votes
0 answers
24 views

How can I measure events per second (EPS) for logs going to a static location (s3 bucket)?

I'm trying to measure the rate that cloudtrail log events are writing to an S3 bucket. Is that possible? I know I can check general log volume in terms of size (bytes) but I specifically want to ...
user avatar
  • 11.5k
1 vote
3 answers
83 views

Google Kubernetes Engine - cannot see logs containing pod's output

In freshly installed cluster (Kubernetes version: v1.22.8-gke.201) I have the following test deployment: apiVersion: apps/v1 kind: Deployment metadata: name: busybox labels: app: busybox spec: ...
user avatar
0 votes
0 answers
51 views

How to read and decode fio --bandwidth-log?

I'm Looking for assistance with reading and decoding fio --bandwidth-log. I've run the below command and the output includes a few columns as listed below, how to read and decode each column? fio --...
user avatar
0 votes
0 answers
70 views

How to disable "not found or unable to stat" logging?

The error log of apache2 (with php7.4 enabled) has many entries from script kiddies scanning for vulnerabilities. Is there a setting to prevent this from being logged, while still logging other errors?...
user avatar
  • 341
0 votes
1 answer
23 views

How can I get systemd to grab service logs from a docker image?

So, as the title suggests, I have a containerized service running in docker, and I have a systemd service unit to manage said service automatically. Alongside that, I would like to have the logs for ...
user avatar
  • 1
0 votes
1 answer
521 views

How to configure rsyslog to send multiple logs to a remote server and save them as individual files?

I have some log files inside a directory called log ls -l /var/log/ org1_app.log org2_app.log org1_perf.log org2_perf.log ... Now I set up an rsyslog client on the host server. Here is the ...
user avatar
0 votes
0 answers
24 views

How to change mail.log save configurations to make gzips for one month?

I want to change the postfix or system configuration to have all the information of each month saved in mail.log, mail.err, and mail.info. The system or postfix make new empty files after reaching ...
user avatar
  • 15
0 votes
0 answers
25 views

Variable expansion in Apache2 log file request based

I'd like to have custom log files for every user accessing a virtual host. The user name is present in environment-variable "SSL_CLIENT_S_DN_CN" (coming from client certificate ...
user avatar
0 votes
1 answer
55 views

Google Cloud Logging, streaming logs constantly stops after a few seconds

I'm looking at the Logs Explorer in the Google Cloud Logging console. I click "Stream Logs" in the top right and the panel below responds.. but then between ~4-18 seconds later (I tested ...
user avatar
2 votes
1 answer
138 views

Different postfix logfile format when logging to separate file (maillog_file)

In order to separate the mail logs from the general system logs, I added this line to /etc/postfix/main.cf maillog_file = /var/log/postfix.log As expected, a file /var/log/postfix.log is created, and ...
user avatar
  • 860
0 votes
0 answers
26 views

How can I log the UID in UFW log file permanently?

I have here a debian 10 with installed UFW. I want to know the user or uid of the processes of the connections which are logged by UFW. To log the UID I have add --log-uid to the log rules in /etc/ufw/...
user avatar
  • 929
0 votes
1 answer
188 views

Mysql constantly writing to binlog, rapidly using up disk space

My Ubuntu server started running a high amount of IO operations. The server has a few WordPress websites on it, but they get at most a few dozen views per day. In a couple of days 30GB of disk space ...
user avatar
  • 103
0 votes
0 answers
58 views

Command logging for chroot ssh users

I have a ubuntu server that allows users access via ssh. When they log in they are contained to their chroot directory. I'm looking for a way to log commands used by the users. I've tried using snoopy ...
user avatar
0 votes
1 answer
34 views

Need help configuring SOF-ELK Sans to parse IIS W3C logs

How can I get the SOF-ELK VM to inject the IIS logs like the httpd logs. Here are my filebeats yml configs: /etc/filebeat/filebeat.yml filebeat.config.inputs: enabled: true path: /usr/local/sof-...
user avatar
0 votes
0 answers
16 views

How to set up a server to allow the root user to track down historical outgoing requests?

I woke up this morning and found an unexpected outgoing spike in traffic from my virtual server. What commands/settings should I have been using to allow myself to track down the who/what initiated ...
user avatar
  • 101
0 votes
1 answer
55 views

rsyslog - how to tag and apply ruleset by line contents?

I am cleaning up and standardizing our log handling, adding fluentd and ELK. This part is working fine, since nginx is logging to its own file: input(type="imfile" tag="app.nginx" ...
user avatar
0 votes
1 answer
64 views

Why is the FascistLogging ssh logging mode named that?

The docs describe Fascist Logging mode quite well, so I understand what it does. Basically it is a variant of debug logging enabled with FascistLogging yes But why is it named that? I'm sure the ...
user avatar
  • 133
0 votes
1 answer
197 views

Aggregate multiple log files in a directory

I have k3s single node cluster running on a machine. I do not have any logging infrastructure set up yet and I'd leave this as a future learning experience for now. On that k3s I run some cron jobs ...
user avatar
  • 146
0 votes
0 answers
29 views

Rspamd log entries halt every 5 mintues

I'm not sure this problem is specific to rspamd, but I'm finding it interesting. Every five minutes, 6-7 seconds after the five minute mark, log entries halt for the service. For example, it's 19:57:...
user avatar
0 votes
0 answers
63 views

Exclude Specific Event from writing to Windows Event Log

Is it possible to exclude a specific Event ID from being written to the Windows Event Log if the process name in the log is a specific predefined process? If it is possible how do I do this? There is ...
user avatar
0 votes
1 answer
168 views

Mysql database often stops and won't restart

Server: Linode Dedicated 4G Ubuntu 18.04, Webmin + Virtualmin Every now and then, mysql server stops and fails on restarting. Here is the logs I was able to find: Apr 11 20:54:57 bamboo kernel: [ 2082....
user avatar
  • 199
0 votes
1 answer
197 views

Set INFO/ERROR priority for messages logged to journal via stdout and stderr?

We have many production apps (first and third-party) that leave logging up to the process that runs the app and just log to stdout for INFO and stderr for ERROR logs (ie only 2 log priorities: INFO|...
user avatar
  • 551
0 votes
1 answer
26 views

Drop-down menu for "Field name" does not show log_struct() logged jsonPayload in GCP LBM menu "Create logs metric" though logs in the Logs Explorer

I need LBMs on Google Cloud Platform of metric type "Distribution" to make time series charts with values like counts or duration for many labels in one go. Example: for 10 different steps ...
user avatar
0 votes
1 answer
97 views

How to register Ansible actions in Windows Event Log?

Ansible: 2.9 Windows: W2k16 Server I'm searching for a method to register (log) Ansible actions in remote Windows host. For example, when I work with win_command module for echo test command, I can't ...
user avatar
  • 13
0 votes
0 answers
14 views

Ubuntu Server Error

I've been getting the following error for about a month. truncate: cannot open '/var/log/modsec_audit.log' for writing: Operation not permitted https://support.plesk.com/hc/en-us/articles/115003182625-...
user avatar
0 votes
0 answers
164 views

Nftables logging with ulogd

Recently I started looking into nftables since it's going to be iptables successor. While doing so I came across some logging difficulties as maintaing separate log files for different services, and ...
user avatar
0 votes
0 answers
19 views

Apache httpd log url of outgoing redirects

Is it possible with Apache Httpd to log all urls for outgoing http redirects? This could help with http type open redirect vulnerability.
user avatar
  • 505
0 votes
1 answer
161 views

Why some companies like cisco follow different syslog messaging format rather than rfc 3164 (BSD syslog) and rfc 5424 (IETF syslog)?

According to my understanding the popular syslog formats are: RFC 3124 (BSD syslog): Format: < priority >timestamp hostname application: message Example: <133>Feb 25 14:09:07 webserver ...
user avatar
  • 5
0 votes
0 answers
19 views

Log Event ID to display time of first boot on a Windows Machine?

Say I factory reset a machine, or just installed Windows on it. Is there a way to use Get-WinEventLog to find a log message to indicate this is the first time since the installation of the OS that the ...
user avatar
  • 4,787
0 votes
1 answer
346 views

rsyslog change timestamp format for specifix filter

I wish to change my rsyslog timestamp format to RFC-3339 of specific log file (msg). I have the following file /etc/rsyslog.d/10-zn.conf with the following content: :msg, contains, "my_prefix&...
user avatar
1 vote
1 answer
500 views

How to make Apache stop logging AH10244 [core:error] for 400 Bad Requests?

How do you make Apache (2.4.52) stop logging AH10244 [core:error]? [Sun Mar 13 05:23:47.884213 2022] [core:error] [pid 558:tid 140262206592768] [client 45.146.165.37:51872] AH10244: invalid URI path (/...
user avatar
  • 1,376
0 votes
0 answers
137 views

firewalld: outgoing NTP connection will be logged as blocked, but isn't blocked

I have configure firewalld on CentOS7 so it blockes all outgoing connections. Only the needed connections are white listed by adding some rules. Also I have add rules to enable logging of blocked ...
user avatar
  • 929

1
2 3 4 5
56