Recording activity on the system (or of a particular program) for later reporting and analysis. Logins, logouts, web server page requests, etc might all be logged.
Questions tagged [logging]
2851 questions
1
vote
1 answer
Troubleshooting NFS authentication problems
I am trying to mount a krb5p NFS export. For this I have followed these instructions.
Line in /etc/exports:
/home/users 192.168.1.0/24(rw,sec=krb5p,no_subtree_check,nohide,async,anonuid=65534,anongid=65534)
When attempting the mount on the…
d_inevitable
- 209
- 1
- 7
- 19
1
vote
1 answer
Add logging to HTTP server on runtime
Sometimes we have an HTTP server running where you can see that it starts to act out. Without restarting it I want to start to log all HTTP requests.
Are there any tools that allows you to add some kind of logging to an HTTP server, while the server…
freeall
- 194
- 1
- 9
1
vote
1 answer
client 157.56.229.87 attempt to invoke directory as script: /usr/lib/cgi-bin/
Ok, so i frequently check my logs and see an array of errors logs from people "scoping the joint" but today i noticed a new one:
[client 157.56.229.87] attempt to invoke directory as script: /usr/lib/cgi-bin/
This IP range had actually caused this…
John
- 887
- 4
- 15
- 25
1
vote
1 answer
View when IP Address Was Blocked in IIS
We had an issue recently where our server started throwing 500 errors because an IP address was blocked that had already been blocked elsewhere. It -appears- that the IP was blocked on individual sites before, and then was added to the server. I…
Codeacula
- 113
- 5
1
vote
2 answers
Add causing php-script to mysql-slow.log
If you enable the line
log_slow_queries = /var/log/mysql/mysql-slow.log
in
/etc/my.cnf or /etc/mysql/my.cnf
then that will log all queries, that take longer than the setting in long_query_time.
On a server with many websites hosted you'll get…
rubo77
- 2,469
- 4
- 34
- 66
1
vote
1 answer
Parse Apache logfile and ban IPs
My server is under attack, it is flooded with request with the following pattern:
Thousands of IPs
Each IP request the same page "GET / HTTP/1.1" with the same referrer 3-5 times per second (same timestamp).
So what I would need is a small shell…
Jmaxor
- 13
- 5
1
vote
1 answer
GoAccess analytics and HTTP Referer
This is a high-level question regarding using goaccess as a tool for website analytics. I have it set up on an nginx server and parsing the logs just fine, but it seems that many requests to my own site have no Referer in the HTTP header. Is there a…
Micah
- 11
- 2
1
vote
1 answer
access.log awk command to view bandwidth out per virtualhost
My access log lists multiple domains.
What awk command could I use to view each domain's bandwidth individually?
It would also be nice to specify a date range.
Ryan Koehler
- 113
- 2
1
vote
1 answer
How to log a request to apache access log if it's cached by Varnish
I have a service based on parsing apache access logs, so I need to log there even when Vanish is turned on.
No I just simply tell Varnish to do not cache specific urls:
if (req.url ~ "(foo|bar)")
return(pass);
}
But it's heavy on resources and…
Justinas Lelys
- 133
- 7
1
vote
2 answers
Rsyslog: Difference between logging to a UNIX domain socket or an INET socket (UDP)
I am observing the following behaviour when logging to syslog from an external application: if I send a well-formed syslog message to a UDP socket, rsyslog correctly parses it, however if the very same message is sent to a UNIX domain socket…
shylent
- 812
- 11
- 22
1
vote
1 answer
Apache vhost-specific logging
I have the following apache setting (in conf.d/owasp-modsecurity.conf):
SecAuditLog "/var/www/vhosts/${lowercase:%{SERVER_NAME}}/statistics/logs/modsec_audit.log"
When I do httpd -t I get the following error:
Syntax error on line 15 of…
Christian
- 466
- 5
- 23
1
vote
1 answer
SQL Server doesn't archive logs
I was just looking over one of oure less monitored databases and noticed that it hasn't archived any logs for over a month. This is what it looks like now. The current log has over 700 000 events and counting. Anyone know if there is some process or…
Sandokan
- 514
- 1
- 6
- 17
1
vote
1 answer
windows log logon activity: is it safe to rely on windows audit?
I found a guide that teaches, through turning on the Audit of the System Log on Activity via gpedit.msc, how to read the logon activity via eventvwr.msc
Is this way of monitoring fully comprehensive?
I have some doubts about it.
For example windows…
kante
- 13
- 5
1
vote
1 answer
Neo4j Web Server Hangs: Logging Issue?
I have a small database that was working fine just a day ago, but now, when I try to start it, the console claims that it succeeds in opening, but the web server hangs.
lsof -i | grep 7474
states that neo4j is listening to the port, and…
Olga Mu
- 111
- 2
1
vote
1 answer
Linux: How to list all messages sent from sendmail
I am getting occasional claims that people are not receiving some automated emails from the Apache server, which uses sendmail as the MTA. How do I see a list of activity? /var/log/maillog is empty.
CentOS 6.3
user160910