Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logs]

Configuring or analysing log files (text files where programs output error and informational messages, useful for debugging and troubleshooting).

1
vote
0answers
25 views

Logs gzipped and not gzipped

Recently I've changed logs configuration for letsencrypt, because there was no given one and I have files: letsencrypt.log letsencrypt.log.1 letsencrypt.log.10 letsencrypt.log.10.gz letsencrypt.log....
0
votes
0answers
20 views

How to check the history of processes

I'm using Debian running on a BeagleBone Black. I have a script which is supposed to execute when the system starts. The script then should run a python script. I add the command to run this script ...
-1
votes
0answers
35 views

Can't launch startx [on hold]

After a fresh installation of Arch Linux, I'm trying to launch my xorg-server with startx. I've already installed the xorg package and xf86-video-nouveau. When I launch startx, it show a strange error ...
0
votes
0answers
10 views

zBackup and System Crash Reboot without Logs

I'm using a program named zBackup over a lot (100+ >90GB each) of tar files. Every five or so, the system reboots. I've used last -x Which shows a crash kayot pts/2 --.--.--.-- Wed ...
1
vote
1answer
31 views

Possible to get sshd (openssh) to log the public key of failed key based login attempts?

As I understand sshd (openssh in my case) typically does/may log the fingerprint/hash of the public key of incoming connections which are attempting to authenticate via key. What I'm looking for is ...
-1
votes
1answer
20 views

Rotate Logs Older Than 7 days and Delete Archive [closed]

I'm trying to configure logrotate to find all the log files older than 7 days from certain directories and archive them. The archived files must be deleted. I have a structure as follows. /var/log/...
2
votes
1answer
73 views

How to retrieve counts of IP addresses from log file?

I am checking a log file to retrieve ip adresses plus how many times a log failed. This is what my log file looks like: Feb 2 15:20:02 tank sshd[14870]: Failed password for root from 143.100.67.173 ...
0
votes
0answers
25 views

how to send only specific files to remote server using rsyslog

I using rsyslog. I have multiple servers(rsyslog servers) sending syslog to remote server(syslog-ng server). Right now, I am sending everything to remote server. I want to filter out and send logs ...
3
votes
1answer
36 views

Finding modified files in realtime?

I need to track down files (particularly log files) from any apps generating them at any given moment. These files may be arbitrarily named (not necessarily containing log in the filename or path). ...
-2
votes
0answers
26 views

Understanding the output of last -x command

If I run command last -x to check the shutdown entries, I get below output: runlevel (to lvl 5) 4.9.80-v7+ Wed Nov 21 06:54 still running machine tty7 :0 Wed Nov 21 ...
2
votes
1answer
31 views

Find what program accessed a kernel module

How do I access a list of users/programs that accessed a certain module? I run: lsmod | grep ^uvcvideo This returns this line when no application is using my video camera: uvcvideo ...
0
votes
1answer
29 views

Logrotate not occurring automatically

I'm able to call logrotate /etc/logrotate.conf whenever I see my log file exceed the specified threshold and it rotates just fine. I was under the impression though that whenever a file specified in ...
0
votes
1answer
42 views

detecting unique lines from log file

I have a large log file and would like to detect the patterns instead of specific lines. for example: /path/messages-20181116:11/15/2018 14:23:05.159|worker001|clusterm|I|userx deleted job 5018 /...
0
votes
1answer
34 views

What's causing dbus-daemon to take up over 3GB of RAM?

dbus-daemon is consuming a lot of memory on my Debian 9/KDE machine. How can I find out why? The amount of allocated RAM is not changing anymore: it's stable at well over 3GB. I already tried closing ...
1
vote
1answer
60 views

Security review: classifying ssh log-in attempts [closed]

I see my own ssh logins to an AWS EC2 Ubuntu Linux instance as Nov 18 07:32:21 ip-10-20-30-40 sshd[9487]: Accepted publickey for ubuntu from 15.26.37.48 port 46273 ssh2: RSA SHA256:e37A/...
0
votes
1answer
42 views

How to use sed to obfuscate an IPv6 address

I have the following sed command sed -i 'test.log' -e 's/\([0-9a-fA-F]\{1,4\}\:\)\{7,7\}[0-9a-fA-F]\{1,6\}/\1\w/g' The goal is to erase the last two blocks of the IPv6 address. However, this sed ...
0
votes
2answers
48 views

Extract information from multiple log files

I am trying to make a .txt file that contains only one line gathered from other 30 .log files. To extract only one line I used this: $ sed -n '/Num mapped reads/p' /home/travc/seq_v2/AgamP4_v2/...
1
vote
1answer
30 views

Are netcat connections stored to any log file in Linux?

I have opened a service: nc -l -p 1234 -e service.sh If someone connects to this service. nc xxx.xxx.xxx.xxx 1234 Can this connection be found in any Linux log file?
0
votes
1answer
17 views

Email sent to root: “Output from from your job 1843” - “Killed”

I run a Sheevaplug (small ARM server) with Debian 9. It does not have any third-party repos enabled in sources.list / sources.list.d. I have a backup script which runs as root, and uses at. I think ...
1
vote
1answer
36 views

Log Console Output [duplicate]

Is there a way to not only protocol/log the console inputs (like the history), but also the console output by default (without the constant usage of pipes)?
1
vote
0answers
39 views

Howto see messages that are subject to net_ratelimit?

OS: Ubuntu 14.04.3 Kernel: 3.13.0 I am running Linux Virtual Server (with keepalived) on that server. All ok. As of today, there is more network traffic on the LVS, and at the same time I start ...
0
votes
3answers
49 views

Permission to write to log

I'm working on a Python + Django application and it writes logs. As I run app locally, logged-in as my user, I would like to enable my user to write logs to /var/logs. I tried to add my user to ...
0
votes
1answer
35 views

Error in grep command to exit from a Unix Script

I have a log file created while running a script. I want to check the same log file for any messages with 'Msg ....' and exit the code except with this 'Msg 2714'. So, I had added the below code ...
0
votes
1answer
54 views

Logging of failed SIP calls (sipcmd) on a Linux box (Debian)

I have set up a little Raspberry Pi (with Debian 8) behind a router (Fritz!Box), which does check/analyse the connectivity or rather quality of service of a certain phone line per SIP calls. My phone ...
0
votes
2answers
27 views

How to make /var/log persistent through reboots on an embedded linux device

Scenario I am on an embedded linux system. As usual /var/log/ is the directory when all the logs are stored. I have a directory called /safepath which is created during image creation and it is on ...
6
votes
2answers
416 views

System crash - strange chars in syslog

I have a small server which I use for testing and programming. Currently it runs Debian 9.4 stretch with 4.14.0-0.bpo.3-amd64 kernel. Today I tried to connect through SSH but I couldn't then I tried ...
1
vote
0answers
43 views

Understanding Linux audit.logs for SSH - USER_AUTH

Let's say I have this entry in my Linux audit.log: type=USER_AUTH msg=audit(1357702397.903:2747564): user pid=15121 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="test" exe="/...
0
votes
0answers
24 views

How can I make syslog-ng to filter for a user name?

I've found a nice feature of the syslog-ng: if I use the logger to log things from the user process, I get the logging user name. Around so: peterh$ echo test log message|logger then I get this in /...
0
votes
0answers
27 views

Redirecting output of loggings when using <syslog.h>

How can I redirect the message this code writes in /var/log/auth.log to /var/log/test.log #include <syslog.h> int main(int argc, char** argv) { char* cap = "TEST 1"; openlog(cap, ...
0
votes
0answers
49 views

rsyslog filtering on syslog server

I have below relevant logs in default file /var/log/messages: 1 2018-10-07T01:32:20.898Z TestFW2 RT_FLOW - RT_FLOW_SESSION_CLOSE [junos@2636.1.1.1.2.34 reason="idle Timeout" source-address="100.73.10....
0
votes
3answers
54 views

find IDs of databases with error during upgrade

I have a log file of errors captured in my database, the file contains a list of the records that had errors and were not updated. The record names are 10 digits and start with a strA: Error: could ...
0
votes
2answers
20 views

caclulate total log in time to network

I have this log file which is recording the log in/ log out sessions by users to the network [10:21:10] User logged in [13:59:42] User logged out [15:42:00] User logged in [16:42:13] User logged ...
0
votes
0answers
35 views

Logging output of scripts called inside another script

Inside bashscript, I am using exec and tee to redirect logs to stdout and a log file in the same time - Unix & Linux Stack Exchange. exec &> >(tee -a "${LogFile}") I am sourcing ...
1
vote
1answer
73 views

Deployment of haproxy between devices and Syslog server

Below is the current architecture of Syslog-NG to avoid single point of failure. Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the ...
1
vote
1answer
72 views

Message forwarding with de-duplication - SyslogNG

Based on the advice from answer that says: Simply adding both servers and always write to both is the easiest one, we have setup syslog-NG server on two machines that receive same syslog message and ...
1
vote
0answers
55 views

Odd Characters in Log File

I checked my cron log files today for a script that I have scheduled and the saw the following errors/characters: \00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\ ...
3
votes
2answers
46 views

How do I grep for occurences of “[numberLargerThan5000]ms”?

I have a .log file where each entry is on the form 2018-09-28T10:53:48,006 [Jetty-6152 ] INFO [correlationId] my.package.service:570 - Inbound request: 1.2.3.4 - GET - 12342ms - 200 - /json/some/...
2
votes
1answer
81 views

awk/sed/grep: Printing all lines matching a string and all lines with tabs after these lines

I want to extract relevant data of an http thread which has been started with a specific UUID from a log file. Example log: 2018-09-26 06:34:24,815 INFO [com.xxx.xxx.xxx] (http-threads-threads - ...
0
votes
3answers
42 views

Search multiple patterns in each lines and output it on a new file

Here is the sample file. The actual log is way bigger than this. user@linux:~$ cat log.txt [24/09/2018:22:41:49 GMT] "PROXY_SERVER_BA2" c-ip=x.x.x.x cs-bytes=1198 cs-categories="Technology/Internet" ...
1
vote
0answers
27 views

Log format documentation

I'm trying to create a log format for goaccess so it can parse my nginx logs but it's failing and I can't find the documentation on what the the placeholders mean in the first place. Where can I find ...
0
votes
1answer
81 views

can i safely remove /var/log/jenkins/jenkins.log (/var: 100% used) [duplicate]

I am running out of disk space with /var system file and noticed /var/log/jenkins/jenkins.log file is occupied 7 GB. Can i safely remove this log file ?
1
vote
0answers
16 views

Syslog is flooded with PF_RING messages

I have ntop running on a Debian 9 (Stretch) server, and it's flooding /var/log/syslog with the following messages every 10 seconds: Sep 21 11:51:18 brutus kernel: [67801.273760] [PF_RING] removing lo/...
1
vote
1answer
337 views

Is “find /var/log -type f -delete” safe on Debian 9?

I never view or care about files in /var/log/ and want to avoid logrotate wasting my system resources (CPU, RAM, I/O, etc.). Are any regular files in /var/log/ necessary for some core Debian program (...
0
votes
1answer
90 views

How to omit PAM log messages for specific user (pam_succeed_if quiet)

I'm using a monitoring agent (telegraf) to monitor fail2ban. Unfortunately, it requires SuperUser rights to execute fail2ban-client, which causes 24 system log messages every 10 seconds... Do the math,...
2
votes
1answer
124 views

Make sendmail not log “did not issue MAIL/EXPN/VRFY/ETRN” messages?

We have sendmail servers behind an F5 load balancer. The load balancer is constantly opening/closing a connection to each mail server to see if it is answering. This means our syslog files are ...
0
votes
1answer
37 views

How do I relate to huge auth.log and fail2ban.log files?

I have a question regarding log files on a Debian box. I'm running a low volume PHP server, so most log files are small. However, auth, fail2ban (and daemon) are huge, even with log rotation. 2000K ...
-2
votes
1answer
28 views

revising log files [closed]

I am checking the log on a server multiple times throughout the day. Each time, I open the log in NotePad++ and search for key words such as "warn" or "error" and then review the error or warning to ...
0
votes
0answers
61 views

Command works on cli, but not on crontab

I have script that is doing an iperf3 test against a server and is piping it into a file. Then I have this command, that takes makes a line for a logfile. It works when executing on the command line, ...
0
votes
0answers
18 views

delete csv file by rsyslog after transfer

We have two expectations from the rsyslog. we config : module (load=imfile) input (type="imfile" file="/opt/reports/*.csv") tag="send_csv" ruleset="test") ruleset(name="test") { action (type="omfwd"...
1
vote
0answers
58 views

Rsyslogd - remove timestamp on certain logs

I'm trying to achieve the questioned here, but I need to discard the timestamp only on a specific log file. I.e. only /var/log/mylog.log should have no timestamps. Is that possible with rsyslogd?