Questions tagged [log-files]

A log file is a file, often in clear text, which is generated by a software process to record some specific details about the workings of this process.

A log file is a file which is generated by a software process to record some specific details (events) about the workings of this process. Most logfiles are plain, human-readable text files, some however are using a binary format to conserve space and need specific treatment for post-processing. (Example: Unix login history in utmp/wtmp format)

A log file can be categorized into several types:

  1. Access log which records information related to the usage of the service provided by this process.
  2. Error log which records error conditions.
  3. Info/Debug log which records more detailed information as compared with other logs.
  4. Transaction log to document a chain of events, this often is required to be immutable to avoid later tampering.
  5. redo logs, containing the complete information to replay a chain of actions, often used where incomplete data transactions would lead to inconsistent data, for example in file systems or databases.

The main two goals of creating and maintaining log files are:

  1. Finding and debugging problems.
  2. Gathering usage information.

Depending on the frequence of events and the level of detail, logfiles may be growing very quickly, and usually require a strategy for managing their growth.

Depending on special reqirements, log-files may go to specialized devices to meet criteria of speed or immutability.

1103 questions
0
votes
1 answer

Notifying an administrator when mail-server wasn't able to upload logs to ftp-server - if condition is failing

I am currently working on a solution, that would notify me whenever my mail-server isn't able to transfer files to my ftp-server. (Right now my logs get rotated once per night and immediately uploaded to a separate ftp-server) The current config is…
Moritz
  • 65
  • 9
0
votes
1 answer

OPTIONS method gets 200 status instead of 301 in IIS10 logs

I'm trying to learn why OPTIONS method requests (presumably CORS preflight requests) are logged as 200 status while all GET method requests are logged as the expected 301 (moved permanently). The only thing being returned at that address is a…
Merennulli
  • 23
  • 5
0
votes
1 answer

Using fail2ban to scan for SSH Accepted Connections and write the username to auth.log

I have a small server that authenticate users as root using their ssh-keys stored in authorized_keys file. I also run fail2ban. I made a convention to have a nickname written after the public_key of each user in the authorized_keys file. I would…
0
votes
0 answers

Split logging on rsyslogd

My goal is to send all logs to one source remote and still log local but then send all the AuditD logs to its own source on port 20002. But for some reason, my auditd logs are still ending up with my syslogs going to port…
Jason
  • 3,931
  • 19
  • 66
  • 107
0
votes
0 answers

Forwarding log of a specific cPanel user from rsyslog.conf to an IP address using TCP

Server is on CloudLinux, cPanel, LiteSpeed, imunify and CSF as firewall. i have multiple domains hosted on my server. I only want to forward one user (all) logs to an specific IP address. Using this code *.*@@:514 it forward all logs to…
0
votes
1 answer

Postfix cleanup logs not showing all mail ids in Cc header

my main.cf file contains line_length_limit=4000 append_dot_mydomain = no #delay_warning_time = 4h readme_directory = no compatibility_level = 2 transport_maps =…
Shahid
  • 1
  • 1
0
votes
2 answers

apache remove wget for better security

Im no expert at IT or apache but I have used linux for years. Ive done my best to harden/secure my server online which I use for a mobile app which needs to serve up its content etc. Ive noticed some attempts at hacking my Apache 2.4.57 server…
Tim
  • 203
  • 1
  • 9
0
votes
1 answer

vnc log using up all hard drive space on linux?

Got a really weird problem. Im on centos/linux using VNC. I am running a mysql update thats pretty big, but not more than a few gig. I restarted mysql server while doing the db upload because i realised i had made a mistake and needed to start…
Ke.
  • 241
  • 4
  • 13
0
votes
0 answers

How to restart a windows service when a log file has not been modified for a period of time?

I have a windows service and it's running a bit problematic. Sometimes it crashes or sometimes connection to the server is lost but it does nothing for it. Therefore, I have to check the logs of the service (log names change every day, like the date…
oktay
  • 11
0
votes
0 answers

Trying to understand these apache log lines : 200 response followed by a 404 error for the same file

Looking at some logs from our apache server (2.4 on unbuntu 18.04) for one of our clients, and there are some lines that caught my eye and that I don't understand at all. I've been trying to explain what's going on but I'm having trouble…
0
votes
0 answers

pt-query-digest on large slowlog files runs slow - only singlethread

I have large slowlogfiles generated by percona 5.7 packed by zstd. Its for test, logging all queries, query time is set to 0s I need it process quickly than in 12 hrs :) The pt-query-digest is probably only singlethread app in default setting and in…
0
votes
0 answers

Is it safe to delete folders/files under run/log/journal (not var/log/journal)?

I'm running CentOS in EC2 and I saw this post but my path is run/log/journal and not var/log/journal. And there're two folders under journal - e76430a3b6eb....d3d1dc73 and b30d0f2110ac....3ce88f So, it is safe to delete the files/folders under my…
xesoh43966
  • 33
  • 4
0
votes
0 answers

favicon.ico in referer field in access.log

There is this line in my nginx access.log: 54.201.239.190 - - [18/Dec/2022:22:34:56 +0100] "GET / HTTP/1.1" 200 64 "http://example.com/favicon.ico" "Mozilla/5.0 (X11; Linux x86_64) ..." Simple question: Can anybody think of a way that a…
archygriswald
  • 143
  • 1
  • 11
0
votes
1 answer

Import past log files into Sentry

We're exploring sentry.io Is it possible to import historical logs into Sentry? We're also looking at Prometheus and Grafana, and it looks like general SQL queries work for them, but it seems to me that I'd want to review error logs in the same…
J. Gwinner
  • 141
  • 1
  • 7
0
votes
0 answers

why does my slapd.log file isn't created?

I'm setting up an ldap server to log the user in my association. My client connect using sssd and I would like to enable the logs on my server side. I followed this article bug my /var/log/slapd.log file don't want to appear even after multiple…
lolozen
  • 101
  • 2