Questions tagged [logs]
Configuring or analysing log files (text files where programs output error and informational messages, useful for debugging and troubleshooting).
1,926
questions
0
votes
1
answer
79
views
Where Does Aptitude Log Its Warnings?
Aptitude version 0.8.7
Debian 9 (Stretch)
During a recent package upgrade, the Aptitude GUI displayed the following warning, boxed and in bright red:
W: APT had planned for dpkg to do more than it ...
- 289
0
votes
0
answers
17
views
Slow query log: where should be configured on mariadb o a debian 12?
If I do
show global variables like "%slow%"
I get these results
But I am not able to find where these values are set up.
I tried to find, litterally
cd /etc/mysql
grep slow -R -n
And ...
- 799
0
votes
1
answer
36
views
how to execute command and log only the command to a file
I'm trying to run a command and log only the command to a file. I've tried using exec 4>test|command >&4|exec 4>&- but doesnt' work. If I run the commands separately it works but ...
- 11
0
votes
0
answers
16
views
Tool for monitoring kernel driver messages? What are the options?
I'm working on a kernel-level device driver that sends requests to an underlying piece of hardware. Those requests have a fixed length and a given layout (including multiple fields with encoded values,...
0
votes
3
answers
57
views
Tracking the source of PostgreSQL authentication failures in Linux Localhost
I have these logs in my PostgreSQL database log file that appeared after I changed the database password.
2023-09-14 11:57:15.937 UTC [3401773] username@db-name FATAL: password authentication failed ...
- 99
0
votes
1
answer
24
views
How Can I Add Dates To Nohup Log Files Lines
I'm running python on my server. I want to add date and time info to my nohup log file's lines.
Log file content similar to what I want to do (inside log file):
09/09/2023 07:13 Traceback (most recent ...
- 13
0
votes
0
answers
43
views
Hardware error from APEI Generic Hardware Error Source: 5
This appears in my Dell XR12. I am using an Intel ACC100 (PDF download) acceleration card . But I dont understand the error. What is happening here? Any help is appreciated!
[Thu Sep 7 08:43:27 2023] ...
- 1
0
votes
0
answers
25
views
systemd: lightdm.service: Main process exited, code=exited, status=1/FAILURE / How to log whats happening in a early stage of the booting process
I've upgraded Ubuntu 18.04 to 20.04 on my ARM (32 bit armhf) Chromebook. While Ubuntu 18.04 works perfectly,Ubuntu 20.04 has some kind of problem. I think that during the upgrade something broken.
At ...
- 495
1
vote
0
answers
24
views
Why I cannot log packages passing through PREROUTING chain?
Recently I have been studying iptables. To grasp how packages pass through every chain of iptables, I inserted log rules at the first line of every default chain. Then I ping the test server from ...
- 11
-2
votes
0
answers
26
views
Processing All Control codes in Linux
I am logging SSH command logs via using SSH-MITM. This is working like logging all the key strokes of the user into ssh_in_xxxx.log file.
An example of the content of this file:
vim ...
0
votes
1
answer
60
views
How can I know if a file system was cleanly unmounted?
I know, fsck.ext4 -p /dev/whatever, right? That seemed to be the answer, but then I read that journaling covers a multitude of sins, and the result from fsck will just tell you that there isn't a ...
- 217
0
votes
1
answer
32
views
du report wrong usage and root folder is so big
In Debian the /root/ directory is so big but du show nothing inside it. root account is just a supervisor/administrator/superuser user, there is no folder for this account in home directory. This ...
0
votes
1
answer
28
views
Which portion of boot.log files are binary?
My system keeps seemingly randomly failing to boot after a kernel update. So I am reading logs to try to determine the cause of the issue. Here is one of the boot logs:
$ sudo cat /var/log/boot.log.1
-...
- 1
0
votes
0
answers
33
views
Using maxage in conjuction with rotate in logrotate?
I've read these blogs about maxage and rotate when used in conjunction and I'm still confused about it.
https://www.clearos.com/clearfoundation/social/community/silly-question-re-logrotate-and-rotate-...
- 434
0
votes
1
answer
31
views
Date format in /var/log/cron (Oracle Linux Server 8.8)
Currently the date format in /var/log/cron seems to be %b %d %H:%M:%S, so in /var/log/cron I see the logs like
Aug 20 03:13:01 bhost1 CROND[1361808]: (user1) CMD (......)
Is it possible to change the ...
- 101
0
votes
0
answers
29
views
Log the output of a process running as a SystemD service with screen
I am running a minecraft server as a systemd service with the following service script
Description=MC Server: %i
After=network.target
[Service]
WorkingDirectory=/opt/minecraft/%i
User=minecraft
...
0
votes
4
answers
123
views
How to view a log file that's worth 10GB+?
The ways that I've thought of:
If you get to reproduce the scenario in real time. Use
tail -f application.log | tee /tmp/tailed_log
But it's not sure that we'll get to reproduce the scenario in real ...
- 434
0
votes
2
answers
38
views
Getting only used memory from free command every few seconds
It was explained e.g. here:
Get separate used memory info from free -m command
how to cut the output of free command. But I want to do this every few seconds and log it to a file. So I tried:
free -g -...
0
votes
0
answers
31
views
Log contains these entries 'CLUTTER_IS_ACTOR (self)' failed
I have a lot of these entries which repeats over and over again. Seem to change in duration when errors gets. Sometimes I see repeat entries after 1-3 minutes, and other times it is 20 minutes to 30 ...
- 481
0
votes
1
answer
16
views
what should be the format of http logs of a proxy?
In this specific case I am using fabio and nginx and apache http proxy that just proxies requests to destinations.
Both the "Combined Log Format" and "Common Log Format" do not ...
- 850
3
votes
1
answer
126
views
Save the output of earlier tailed logs to a file?
Is it possible to save the output of earlier tailed logs to a file?
Steps to Reproduce this issue:
tail -f application.log
Ctrl+C to end the logs
Save that output to a file now.
I am assuming an ...
- 434
0
votes
1
answer
31
views
kernel reports ACPI Error when bringing network card up or down
I get these errors in my logs, when bringing my network interface eth0 up or down, using ifup and ifdown:
kernel: e1000e 0000:00:19.0 eth0: NIC Link is Down
kernel: ACPI Error: Index value ...
0
votes
1
answer
411
views
PuTTY logging file date time
I use Putty on my job and capture the output with the logging option. What I need to do is have a date and time appended to each line. Is there any way to capture the live PuTTY output and append the ...
- 1
0
votes
1
answer
18
views
vpnc does not log anything to rsyslog
I am using vpnc-connect and vpnc-disconnect (from package vpnc) on Debian 12.
when I start vpnc-connect it just prints message:
VPNC started in background (pid: 2345)
But other than that, the whole ...
0
votes
1
answer
45
views
How to automatically change the name of a file on a daily basis
I am new to Linux/CentOS and right now I am running into a little problem.
My CentOS7 Server logs all Maillogs on a daily basis and moves them to the folder /var/log/old_maillogs. Right now the logs ...
- 3
0
votes
1
answer
22
views
Capture network interface device name with Packetbeat
With Packetbeat on Linux, the packetbeat.interfaces.device: any configuration captures all messages sent or received by the server where Packetbeat is installed.
I want to distinguish the messages ...
- 133
1
vote
0
answers
20
views
Linux audit logs coming in with capitalized field names (SYSCALL, AUID) Rhel 7
I've never encountered this before so not even sure where to start. I'm installing a log parser on a system but for some reason all audit logs are coming in with the field names capitalized. So ...
- 11
0
votes
1
answer
78
views
How to clear the /dev/kmsg ring buffer?
Is there a way for me to force clear the /dev/kmsg kernel ring buffer?
- 101
0
votes
1
answer
50
views
How do I view contents of log files that is too large?
I've a huge log file. Worth 403MB.
df -h
command shows that only 8% free space in /home
free -mh
command shows that only 474MB is free and 658MB is available.
How do i view the logs?
I tried.
grep -...
- 434
0
votes
0
answers
17
views
How to centralize logs of some specific service controlled by systemd
I deployed some process, which is managed by systemd. After executing systemctl start my-service, I can see it runs as expected and journalctl -u my-service shows me the logs of the process.
Now I ...
- 3,181
0
votes
1
answer
67
views
Split logging on rsyslogd
My goal is to send all logs to one source remote and still log local but then send all the AuditD logs to its own source on port 20002. But for some reason, my auditd logs are still ending up with my ...
- 1,714
0
votes
1
answer
38
views
How to validate if the log started flowing after restart of a service?
I have an use case where in part of validations one step is to verify whether the log file has started flowing after the service restart? How it can be achieved easily?
- 69
0
votes
1
answer
101
views
How to send systemd logs to a text file
I want to know how to send systemd logs to a text file.
There are many reasons for this, such as:
Being able to use grep without having to use journalctl first
Being accustomed to it
Why not use it
...
- 15
0
votes
1
answer
92
views
Which comes first, fstab or /var/log?
When Linux boots, does it first read fstab and mount everything from it, or does it start systemd before that?
I expect that fstab comes first, but I didn't know how to confirm it. So, even if you ...
- 214
0
votes
1
answer
57
views
Using netconsole to log netinstall image boot
I am trying to log kernel boot messages through the ethernet interface over the local network to another device using netconsole following this document: https://www.kernel.org/doc/Documentation/...
- 2,165
0
votes
0
answers
66
views
auth.log file in bullseye os
I have debian gnu/linux 11 (bullseye), in which the /var/log/auth.log file only contains log of current boot and not any previous boots, I need it to store the logs of previous boot for verifying the ...
- 1
0
votes
0
answers
68
views
Why is journalctl not working after I just created a cloud Ubuntu server?
journalctl responds with No journal files were found, after I just created the cloud Ubuntu server, and have access it through the web based console.
I've pasted the console output below
2023-06-18T03:...
- 50
0
votes
0
answers
19
views
Strange server behaviour after keyboard was connected - was server compromised or data centre at fault?
This morning I received a notification from our host that they couldn't ping the server, I've checked the logs and 5 minutes before the following happened:
Jun 13 10:34:50 server-name kernel: usb 1-5: ...
0
votes
0
answers
27
views
Rsyslog imfile equivalent for Android non-root?
I am on Android 13 and use an app (not my app) that generates csv log files with tens of thousands of lines.
I am trying to get these log entries to my central log server in the easiest and most ...
user432564
0
votes
1
answer
59
views
Where does `logger` save messages to on macOS?
I'm writing a shell script that utilizes the Linux logger to log output. Based on that documentation, I believe that the logging is sent to /var/log/syslog on Linux which would be var/logs/system.log ...
- 101
0
votes
1
answer
177
views
Why all Xorg log messages are written to journal at level 4 (warning)?
All the content of Xorg.n.log can be viewed with journalctl. As Xorg is launched by GDM (if I understand it correctly), it always has the --identifier=/usr/libexec/gdm-x-session. But despite this hint ...
1
vote
1
answer
41
views
Linux system logs
In one of our AWS Linux virtual machines, the ca-certificate.crt file has been modified, and our private CA has been deleted.
How can I determine who made these changes and deletions?
- 11
0
votes
0
answers
103
views
sshd log verbose filter out specific user
I would to filter out one specific user that very often connect to my servers via sshd.
I no more want to see into ssh's logs the connexion of this user.
Is it possible to do that ? to keep the actual ...
- 77
0
votes
0
answers
99
views
Where is Rsyslog programname set?
I am using AWS Elasticbeanstalk to run my java web application. In EC2 node under /etc/rsyslog.d/web.conf
if $programname == 'web' then {
*.=warning;*.=err;*.=crit;*.=alert;*.=emerg /var/log/web....
- 101
1
vote
1
answer
97
views
Log all commands executed regardless of shell?
Suppose a user runs the following command:
zcat file.gz | grep something | gzip > grepped.gz
I'm looking for a kernel feature (a BPF filter perhaps?) that would note all of the execves, chain ...
- 1,361
0
votes
0
answers
30
views
How can I modify my sshd process on an ubuntu server to log all passwords entered on failed SSH attempts by attackers? [duplicate]
If I have an Ubuntu VM exposed to the internet and multiple randoms try to brute force login to the SSH port each day, is there a way to modify the process that logs to /var/log/auth and also log the ...
- 101
0
votes
0
answers
310
views
How to ignore "ACL packet for unknown connection handle" logs (or fix it)?
My Bluetooth devices are working perfectly and I can even connect and use several devices at the same time (keyboard, mouse, speaker, headset...).
But whenever I use them (e.g. typing or moving the ...
- 281
0
votes
1
answer
171
views
Programmatically query last DHCP lease time
I have a buildroot embedded Linux where I change the ethernet port settings (i.e. disabled, static or DHCP) from a C++ program. When switching to DHCP, it would be nice to determine when (i.e. ...
- 123
0
votes
0
answers
48
views
New rsyslogd for Fedora?
I have always used rsyslog for my Fedora installations (KDE only), to see informational messages in my (rooted) console, specially kernel messages. Yet, in the last Fedora versions it seems that this ...
- 313
0
votes
1
answer
51
views
Remove specific emails from sendmail mqueue
How do I remove emails from mqueue based on destination address. Needing to remove deferred messages going to "[email protected]"
Due to an endless loop (that has been found and ...
- 1