Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

2851 questions
16
votes
4 answers

All Debian boot messages

How can the messages that scroll by when booting a Debian system be reviewed later? In other words, how can I review absolutely all of them conveniently? That's the important point to the question; merely a subset of them is insufficient. Some boot…
MarkDBlackwell
  • 341
  • 1
  • 2
  • 10
16
votes
2 answers

How can I rotate many log files into a different subdirectory per rotation?

I have a directory with many log files, all of which I would like to rotate daily. For organizational purposes I would like to be able to move the rotated logs into a different directory (or subdirectory) named by date, keeping the last week of…
Dave Forgac
  • 3,546
  • 7
  • 37
  • 48
16
votes
1 answer

How to list current sshfs mounts to server?

If someone logs into a server via ssh for shell usage, a quick use of last|w|who can be used to show the logged in user. If someone mounts a directory on the same server via sshfs from another computer last|w|who do not show a connection. Is there a…
M. Smith
  • 163
  • 1
  • 1
  • 4
16
votes
3 answers

logrotate does not compress /var/log/messages

Over time I noticed some logs in /var/log such as auth, kern and messages were getting huge. I made logrotate entries for them: $ cat /etc/logrotate.d/auth.log /var/log/kern.log { rotate 5 daily } $ cat /etc/logrotate.d/kern.log…
Mike Mazur
  • 6,133
  • 2
  • 20
  • 13
15
votes
2 answers

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { 'require_debug_false': { '()':…
Ram Rachum
  • 5,231
  • 7
  • 34
  • 46
15
votes
5 answers

How to clear Windows event logs using command line?

Normally I can open the Computer Management console, go to the Event Viewer snap-in, open the Windows Logs folder, right-click on Application/Security/Setup/System subfolder, choose Clear Log and confirm by pressing the Clear or Save and Clear…
Ivan
  • 3,398
  • 19
  • 50
  • 71
15
votes
2 answers

Getting login year data with the 'last' command on linux

On Solaris, there the command 'fwtmp' provide the year information from the wtmp logs. For example: host # /usr/lib/acct/fwtmp < /var/adm/wtmpx > tmp_wtmpx_file host # head -1 tmp_wtmpx_file user123 sshd 1258 7 0000 0000 1226072918 230489 0 29…
Andrew Case
  • 3,489
  • 3
  • 23
  • 39
14
votes
2 answers

Where & how can I see IIS7 log entries for a specific web site?

All IIS7 is telling me is a folder (i.e. C:\inetpub\logs\LogFiles) which contains a couple of subfolders. How can I tell which subfolder/file I should look at? What is the logic behind this folder/file structure? BTW. A side question: Does MS…
thoughtcriminal
  • 345
  • 2
  • 4
  • 8
14
votes
1 answer

Remove UFW Block from kern.log and sys.log

Using Nginx, Wordpress and Ubuntu 16. I am constantly bombarded with these messages in kern.log , syslog and ufw.log Nov 28 21:02:28 kernel: [246817.450026] [UFW BLOCK] IN=eth0 OUT= MAC=xx.xx SRC=122.3.133.77 DST=xx.xx LEN=60 TOS=0x00 PREC=0x00…
JoaMika
  • 499
  • 2
  • 9
  • 21
14
votes
2 answers

Change systemd unit tag send to journalctl/syslog

Is it possible to change what tag systemd managed service uses for logging? For example, my custom service report-daemon.service defined as # ... [Service] ExecStart=/usr/bin/php # ... # ... shows up as php instead of report-daemon (it seems to…
Mikulas Dite
  • 328
  • 1
  • 3
  • 12
14
votes
2 answers

Timzone incorrect for log files only?

I have a small server running centos 6.4 and it is working quite nicely for some time. One thing that still bugs me is that the time in my log files is different then the time the 'date' command displays. For example: date Thu May 9 13:39:04 BST…
T. Akhayo
  • 241
  • 1
  • 2
  • 3
14
votes
5 answers

/var/log/auth.log not logging failed ssh attempts

I'm trying to go failed (either incorrect username, password, or both) on my server. I changed /etc/ssh/sshd_config from # Logging SyslogFacility AUTH LogLevel INFO to # Logging SyslogFacility AUTH LogLevel VERBOSE and have since tried multiple…
edev.io
  • 251
  • 1
  • 2
  • 4
14
votes
8 answers

Linux monitor logs and email alerts?

I have a server with a faulty power button that likes to reboot itself. Usually there are warning signs, like the acpid log file in /var/log starts spamming garbage for about 10hrs or so. Is there an easy way I can have something monitor the acpid…
Physikal
  • 570
  • 2
  • 9
  • 22
14
votes
3 answers

Where is "/var/log/messages" on mac-osx?

When you read the man pages on Mac OS X, there are references to /var/log/messages, but if you look for the file, it doesn't exist: $ ls -l /var/log/messages ls: /var/log/messages: No such file or directory
benc
  • 683
  • 1
  • 5
  • 13
14
votes
4 answers

Log transport and aggregation at scale

How're you analysing log files from UNIX/Linux machines? We run several hundred servers which all generate their own log files, either directly or through syslog. I'm looking for a decent solution to aggregate these and pick out important events.…
markdrayton
  • 2,449
  • 1
  • 20
  • 24
1 2 3
…
99 100