Tag Info

Hot answers tagged

196

On a default installation the cron jobs get logged to /var/log/syslog You can see just cron jobs in that logfile by running grep CRON /var/log/syslog If you haven't reconfigured anything,the entries will be in there.


60

You can create a cron.log file to contain just the CRON entries that show up in syslog. Note that CRON jobs will still show up in syslog if you follow the following directions. Open the file /etc/rsyslog.d/50-default.conf Find the line that starts with: #cron.* uncomment that line, save the file, and restart rsyslog: sudo service rsyslog ...


54

All login attempts are logged to /var/log/auth.log. 1. Filter for brute-force interactive SSH logins Open a terminal, and type the below; if it's longer than 1 page you will be able to scroll up and down; type q to exit: grep sshd.\*Failed /var/log/auth.log | less Here's a real example from one of my VPSs: Aug 18 11:00:57 izxvps sshd[5657]: Failed ...


52

You can check the installer logs and dates at: /var/log/installer A quick way to find the date through the command line would be by running: ls -l /var/log/installer


50

/var/log/messages has been deleted from Natty. You can find the same info in /var/log/syslog. Note that everything logged to messages was also logged to syslog.


43

By default, /var/log/apache2/error.log. This can be configured in /etc/php5/apache2/php.ini.


33

If you use ext2/ext3/ext4 and formatted the disk when you installed you can do this nifty trick. sudo dumpe2fs /dev/sda1 | grep 'Filesystem created:' You might have to change the /dev/sda1 to reflect your setup. Relaying on the date of files, even the "creation time" (mtime) can give errors since upgrading packages might have replaced the file and made a ...


30

All log files are located in /var/log directory. In that directory, there are specific files for each type of logs. For example, system logs, such as kernel activities are logged in syslog file. Some of the most common log files in that directory is : In directory apt there is a file history.log which saves all the package installation and removal ...


28

tail has the -f option: From the man page: -f, --follow[={name|descriptor}] output appended data as the file grows; -f, --follow, and --follow=descriptor are equivalent Thus if you type: tail -f [path_and_name_of_logfile] - you will see the output in the terminal as the log file itself is appended to. N.B. ...


27

I would argue that monitoring logs is a weak solution especially if you have a weak password on an account. Brute attempts often try at least hundreds of keys per minute. Even if you have a cron job set to email you of brute attempts, it could be hours before you get to your server. If you have a public-facing SSH server, you need a solution that kicks in ...


21

Sometimes it can be useful to continuously monitor it, in that case: tail -f /var/log/syslog | grep CRON


16

Does Ubuntu log when USB devices are connected? Yes, Ubuntu logs when a USB device is connected. The file is /var/log/syslog. You can also view it by issuing the command dmesg -c or graphically using Log file viewer. Does this file deleted upon shutdown? No, This log does not get wiped upon shutdown. But after a size limit is reached these are rotated, ...


14

While tail is certainly the usual way to do this, it should be noted that less has the same feature and is sometimes more usefull. If you opened a file with less then you can press Shift + F to have it follow the file (i.e. it will display new lines, just as tail -f does). You can exit this mode with Ctrl + C You can also start less with the +F option, in ...


13

When you are ready to start recording a log file, type: script screen.log Now, until you stop the script, all input and output in the Terminal will be stored in screen.log. When you are done, just type: exit Your screen.log file will be in your Home folder (/home/user). This will do exactly what you are looking for. Source: Ubuntu Guide - How To Log ...


12

Ubuntu 11.04 installs rsylogd rather than syslogd which Firestarter was expecting. rsyslogd is configured using the file /etc/rsyslog.d/50-default.conf. You can edit this file gksu gedit /etc/rsyslog.d/50-default.conf and change the lines commented out that create the relevant logfile #*.=info;*.=notice;*.=warn;\ # auth,authpriv.none;\ # ...


11

If the machine was shutdown properly then there must be a shutdown log logged in kern.log file in /var/log directory. After a shutdown whenever a normal boot occurs the OS writes the log for the same in kern.log. Hence every boot log must be preceded by a shutdown log if the booting and shutdown process was normal. Whenever a normal shutdown occurs ...


11

The term "canary" as used here comes from coal mining originally. Coal miners used canaries to detect dangerous gases (if the canary they carried with them died, they knew they had to get out of the shaft/mine ASAP). As a result the term "canary" is now often used for anything that you use to get an (early) warning about a dangerous situation. In this ...


11

You can install the package indicator-notifications which keeps track of notifcations that you receive. You can install with the following sudo add-apt-repository ppa:jconti/recent-notifications sudo apt-get update sudo apt-get install indicator-notifications You'll have to log out and log back in. It shows up as a mailbox in the top panel and turns green ...


10

You can find the Network Manager logs in /var/log/syslog, which acts as a catch-all for log messages (unless you have changed rsyslog's default configuration).


10

If it really is a kernel panic then it won't be written into a log via normal methods. Since the kernel has at this point crashed, writing into the filesystem is a risky operation - not much of the kernel can be trusted anymore, so writes into logs might actually be spewing random crap over your bootloader! Instead, you can dump the contents of memory into ...


10

Where most of log files located: /var/log/ Log filename: Xorg.0.log Xorg.1.log etc... Update: You can check out the log files: Click on System menu > Choose Administration > System Log or Applications > System Tool > Log File Viewer


9

Check this settings in PHP.INI: error_reporting = E_ALL | E_STRICT (as recommended for development in php.ini) error_log = /var/log/php_errors.log Then create log file manually touch /var/log/php_errors.log chown www-data: /var/log/php_errors.log chmod +rw /var/log/php_errors.log Now you can view PHP errors by this way tail /var/log/php_errors.log ...


9

Multitail is what you searching for: it has tons of features. look here for some screenshots. Also have a look at this question over there at serverfault.com


9

All your system logs in Ubuntu are handled by rsyslog which keeps its configuration in /etc/rsyslog.conf and /etc/rsyslog.d/. For more information on how to configure rsyslog and the possible options visit the rsyslog.conf man page. Opening /etc/rsyslog.d/50-default.conf you can see that one of the lines contains *.*;auth,authpriv.none ...


9

These logs are generated by the kernel, so they go to the file that receives kernel logs: /var/log/kern.log. If you want to redirect these logs to a different file, that can't be done through iptables. It can be done in the configuration of the program that dispatches logs: rsyslog. In the iptables rule, add a prefix that isn't used by any other kernel log: ...


8

First here is a list of some of the common log files and what they contain: /var/log/messages : General message and system related stuff /var/log/auth.log : Authenication logs. /var/log/kern.log : Kernel logs. /var/log/cron.log : Cron daemon logs. /var/log/Xorg.0.log : Log for the X server. ~/.xsession-errors : Logs related to the last X session ...


8

1. Step: Find out what problem you actually have When your filesystem is unexpectedly full, there are a lot of possible causes. See Eliah Kagan's answer for some more about this. In the vast majority of cases it should be easy to identify (and eventually repair) the real cause, so reformatting/reinstalling would not be necessary. So the first step is to ...


8

The area I look at is: sudo cat /var/log/kern.log | grep usb The output would look like the following: May 25 07:38:51 mycomputer kernel: [ 607.296847] scsi7 : usb-storage 3-1:1.0 May 25 07:38:54 mycomputer kernel: [ 609.790892] usb 3-2: new high-speed USB device number 3 using xhci_hcd May 25 07:38:54 mycomputer kernel: [ 609.817462] usb 3-2: ep 0x81 ...


8

Your cellphone video camera. Seriously. It's not physically possible for linux to record a log after the "Unmounting local filesystems" message. And for some reason, Ubuntu Oneiric never records any of the shutdown messages, even errors warnings and "[fail]s", at least not anywhere I can find them using sudo grep. If you have the plymouth splash screen on ...



Only top voted, non community-wiki answers of a minimum length are eligible