Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [logging]

Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.

2851 questions
1
vote
1 answer

Apache logging and range requests

If an Apache server receives a single HTTP request with multiple ranges requested in the header, in the access log, does it log one entry per range requested, or just one entry like normal? The reason I ask is because we've been seeing a large…
Mark
  • 165
  • 1
  • 6
1
vote
2 answers

Cisco ASA 8.2 - 106015 (Deny) and 106100 (Permit) Logs for the Same Packet

I'm seeing traffic from numerous internal endpoints where a RST or FIN/ACK is sent by the endpoint to a host on the Internet. These connections are related with a transparent proxy that is not handling these properly. Instead of dealing with them,…
Sgt B
  • 123
  • 1
  • 5
1
vote
2 answers

Application log storing

i'm developing a web application with a lot of event to track in it. I'll install the application in ca. 10 web server and I need to have the tracking event saved in a db in order to be analyzed. I'll receive 100K events/minutes = 144 millions…
andrea
1
vote
1 answer

LAMP does not save any php logs

I have a brand new vps server with Ubuntu 14.04, i686, Apache 2.4.7, php 5.5.9 here's my virtual host: ServerName example.com DocumentRoot "/home/drake/www/" DirectoryIndex index.php ErrorDocument 404 /404.html ErrorLog…
Timmy
  • 109
  • 3
1
vote
2 answers

How do I suppress "Yellow Text" from Exchange Set-Mailbox, when -WarningAction doesn't seem to work?

I am doing a bulk import, setting or updating attribute6 on 1,000 users in AD. I'm using the following Exchange commandlet to accomplish this: [PS] C:\>set-mailbox -Identity user@company.com -CustomAttribute6 knruiz@nfp.com …
makerofthings7
  • 8,911
  • 34
  • 121
  • 197
1
vote
1 answer

Access log of nginx: why are foreign URLs logged?

My access log is full of such entries: 178.207.40.219 - - [03/Apr/2014:17:34:37 +0200] "GET http://win.mail.ru/cgi-bin/auth?Login=nutyck@bk.ru&Domain=mail.ru&Password=241716 HTTP/1.1" 403 168 "-" "Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.6)…
robsch
  • 147
  • 9
1
vote
1 answer

How do I configure Linux to log when ulimits are hit?

For example, say I'm hitting nproc. I would expect a log message to appear /var/log/messages or similar, but it looks like that needs to be configured. How do I do that? I can't find anything relevant on google so far. OS is CentOS 6.4. Thanks!
cat pants
  • 2,273
  • 10
  • 35
  • 46
1
vote
1 answer

fail2ban bad bots apache access log regex

Trying to block some bad bots using fail2ban reading Apache access log and stuck setting up correct regex. The line I want to match in the access log is: 5.10.83.65 - - [18/Mar/2014:09:06:38 +0400] "GET…
Vlad
  • 61
  • 2
  • 8
1
vote
0 answers

"\xc2:\xc2" in HTTP proxy GET request

Recently I came across lines like these in an HTTP server's access_log (I've changed the real image to "someimage.jpg" - you can browse the images folder directly since directory listing is allowed, in case you want to try with a real image): GET…
0x80
  • 121
  • 4
1
vote
2 answers

Rolling log file without losing any log event

I have a 8GB file called php.log with a running php script logging into it. It is important for me that I log every event, and I want to compress it and empty the current file without stopping the web server. If I run: mv php.log…
Mohammad Jolani
  • 343
  • 1
  • 2
  • 8
1
vote
1 answer

Rsyslog: stopping after 1047 file descriptors opened on a centralized log server using TCP

We have heroku drains dumping to 1 log server. There are a lot of instances (~100) sending their logs to this server using TCP. The Server filters the logs based on hostname and puts them into a directory named with the hostname. Everything works…
pmilb
  • 61
  • 1
  • 6
1
vote
1 answer

Logcheck alternative for central syslog server

I have to setup some open source log monitoring on a centralized syslog server. A lot of machines (windows, linux) and some routers and switches sending their logs there. Many years ago when I had to do similar setup I used logcheck which is the…
IvanJosef
  • 11
  • 2
1
vote
3 answers

Is this a security breach?

I have a server running Ubuntu 10.04LTS (I know it is too old), which over the last couple of weeks has on occasion been unresponsive to network traffic, and needed a hard reset first thing in the morning (9am when the office opens). I have looked…
Gavin
  • 173
  • 1
  • 10
1
vote
6 answers

Analyzing Server Logs

I currently have a medium-sized website, that probably has a few security flaws. That's probably normal, I think. You can't catch everything. The problem is, I also have a couple script kiddies whom think its fun to try day and night to attempt to…
waiwai933
  • 166
  • 1
  • 2
  • 15
1
vote
1 answer

How to configure remote IP address audit logging for VPN clients on a Cisco 2801

We have a Cisco 2801 that also acts as a VPN Server for Cisco VPN Client. We would like to configure IP address logging so that each time a user connects using VPN we would like to log his IP Address. So far there were only 3 of us. However as time…
Spirit
  • 1,154
  • 8
  • 25
  • 45
1 2 3
…
99 100