Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logs]

Configuring or analysing log files (text files where programs output error and informational messages, useful for debugging and troubleshooting).

1
vote
0answers
17 views

What is causing my rsyslog timezone offset and / or time to be incorrect?

I have a central logging server running rsyslog 7.x on RHEL 6 The logs are coming in with a UTC time but an EST offset for a device. Here are some relevant configs. $template TEMPLATE_NAME,"%...
0
votes
1answer
25 views

MESSAGE=anthony … USER=root <— Does this mean that the root user is the actual user but “anthony” will be displayed as being the user anyway?

I found this in /run/log/journal/... MESSAGE=anthony : TTY=pts/10 ; PWD=/ ; USER=root ; COMMAND=/usr/bin/find / -name *systemctI* I'm wondering what this means? I'm suspicious of this process "...
0
votes
1answer
20 views

Any BI or log tools to import dumb file [on hold]

Currently we do not have any log tools for filtering a huge dumb file. Is there any open source BI or log tool able to import a dumb file and do auto/selectable filtering? Current dumb file example: ...
0
votes
0answers
25 views

Logging Chrooted Users SFTP Activity

So I'm having the issue where I can't seem to log users SFTP activity. I can see when a new session was created by a specific user, but can't see where they've been or what they may have dropped ...
4
votes
3answers
283 views

Understanding sshd logs

I understand where to find the logs, but I am not always sure what they mean. And I can't exactly find a comprehensive guide on sshd logs explaining what they mean. I am particularly concerned with ...
0
votes
0answers
16 views

Packet capture with iptables/rsyslogd?

The usual way I know of capturing packets is with iptables/NFLOG/nflog-group and ulogd with libpcap.so built in. It's a simple matter to enable packet capture in the ulogd.conf file and all rules that ...
1
vote
1answer
18 views

Method to automatically email if a drive goes offline (or a USB port is restarted)

Is there a quick and easy method to send an email (I already have automatic emails coming from the server for other events - I just need to be able to send one for this specific event) if a USB port ...
1
vote
0answers
17 views

CentOS: Collecting and analysing logs using NXlog and OSSIM

Objective: Forward logs from all servers to OSSIM, correctly formatted and readable. Steps: Deploying one NXlog Collector/proxy node in each network zone - DONE Deploying one NXlog Collector/master ...
1
vote
2answers
48 views

Extracting specific lines from log file with grep and awk

I have a huge log file (20 millions of lines) telling me if some url status are responding "200 OK" or not. I'd like to extract all url with status "200 OK", plus the filename attached with it. ...
0
votes
0answers
11 views

How to use the 2nd monitor to only show textmode vt1 with critical log info?

I have one graphics card with 2 OUTPUT ports: VGA and HDMI and 2 led monitors. On the 1st monitor, the HDMI one, I use the graphical environment (Unity/KDE/Gnome etc). Using NVidiaSettings, I can ...
1
vote
0answers
21 views

Freeze Linux when log is full

Is it possible to configure a Linux server to stop all operations when it cannot create logs, similar to the security policy in Windows called "Audit: Shut down system immediately if unable to log ...
0
votes
0answers
10 views

xscreensaver - how to log successful logins

I would like to log successful login attempts from screensaver. Running xscreensaver with xscreensaver -verbose -log ... does give me something usable: input finished. pam_conversation (...) ==&...
0
votes
0answers
23 views

Command to append new logs content, generated in a directory to the end of a file

I've got an IDS which creates log files inside a directory. These logs all start the same ie, IDS_log_XXXXX. I have a perl script setup which would email me when these logs would contain certain ...
0
votes
2answers
55 views

do incorrect usernames get logged?

i was wondering if a GUI login attempt with a non existing username will be written to any log files? (im using mint with cinnamon and Kali with gnome3) I accidentally put my password in as username ...
0
votes
2answers
48 views

Add entry for a logfile

How can I add a logfile line to the following bash file? #!/bin/sh if ps x |grep -v grep |grep -c cccam_2.3.2 >/dev/null then echo "cccam... ok" else echo "cccam... restarting" /var/...
0
votes
2answers
30 views

How can a log print to display while shutdown, reboot or startup?

As we all know, when we reboot, shutdown or startup a system, some message will be printed on the screen, here is a capture: My system is Ubuntu 16.04, I know these log messages as above come from ...
0
votes
1answer
28 views

Centos6 - Log files copied from the server

Is there a way to log any files copied from the server to a PC on the network? It would be a specific directory on the server (Centos 6). I have tried searching for an answer to this but to no avail ...
2
votes
1answer
71 views

Redirect script output both to console and to log

Take a look on the following # more /tmp/myscript #!/bin/bash echo I AM echo BIG GUY echo AND ALSO SMART # bash /tmp/myscript | tee -a >/tmp/log why we not get the output from echo in the ...
0
votes
1answer
26 views

Script “7 days log tar and then remove the 7 days logs and exclude the tar file after next 7 days”

I am trying to create a script such that it could tar.gz all the previous log of per 7 days log and exclude the tar file in next run. Is the script ok or should I have to make a change find /home/...
0
votes
2answers
30 views

Occurence Count

184.13.80.102 - - [07/Jan/2019:00:33:10 -0500] "GET /?p=454 HTTP/1.1" 200 8822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:64.0) Gecko/20100101 Firefox/64.0" 184.13.80.102 - - [07/Jan/2019:20:16:...
1
vote
1answer
31 views

Apache 2.4 get request processing time in microseconds log

Trying to add the %D and %T format string to my Apache log to see time for request processing but apparently not able to. Here are the LogFormat directives in my httpd.conf [root@server01 admin_ad2]# ...
0
votes
1answer
60 views

How to writes the log on the screen during shutdown and startup (after grub)

As we know, when we startup the system (after grub) and when we shutdown the system, many logs will be printed on screen. I know that the kernel would write some logs of the kernel. But how about the ...
0
votes
0answers
21 views

Get output of server crash from server re-spawning script

I currently have Homebridge set up on my raspberry pi. When the pi boots, it starts a script which attempts to keep homebridge alive. I originally took the script from this answer which walks you ...
3
votes
2answers
187 views

Command: find and delete log files - deep explanation

find $LOG_PATH -type f -mtime +60 -print -exec rm {} \; Above command deletes log files, I did read the manual for each command but didn't understand it WELL. Can anyone explain this in a simple ...
0
votes
0answers
52 views

Why does fail2ban not trigger my custom filter?

fail2ban-regex verified that my filter matches Jan 14 07:39:41 myhost01 sshd[26433]: Connection closed by authenticating user root 127.0.0.1 port 56216 [preauth] 68 times inside auth.log, but fail2ban-...
0
votes
1answer
33 views

Can I tell from the system log, whether XFS was cleanly unmounted on the previous shutdown?

Is there an XFS equivalent of the fsck.ext4 message "recovering journal"? (See Does "recovering journal" prove an unclean shutdown/unmount? ). fsck.xfs is a no-op. So does the kernel log ...
0
votes
0answers
9 views

`screen` not creating log file when run inside tmux/byobu?

When we use screen command with -L option, it creates log files of the session with names like screelog.0, screenlog.1 and so on. These log files are created inside the directory in which the screen ...
1
vote
1answer
36 views

Stream text into a file while compressing it

I have an Arduino Nano connected to a Raspberry Pi which streams text data (the output of a GY-91 sensor) to a listener on the Raspberry Pi. P: 974.044 | T: 22.65 | AG: -0.17 -0.10 1.01 | GD: 1....
0
votes
0answers
34 views

rsyslog: send logs to different file by filtering syslogs

I have a CentOS based rsyslog server which have the below settings, where it's getting all the remote NATing events from multiple hosts. $template TmplcpFW, "/var/log/%HOSTNAME%.log" if ($hostname == ...
0
votes
2answers
53 views

how to delete files in folder with thousands of files [duplicate]

in the folder cd /var/log/hive I guess we have thundered of log files I say that because if I do under this folder ls -l then its stuck and only CNTRL C , will exit so I cant to vew all ...
0
votes
0answers
13 views

change maillog default path in rsyslog

I am using redhat linux and the default location of my postfix is /var/log/maillog . I am trying to change maillog location to /app/log/maillog. I have tried to update rsyslog.conf mail.* ...
2
votes
1answer
49 views

Source of this error: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted

We have this log in our syslog: udevd [ PID ]: inotify_add_watch(6, /dev/sda, 10) failed: operation not permitted Why do we get this error and how do we solve it? Our environment: Ubuntu 12.04; LXC;...
0
votes
0answers
40 views

User entries not deleting in lastlog file in Solaris

I am deleting a user in Solaris 10 and 11.  If I delete a user using the command userdel -r test1 and then check my lastlog file /export/home/ch185140/lastlog, I get output like this: 1 tj100201 ...
0
votes
0answers
16 views

Rsyslog concatenate postfix output

I'm trying to concatenate postfix log output with rsyslog directly. This is my template. template(name="TestMailTemplate" type="list"){ property(name="timestamp" dateFormat="rfc3339") constant(value="...
1
vote
1answer
24 views

Track active logging to log files

Is there a way to track which service/file is actively logging to a log file? In this case taking info from the syslog file and creating a file called filtered.log. I'm not seeing a process for ...
0
votes
3answers
59 views

How can you write to a file from the command line without using shell output redirection? [duplicate]

I'm trying to: sudo echo "$USER: my message" > /dev/kmsg to write a message to the dmesg log. This causes a 'permission denied' error, because it is redirecting the output of 'sudo' (while no ...
0
votes
1answer
47 views

Shell script to emulate Logrotate

I've a system that writes files to /var/tmp/log/my.log, I want to write a shell script to rotate the log files when it reaches 1KB limit, so my my.log becomes my.log.1, my.log.1 becomes my.log.2 and ...
0
votes
1answer
34 views

Logs starting “ipsec start” command

I am trying to take the Mobile IPv6 HOWTO (https://wiki.strongswan.org/projects/strongswan/wiki/HomeAgentSetup) as an example of configuration but when I run the "ipsec start" command I have just one ...
0
votes
0answers
16 views

Why are these DHCP log entries repeated

I see multiple entries from the same device for each attempt to connect. Consider these 3 entries from an iphone and 4 entries from another device. What do the "via ..." indicate ? What does the ":1" ...
0
votes
0answers
39 views

Apache2: avahi_entry_group_add_service_strlst(SomeHostName) failed

OS: Debian 10 Buster, upgraded from Stretch, to this date still in testing phase. I am just checking upon how my Apache2 web server is doing and while it is starting since boot, I see some error ...
1
vote
1answer
129 views

messages log file flooded every minute [duplicate]

My /var/log/messages file gets flooded every minute with the following messages: Dec 15 13:55:01 www systemd: Started Session 31 of user root. Dec 15 13:55:01 www systemd: Starting Session 31 of ...
1
vote
1answer
43 views

Logs gzipped and not gzipped

Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files: letsencrypt.log letsencrypt.log.1 letsencrypt.log.10 letsencrypt.log.10.gz letsencrypt.log....
0
votes
0answers
24 views

How to check the history of processes

I'm using Debian running on a BeagleBone Black. I have a script which is supposed to execute when the system starts. The script then should run a python script. I add the command to run this script ...
0
votes
0answers
15 views

zBackup and System Crash Reboot without Logs

I'm using a program named zBackup over a lot (100+ >90GB each) of tar files. Every five or so, the system reboots. I've used last -x Which shows a crash kayot pts/2 --.--.--.-- Wed ...
1
vote
1answer
35 views

Possible to get sshd (openssh) to log the public key of failed key based login attempts?

As I understand sshd (openssh in my case) typically does/may log the fingerprint/hash of the public key of incoming connections which are attempting to authenticate via key. What I'm looking for is ...
-1
votes
1answer
186 views

Rotate Logs Older Than 7 days and Delete Archive [closed]

I'm trying to configure logrotate to find all the log files older than 7 days from certain directories and archive them. The archived files must be deleted. I have a structure as follows. /var/log/...
2
votes
1answer
89 views

How to retrieve counts of IP addresses from log file?

I am checking a log file to retrieve ip adresses plus how many times a log failed. This is what my log file looks like: Feb 2 15:20:02 tank sshd[14870]: Failed password for root from 143.100.67.173 ...
3
votes
1answer
41 views

Finding modified files in realtime?

I need to track down files (particularly log files) from any apps generating them at any given moment. These files may be arbitrarily named (not necessarily containing log in the filename or path). ...
2
votes
1answer
37 views

Find what program accessed a kernel module

How do I access a list of users/programs that accessed a certain module? I run: lsmod | grep ^uvcvideo This returns this line when no application is using my video camera: uvcvideo ...
0
votes
1answer
36 views

Logrotate not occurring automatically

I'm able to call logrotate /etc/logrotate.conf whenever I see my log file exceed the specified threshold and it rotates just fine. I was under the impression though that whenever a file specified in ...