Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

2851 questions
29
votes
5 answers

How do I get rsyslogd to log a server's FQDN instead of it's short hostname?

I'm trying to implement a simple centralized syslog server using stock rsyslogd (4.2.0-2ubuntu8.1) on Ubuntu 10.04 LTS. At this point I have all my client nodes sending logs to the central server, but the clients are sending log messages which…
cwjohnston
  • 556
  • 1
  • 4
  • 8
29
votes
6 answers

Turning a log file into a sort of circular buffer

Folks, is there a *nix solution which would make the log file act as a circular buffer? For example, I'd like log files to store maximum 1Gb of data and discard the older entries once the limit is reached. Is it possible at all? I believe in order…
pachanga
  • 495
  • 1
  • 6
  • 13
28
votes
3 answers

How i configure logrotate to not delete my log files after rotation?

There's a way to do this?
Guilherme
  • 751
  • 2
  • 7
  • 8
27
votes
2 answers

where can i find varnish log files? /var/log/varnish is empty

I'm trying to read log files of Varnish server in Ubuntu environment. I actually never used Varnish before. so...I cd to /var/log/varnish, but the folder is empty. it tells me that I have to configure my varnish server to save logs...is that true?
Moon
  • 2,123
  • 4
  • 24
  • 23
25
votes
3 answers

nginx logging to access.log.1 instead of access.log, logrotate failing?

I have an nginx instance that is set to log access to /var/log/nginx/access.log and errors to /var/log/nginx/errors.log, but as soon as logrotate runs each week, the file gets moves to *.log.1 and the new *.log file gets created, but nginx continues…
Ben Torell
  • 825
  • 1
  • 7
  • 11
24
votes
3 answers

What can be learned about a user from a failed SSH attempt?

What can be learned about a 'user' from a failed malicious SSH attempt? User name entered (/var/log/secure) Password entered (if configured, i.e. by using a PAM module) Source IP address (/var/log/secure) Are there any methods of extracting…
Exbi
  • 373
  • 2
  • 7
24
votes
2 answers

How to find who was logged in before beginning of wtmp

I'm trying to determine who was recently logged into a specific machine in my office. So I used last, but wtmp begins yesterday (Monday) around 14:30. I was hoping to find info stretching back to Sunday, at least. Is there anyway to get that info…
thepocketwade
  • 1,545
  • 5
  • 17
  • 27
24
votes
1 answer

Apache logs other user read permissions

We have several developers who maintain the system and I want them to easily read the log files in /var/log/httpd without needing root access. I set the read permission for 'other' users but when I run tail on the log files I get permission…
user2344668
  • 361
  • 1
  • 2
  • 5
24
votes
8 answers

How do I setup IIS to rotate logs?

I've used Apache for years and I've taken for granted that it handles log rotation for me. I've been digging through the IIS config and googling, but I can't find an option for IIS to turn on log rotation. What is the preferred way to configure IIS…
Elijah
  • 537
  • 2
  • 8
  • 17
24
votes
5 answers

How to get a linux network log?

We have a java server running in linux at a specific port that accepts persistent connections for thousands and thousands of users. Recently our clients are not able to connect with a time out error. We suspect the traffic is getting too high but…
erotsppa
  • 2,113
  • 6
  • 23
  • 24
23
votes
6 answers

How can I enable logging for requests going through mod proxy

Is there a way to log requests going through mod proxy? I need a way to debug my configuration, because I don't seem to be getting where I should be. I need the following information: headers of incoming requests what is being sent to the proxy…
Kariem
  • 541
  • 2
  • 6
  • 14
22
votes
1 answer

overriding nginx access_log directive - duplicate log entries

I'm using the default nginx package on Ubuntu 14.04 server. It is using /etc/nginx/nginx.conf as the main config, and then includes configs from /etc/nginx/conf.d/*.conf and /etc/nginx/sites-enabled/*. The default nginx config has this directive for…
Yoav Aner
  • 561
  • 2
  • 6
  • 13
21
votes
7 answers

How do I log CPU usage per process?

I have a box on Linode that's going through weird behavior. Every now and then CPU and disk I/O will shoot to 100% and the server becomes unresponsive and has to be booted. I'd like to investigate better what's going on, but I don't know how to find…
agentofuser
  • 557
  • 3
  • 6
  • 14
21
votes
9 answers

Are there any RDP activity logs? - Windows Server 2008 R2

a few users have logged into a server through RDP. I would like to monitor activity, but do not know my way round Windows Server that well. I am hoping there are logs of some kind around that I can consult. Any ideas? :)
20
votes
6 answers

Mongodb - proper way to rotate logs

Mongo docs say that I can: use -SIGUSR1 signal and get the old log renamed and current switched use logrotate from OS I want the OS's logrotate ability to zip old files and remove oldest, but see no way to tell mongod process to switch current log…
Andrey Regentov
  • 483
  • 1
  • 4
  • 11