Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [logging]

Adding messages, mostly warnings and/or errors, to a log file.

0
votes
0answers
25 views

SSH doesnt update btmp or auth.log when user exists on system

Im not sure if ive encountered a bug or not.... Ive gone ahead and enabled the pam_lastlog.so showfailed in PAM and I can see its running properly when I authenticate to the system. My Issue is its ...
0
votes
1answer
15 views

Synergy keeps logging non-stop

i've been using synergy to use my desaktop's mouse &keyboard on my laptop when home. Now, it's been working really well for me, except that I've realized that the instance on my desktop will eat ...
3
votes
1answer
139 views

How to **really** suppress kernel messages during boot?

I have Ubuntu Server 18.04 LTS. I want to suppress kernel messages shown on console during boot. (The type of [0.1234] kernel message thing that floods the screen ). THIS DID NOT WORK: Changing /etc/...
0
votes
2answers
94 views

Unbound DNS sever Logging ERRORS

I have recently started using unbound dns. i have configured all the things i need properly. But the server doesnt log when i make a query. Also i have no errors in the unbound.conf file The ...
1
vote
2answers
144 views

rsyslog template date/time format with seconds

My current template configuration of rsyslog looks like this: /etc/rsyslog.d/00-samba-audit.conf template(name="sambalog" type="string" string="%$year%-%$month%-%$day% %$hour%:%$minute% %HOSTNAME% %...
0
votes
0answers
24 views

How to enable Debug logging for TCP stack in Ubuntu

We are facing an issue with Ubuntu server, what is happening is that any new TCP connection with the first SYN packet is getting rejected by our Ubuntu server with an immediate RESET, Wire shark does ...
0
votes
0answers
19 views

Creating and retaining audit log data for 6 months before deletion

Disclaimer: I'm not an accredited nor very experienced sysadmin but have been tasked with some sysadmin responsibilities Task: Find a way to log all account management activities (e.g., account ...
1
vote
0answers
66 views

How to move logs out of journalctl, to a file with daily rotation & archiving?

I have a particular custom service registered in systemd, which spews a lot of logs to stdout/stderr. I want to remove the logs from journalctl output (because they generate a lot of noise there, and ...
0
votes
0answers
16 views

gvfsd writes too much debug output into syslog

SOS! Somewhere I turned on debug output for gvfsd (org.gtk.vfs.Daemon), and now every 15 minutes or so it trashes syslog with long debug for connected Android devices. Honestly, I tried googling to ...
0
votes
0answers
19 views

Rsyslog Broken Messages Issue

I have problem with rsyslog configs. Problem is Rsyslog is breaking the log after 1024 length of charachters and put it in new log. actully this happend after a SPACE and Rsyslog cut the log at that ...
0
votes
0answers
10 views

Is it possible to force auditd to log messages sequentially?

Auditd generally logs messages together however messages from one event can be interleaved with messages from another, i.e.: type=SYSCALL msg=audit(1531510100.612:146): arch=c000003e ... type=SYSCALL ...
1
vote
0answers
66 views

Track all process activity in real or near real time on Linux

I want to track the activity of processes. For processes, forks, file access, etc. should be tracked. Also files, data transfers, authentication events, authorization events, and similar. It should ...
0
votes
1answer
72 views

User creation remote logging

I am trying to centralize logs from different server to one server. I can centralize logging information via adding auth.* @server_ip:port in /etc/rsyslog.conf from the clients, but now I don't ...
0
votes
1answer
28 views

can't find logs while copying files in usb

Where can I find logs for copying files from local to USB? I'm using GUI to copy files. OS:Ubuntu 16.04 LTS
1
vote
1answer
325 views

Ubuntu 16.04.4 LTS random freezes after few hours of uptime

Ubuntu has been freezing randomly for some time now. Usually after a freeze, the crash screen would be up and it would show the exec path as update-notifer. Today after 9 hours of uptime it froze ...
5
votes
1answer
636 views

Where do I find stderr logs?

I was sending a message to stderr with echo "Mayday!" 1>&2 Now I'm trying to find it in the logs but couldn't find it anywhere. It's not in /var/log/syslog and neither in journalctl, ...
0
votes
0answers
68 views

auth.log growing huge due to suspend.target

In a few days the auth.log on my Ubuntu 16.4.4 server has grown to 28 GB writing the following lines over and over again Apr 14 21:31:29 Cloud systemd-logind[924]: Suspending... Apr 14 21:31:29 Cloud ...
5
votes
1answer
123 views

How can I read and capture error messages that appear on the screen before login?

I am having errors pop up quickly (can't read them) before my login window appears. I can't find them in syslog. Is there some way I can figure out what these errors are?
1
vote
0answers
87 views

Daily compress log files not working

This is the log file I am using to compress log files on a daily basis. /home/ubuntu/logs/server.log { daily missingok rotate 1 compress create dateext dateyesterday ...
0
votes
1answer
118 views

logrotate weekly archiving empties out daily files

My aim is to maintain 4 days' worth of log files so that on the fifth day, a zip file with all four log files is created. The four log files created so far are deleted. This is my logrotate.conf: /...
1
vote
1answer
1k views

Kernel log flooded with “read cpu” lines

On my newly setup system 16.04.3 LTS (GNU/Linux 4.13.0-32-generic x86_64), the syslog is flooded with cryptic kernel read cpu messages. What is the reason for this and how can this be turned off? ...
0
votes
1answer
41 views

Tailing Apache Logs - What is the number after the IP address

I am tailing the Apache error logs on my VPS so I can watch the traffic go by. I have been under a DOS attack, or a heavy port scan. I have the apache logging level set to LogLevel Warn. What does the ...
0
votes
1answer
21 views

Monitor log file event it was deleted and created again

I do file monitor with help of command: tail -f foo.csv After logging program restart file is deleted and created new one with the same name. But monitor window stops showing records of newly ...
-3
votes
1answer
70 views

Where and how does Ubuntu log shellcode attacks?

If someone enters shell prompt (by exploiting an external shellcode and taking control of the system before running an exploit ) does Ubuntu log messages to /var/log/lastlog, /var/log/wtmp, /var/log/...
1
vote
0answers
246 views

System Freeze After Build Operations

I'm using Ubunut 17.10 on a Dell XPS 13 laptop. I'm experiencing system freezes after I build software. Typically my computer will freeze for anywhere between 2 - 30 seconds. My mouse and keyboard ...
2
votes
1answer
82 views

On Ubuntu Artful 17, as a priviledged user, how can I get an email (possible nightly) with information about - what GET requests were sent to port

On Ubuntu Artful 17, as a priviledged user, how can I get an email (possible nightly) with information about what GET requests were sent to port 80 who attempted ssh connections to port 22 after a "...
0
votes
0answers
33 views

Ubuntu-hosted hotspot with logging

I have an older system that I'd like to turn into a wireless hotspot with device and website logging. One option would be to couple a proxy server with access point software (Ubuntu default hotspot + ...
0
votes
1answer
452 views

How to hide the arguments sent to the executable from ps [duplicate]

I've written a script that uses ps -G <groupid> -o uid,cmd to log the commands that a certain group of the users of a system run in time. What I want to know is whether it's possible for the ...
1
vote
1answer
82 views

How to find what's dumping to syslog?

The /var/log/syslog file (Ubuntu 16.04LTS) is currently expanding rapidly, and when I check the log contents, it is entirely filled with: Dec 5 17:49:40 Desktop1 kernel: [54948.301365] IN=wlo1 OUT= ...
1
vote
0answers
281 views

Samba not starting after upgrade to 16.04, mostly a systemd question

Yeah, after upgrading to 16.04 smbd did not start because I still had security=share in the config file. That question is answered here Samba does not launch after upgrading to 16.04. But I have a ...
2
votes
0answers
102 views

How to stop Steam from cluttering /var/log/syslog?

I just installed Steam on a freshly installed 17.10 with vanilla gnome desktop on Xorg. now I have the following happening, when starting Steam (which works fine btw) I get the following entry in /var/...
0
votes
1answer
52 views

Package versions in dpkg.log

I'm trying to decipher the contents of /var/log/dpkg.log. For example this line: 2017-09-25 15:19:18 upgrade libpulsedsp:amd64 1:8.0-0ubuntu3.3 1:8.0-0ubuntu3.4 What do the two different versions (1:...
0
votes
0answers
373 views

How to redirect systemd started service output to a file?

I have just started playing with prometheus and installed it as a service. Initially I started it in a screen and let it run but I'd like to run it as a systemd managed service and thus would like ...
1
vote
1answer
109 views

logger -s prints <13> in Ubuntu 16 LTS

In former LTS releases, the logger -s command just printed the text to stderr: Ubuntu 14 LTS (package bsdutils, current version 1:2.20.1-5.1ubuntu20.9) and Ubuntu 12 LTS (package bsdutils, current ...
1
vote
1answer
98 views

leafnode fetchnews: received bogus greeting (498)

How do I run some sort of diagnostic to check the connection to an upstream leafnode NNTP server running on the same network? thufir@arrakis:~$ thufir@arrakis:~$ telnet 192.168.1.7 119 Trying 192....
1
vote
3answers
3k views

Why don't my iptables log?

I have a linux server running on Ubuntu 16.04. Today I installed PSAD, a Intrusion Detection System. PSAD works by analyzing the logfiles of iptables. So, first thing to do before using PSAD is ...
3
votes
1answer
572 views

ClamTk not showing scan results and history

Whenever I use ClamTk to scan folders, it won't show list of infected files after scanning is completed. What it shows is just a total number of scanned files and number of infected files. How can I ...
0
votes
0answers
1k views

rsyslog: log message from remote host to specific file

I am trying to log messages from a specific remote host to a separate log file (and only to that file). I tried this: # cat /etc/rsyslog.d/avs110door.conf if $fromhost == 'avs110' then /var/log/...
2
votes
1answer
755 views

Python log viewer with GUI?

I'm looking for some python log viewer where I can filter logs based on their level. I've found only one thing: Logview which would be great but links are dead and I didn't find it anywhere else. ...
2
votes
1answer
3k views

gnome-shell: High-CPU usage and huge syslog

My ubuntu-gnome installation in is giving me a headache... Sometimes (unfortunately I couldn't yet reproduce when) cpu-usage of the gnome-shell process hovers around 40-60% on my machine without doing ...
3
votes
3answers
838 views

Why do only some of my logs get rotated?

I'm using Ubuntu 14.04. I have the following in my /etc/logrotate.conf file ... /home/rails/myproject/log { daily rotate 3 compress delaycompress missingok ...
10
votes
2answers
7k views

Relationship of rsyslog and journald on Ubuntu 16.04

I am running what is a vanilla Ubuntu 16.04 server, and I'm trying to wrap my head around how logging is set up by default. I can see that both journald and rsyslog are installed and running, but it's ...
0
votes
1answer
348 views

Suricata IDS: No logs in /var/log/suricata

I recently installed Suricate (3.0) on Linux Ubuntu 16.04LTS, however after configuring the /etc/suricata/suricata-debian.yaml file and starting the service, no logs could be found in /var/log/...
2
votes
1answer
314 views

Lastlog not working properly

currently my lastlog on ubuntu 16.04.2 LTS (GNU/Linux 4.4.0-77-generic x86_64) is not showing all ssh-connects. This seems a bit wired to me. My deploy-user connects via jenkins ssh:notty. This ...
1
vote
0answers
71 views

how to log the ssh public key's label to auth.log

I was wondering if there was a way to log the label of an ssh public key to auth.log. I've given www-data only sftp access to the web directory, and use ssh keys to authorize a trusted user on my ...
0
votes
1answer
2k views

How to grant a java tool write permission to /var/log?

I'm running a java tool as a command line app using cronjob: java -jar /var/java/-myfile.jar By default I'm using logback and write to /var/log/mylogfile.log. Problem: the user running the jar has ...
3
votes
1answer
6k views

Systemd print logs to external log file

I have the following Systemd service script to run a Spring boot application- [Unit] Description=Upstart for Security After=network.target network-online.target Wants=network-online.target [Service]...
0
votes
0answers
136 views

Direct all output to logfile

Working in node, I have a bash script that acts as glue for my build and deployment process. It calls npm, gulp, the AWS cli, and docker as well as a number of standard command-line tools (sed, grep, ...
1
vote
0answers
44 views

Alternatives for Monitoring and logging changes anywhere in file system [Ubuntu 14.04] [duplicate]

I would like to monitor and log following changes in file system: Opening and closing of any file by any user. Creation/deletion of file by any user. Files downloaded by any user. After some ...
3
votes
1answer
987 views

How can I stop hv_utils from logging a message in kern.log + syslog 2000+ times a second? Kern.log 32G in size and syslog is 11G

I recently received a warning message from my Ubuntu 16.04.2 VM on Hyper-V that 99% of my disk is full. Upon further inspection I noticed that my /var/ directory was using over 108G of space and that ...