Questions tagged [log-files]

A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

A log file is a file which is generated by a software process to record some specific details (events) about the workings of this process. Most logfiles are plain, human-readable text files, some however are using a binary format to conserve space and need specific treatment for post-processing. (Example: Unix login history in utmp/wtmp format)

A log file can be categorized into several types:

  1. Access log which records information related to the usage of the service provided by this process.
  2. Error log which records error conditions.
  3. Info/Debug log which records more detailed information as compared with other logs.
  4. Transaction log to document a chain of events, this often is required to be immutable to avoid later tampering.
  5. redo logs, containing the complete information to replay a chain of actions, often used where incomplete data transactions would lead to inconsistent data, for example in file systems or databases.

The main two goals of creating and maintaining log files are:

  1. Finding and debugging problems.
  2. Gathering usage information.

Depending on the frequence of events and the level of detail, logfiles may be growing very quickly, and usually require a strategy for managing their growth.

Depending on special reqirements, log-files may go to specialized devices to meet criteria of speed or immutability.

1103 questions
0
votes
4 answers

Can you recommend a good GUI (X, Java, web-based, or curses-like console) for syslog and other Linux logs?

I am looking for a convenient tool to view and manage my Linux (Debian, postfix, dovecot, iptables, etc) server logs. Would you, please, share your choice and experience?
Ivan
  • 3,398
  • 19
  • 50
  • 71
0
votes
2 answers

Why is apache2 not logging properly given the following logrotate.conf

access_log seems to be permanently size 0. But error_log is written to fine. Surprisingly access_log.[1-5].gz are created but only access_log.3.gz and access_log.4.gz contain non-empty logs. Ok, so here is the logrotate.conf that is also in the…
Tom Viner
  • 101
  • 2
0
votes
2 answers

how to consolidate multiple log files into one ldf file in sql2000

I'm in the process of copying databases from SQL 2000 to a 2008 instance on another server using DETACH, copy windows file to 2008 server, then finally ATTACH. I've come to a database where the LOG file is in 2 windows files: name …
0
votes
1 answer

Limiting File Types Logged by IIS (Reducing Log File Size)

Is there a way to say, for instance, don't write an entry in IIS logs for specific file types? The shear size of our logs today makes it difficult and cumbersome to filter them after the fact using LogParser and the like; we're only interested in…
Nariman
  • 229
  • 3
  • 10
0
votes
2 answers

IIS 7.5 log to: sql server vs file

I want to know if get IIS to log directly to the sql server is resource costive, and a better solution maybe generate log files, and each hour import this files to sql server. Does it VERY big cost to log to sql server each request directly? The…
stacker
  • 841
  • 3
  • 10
  • 15
0
votes
6 answers

Is my dns server being attacked? And what should I do about it?

I've been having some intermittent dns problems with a web server, where certain isp's dns servers don't have my hostnames in cache and fail to look them up. At the same time, queries to opendns for those hostnames resolve correctly. It's…
Mnebuerquo
  • 234
  • 2
  • 6
  • 15
0
votes
2 answers

tomcat6 on ubuntu fails when user set to root

I'm well aware that running tomcat6 is really bad from a security point of view - and opens the box it is running on to all kinds of security risks and attack vectors. That said: When I change the entry in the /etc/init.d/tomcat6…
Hawkeye
  • 2,699
  • 9
  • 30
  • 35
0
votes
3 answers

Server stop responding, where to look to know what happened?

I have a server that has been running for well over 5 months and suddently it stop responding. I couldn't ssh into it or anything else so I decided to reboot it and the reboot fixed it. I'm trying to figure out what happened and I'm not sure exactly…
Cerim
  • 25
  • 1
  • 3
0
votes
1 answer

Cannot read/access Apache2 access logs

I have been asked to take a look at some access logs for an Apcahe2 web server running on Ubuntu. I have been told by the administrator of the machine that my login has "admin" access yet I cannot seem to copy the access logs from Apache2 to my…
webworm
  • 604
  • 2
  • 8
  • 18
0
votes
1 answer

Problem with squid log files

I am using SARG to get a report on the squid log files, I get this result /usr/local/Sarg/bin/sarg -l /usr/local/squid/var/logs/access.log SARG: Records in file: 0, reading: 0.00% SARG: Records in file: 0, reading: 0.00% SARG: Records in file: 0,…
Gatura
  • 573
  • 3
  • 10
  • 24
0
votes
1 answer

Source of Unexplained Requests in Server Logs

I am baffled by some entries in my server logs, specifically the web-server logs. Other than normal, expected traffic, I have noticed three types of request errors (eg 404, etc.): Broken links, ie links from old, external pages that point to pages…
Synetech
  • 948
  • 1
  • 12
  • 27
0
votes
2 answers

Apache log file problem

I've recently set up an Apache 2 web server and I noticed a quite a few lines in the error and access log that start with the follow sequence (but longer). Does anyone know where this comes from? ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@…
Luke
  • 3,826
  • 8
  • 36
  • 40
0
votes
1 answer

Can Apache be configured to write to access.log or error.log with a different extension?

One of the things that I am investigating is using the dateext option for logrotate. However if I understood things correctly apache will keep writing to the files access.log and error.log. I was wondering if there was a way to have apache log to a…
Mohan Gulati
  • 211
  • 1
  • 2
  • 4
0
votes
2 answers

My linux server time and log files are not the same

Hi i have installed NTP on my linux server and i am getting my clock from a 6500 core switch, everything is working fine. When i ssh to a switch i have it all sent to a log file on the linux server, this log file does not time stamp with the same…
Martin
0
votes
1 answer

need help with logparser on iis logs

I am using logparser 2.2 and need a script that does two things: finding urls that contain a value within referer need to loop over 30 folders logparser -rpt:-1 "select count()INTO feeds.txt from u_ex100302.log where to_lowercase(cs(Referer)) like…
user36440
  • 325
  • 2
  • 9