Questions tagged [logging]
Adding messages, mostly warnings and/or errors, to a log file.
0
votes
2answers
50 views
Unbound DNS sever Logging ERRORS
I have recently started using unbound dns.
i have configured all the things i need properly. But the server doesnt log when i make a query.
Also i have no errors in the unbound.conf file
The ...
1
vote
2answers
51 views
rsyslog template date/time format with seconds
My current template configuration of rsyslog looks like this:
/etc/rsyslog.d/00-samba-audit.conf
template(name="sambalog" type="string"
string="%$year%-%$month%-%$day% %$hour%:%$minute% %HOSTNAME% %...
0
votes
0answers
14 views
How to enable Debug logging for TCP stack in Ubuntu
We are facing an issue with Ubuntu server, what is happening is that any new TCP connection with the first SYN packet is getting rejected by our Ubuntu server with an immediate RESET, Wire shark does ...
0
votes
0answers
19 views
How to enable MySQL's query log for non super user separately?
I know it can be done for super user by giving general_log=1 and setting general_log_file location, but i want to give separate log location for normal user, is there any way to do it?
0
votes
0answers
16 views
Creating and retaining audit log data for 6 months before deletion
Disclaimer: I'm not an accredited nor very experienced sysadmin but have been tasked with some sysadmin responsibilities
Task: Find a way to log all account management activities (e.g., account ...
1
vote
0answers
26 views
How to move logs out of journalctl, to a file with daily rotation & archiving?
I have a particular custom service registered in systemd, which spews a lot of logs to stdout/stderr. I want to remove the logs from journalctl output (because they generate a lot of noise there, and ...
0
votes
0answers
14 views
gvfsd writes too much debug output into syslog
SOS! Somewhere I turned on debug output for gvfsd (org.gtk.vfs.Daemon), and now every 15 minutes or so it trashes syslog with long debug for connected Android devices.
Honestly, I tried googling to ...
0
votes
0answers
17 views
Rsyslog Broken Messages Issue
I have problem with rsyslog configs. Problem is Rsyslog is breaking the log after 1024 length of charachters and put it in new log. actully this happend after a SPACE and Rsyslog cut the log at that ...
0
votes
0answers
10 views
Is it possible to force auditd to log messages sequentially?
Auditd generally logs messages together however messages from one event can be interleaved with messages from another, i.e.:
type=SYSCALL msg=audit(1531510100.612:146): arch=c000003e ...
type=SYSCALL ...
1
vote
0answers
63 views
Track all process activity in real or near real time on Linux
I want to track the activity of processes.
For processes, forks, file access, etc. should be tracked.
Also files, data transfers, authentication events, authorization events, and similar.
It should ...
0
votes
1answer
64 views
User creation remote logging
I am trying to centralize logs from different server to one server.
I can centralize logging information via adding auth.* @server_ip:port in /etc/rsyslog.conf from the clients, but now I don't ...
0
votes
1answer
26 views
can't find logs while copying files in usb
Where can I find logs for copying files from local to USB? I'm using GUI to copy files.
OS:Ubuntu 16.04 LTS
1
vote
1answer
283 views
Ubuntu 16.04.4 LTS random freezes after few hours of uptime
Ubuntu has been freezing randomly for some time now. Usually after a freeze, the crash screen would be up and it would show the exec path as update-notifer.
Today after 9 hours of uptime it froze ...
4
votes
1answer
350 views
Where do I find stderr logs?
I was sending a message to stderr with echo "Mayday!" 1>&2
Now I'm trying to find it in the logs but couldn't find it anywhere.
It's not in /var/log/syslog and neither in journalctl, ...
0
votes
0answers
55 views
auth.log growing huge due to suspend.target
In a few days the auth.log on my Ubuntu 16.4.4 server has grown to 28 GB writing the following lines over and over again
Apr 14 21:31:29 Cloud systemd-logind[924]: Suspending...
Apr 14 21:31:29 Cloud ...
5
votes
1answer
123 views
How can I read and capture error messages that appear on the screen before login?
I am having errors pop up quickly (can't read them) before my login window appears. I can't find them in syslog. Is there some way I can figure out what these errors are?
1
vote
0answers
77 views
Daily compress log files not working
This is the log file I am using to compress log files on a daily basis.
/home/ubuntu/logs/server.log {
daily
missingok
rotate 1
compress
create
dateext
dateyesterday
...
0
votes
1answer
95 views
logrotate weekly archiving empties out daily files
My aim is to maintain 4 days' worth of log files so that on the fifth day, a zip file with all four log files is created. The four log files created so far are deleted.
This is my logrotate.conf:
/...
1
vote
1answer
1k views
Kernel log flooded with “read cpu” lines
On my newly setup system 16.04.3 LTS (GNU/Linux 4.13.0-32-generic x86_64), the syslog is flooded with cryptic kernel read cpu messages.
What is the reason for this and how can this be turned off?
...
0
votes
1answer
41 views
Tailing Apache Logs - What is the number after the IP address
I am tailing the Apache error logs on my VPS so I can watch the traffic go by. I have been under a DOS attack, or a heavy port scan. I have the apache logging level set to LogLevel Warn. What does the ...
0
votes
1answer
20 views
Monitor log file event it was deleted and created again
I do file monitor with help of command:
tail -f foo.csv
After logging program restart file is deleted and created new one with the same name. But monitor window stops showing records of newly ...
-3
votes
1answer
66 views
Where and how does Ubuntu log shellcode attacks?
If someone enters shell prompt (by exploiting an external shellcode and taking control of the system before running an exploit ) does Ubuntu log messages to /var/log/lastlog, /var/log/wtmp, /var/log/...
1
vote
0answers
193 views
System Freeze After Build Operations
I'm using Ubunut 17.10 on a Dell XPS 13 laptop.
I'm experiencing system freezes after I build software. Typically my computer will freeze for anywhere between 2 - 30 seconds. My mouse and keyboard ...
2
votes
1answer
79 views
On Ubuntu Artful 17, as a priviledged user, how can I get an email (possible nightly) with information about - what GET requests were sent to port
On Ubuntu Artful 17, as a priviledged user, how can I
get an email (possible nightly) with information about
what GET requests were sent to port 80
who attempted ssh connections to port 22
after a "...
0
votes
0answers
31 views
Ubuntu-hosted hotspot with logging
I have an older system that I'd like to turn into a wireless hotspot with device and website logging. One option would be to couple a proxy server with access point software (Ubuntu default hotspot + ...
0
votes
1answer
411 views
How to hide the arguments sent to the executable from ps [duplicate]
I've written a script that uses ps -G <groupid> -o uid,cmd to log the commands that a certain group of the users of a system run in time.
What I want to know is whether it's possible for the ...
1
vote
1answer
73 views
How to find what's dumping to syslog?
The /var/log/syslog file (Ubuntu 16.04LTS) is currently expanding rapidly, and when I check the log contents, it is entirely filled with:
Dec 5 17:49:40 Desktop1 kernel: [54948.301365] IN=wlo1 OUT= ...
1
vote
0answers
230 views
Samba not starting after upgrade to 16.04, mostly a systemd question
Yeah, after upgrading to 16.04 smbd did not start because I still had security=share in the config file. That question is answered here Samba does not launch after upgrading to 16.04.
But I have a ...
0
votes
0answers
228 views
ssh auditing with bastion
I'm trying to set up a transparent bastion, for which some users should have access and some users can only ProxyJump through.
I'm archiving this with the following client
~/.ssh/config:
Host *....
2
votes
0answers
99 views
How to stop Steam from cluttering /var/log/syslog?
I just installed Steam on a freshly installed 17.10 with vanilla gnome desktop on Xorg. now I have the following happening, when starting Steam (which works fine btw) I get the following entry in /var/...
0
votes
1answer
40 views
Package versions in dpkg.log
I'm trying to decipher the contents of /var/log/dpkg.log. For example this line:
2017-09-25 15:19:18 upgrade libpulsedsp:amd64 1:8.0-0ubuntu3.3 1:8.0-0ubuntu3.4
What do the two different versions (1:...
0
votes
0answers
335 views
How to redirect systemd started service output to a file?
I have just started playing with prometheus and installed it as a service.
Initially I started it in a screen and let it run but I'd like to run it as a systemd managed service and thus would like ...
1
vote
1answer
97 views
logger -s prints <13> in Ubuntu 16 LTS
In former LTS releases, the logger -s command just printed the text to stderr:
Ubuntu 14 LTS (package bsdutils, current version 1:2.20.1-5.1ubuntu20.9) and
Ubuntu 12 LTS (package bsdutils, current ...
1
vote
1answer
96 views
leafnode fetchnews: received bogus greeting (498)
How do I run some sort of diagnostic to check the connection to an upstream leafnode NNTP server running on the same network?
thufir@arrakis:~$
thufir@arrakis:~$ telnet 192.168.1.7 119
Trying 192....
1
vote
3answers
2k views
Why don't my iptables log?
I have a linux server running on Ubuntu 16.04. Today I installed PSAD, a Intrusion Detection System.
PSAD works by analyzing the logfiles of iptables. So, first thing to do before using PSAD is ...
3
votes
1answer
536 views
ClamTk not showing scan results and history
Whenever I use ClamTk to scan folders, it won't show list of infected files after scanning is completed. What it shows is just a total number of scanned files and number of infected files.
How can I ...
0
votes
0answers
954 views
rsyslog: log message from remote host to specific file
I am trying to log messages from a specific remote host to a separate log file (and only to that file). I tried this:
# cat /etc/rsyslog.d/avs110door.conf
if $fromhost == 'avs110' then /var/log/...
2
votes
1answer
660 views
Python log viewer with GUI?
I'm looking for some python log viewer where I can filter logs based on their level.
I've found only one thing: Logview which would be great but links are dead and I didn't find it anywhere else.
...
2
votes
1answer
3k views
gnome-shell: High-CPU usage and huge syslog
My ubuntu-gnome installation in is giving me a headache... Sometimes (unfortunately I couldn't yet reproduce when) cpu-usage of the gnome-shell process hovers around 40-60% on my machine without doing ...
3
votes
3answers
730 views
Why do only some of my logs get rotated?
I'm using Ubuntu 14.04. I have the following in my /etc/logrotate.conf file ...
/home/rails/myproject/log {
daily
rotate 3
compress
delaycompress
missingok
...
9
votes
2answers
6k views
Relationship of rsyslog and journald on Ubuntu 16.04
I am running what is a vanilla Ubuntu 16.04 server, and I'm trying to wrap my head around how logging is set up by default. I can see that both journald and rsyslog are installed and running, but it's ...
0
votes
1answer
287 views
Suricata IDS: No logs in /var/log/suricata
I recently installed Suricate (3.0) on Linux Ubuntu 16.04LTS, however after configuring the /etc/suricata/suricata-debian.yaml file and starting the service, no logs could be found in /var/log/...
2
votes
1answer
265 views
Lastlog not working properly
currently my lastlog on ubuntu 16.04.2 LTS (GNU/Linux 4.4.0-77-generic x86_64) is not showing all ssh-connects. This seems a bit wired to me.
My deploy-user connects via jenkins ssh:notty. This ...
1
vote
0answers
64 views
how to log the ssh public key's label to auth.log
I was wondering if there was a way to log the label of an ssh public key to auth.log.
I've given www-data only sftp access to the web directory, and use ssh keys to authorize a trusted user on my ...
0
votes
1answer
1k views
How to grant a java tool write permission to /var/log?
I'm running a java tool as a command line app using cronjob:
java -jar /var/java/-myfile.jar
By default I'm using logback and write to /var/log/mylogfile.log.
Problem: the user running the jar has ...
3
votes
1answer
5k views
Systemd print logs to external log file
I have the following Systemd service script to run a Spring boot application-
[Unit]
Description=Upstart for Security
After=network.target network-online.target
Wants=network-online.target
[Service]...
0
votes
0answers
115 views
Direct all output to logfile
Working in node, I have a bash script that acts as glue for my build and deployment process. It calls npm, gulp, the AWS cli, and docker as well as a number of standard command-line tools (sed, grep, ...
1
vote
0answers
44 views
Alternatives for Monitoring and logging changes anywhere in file system [Ubuntu 14.04] [duplicate]
I would like to monitor and log following changes in file system:
Opening and closing of any file by any user.
Creation/deletion of file by any user.
Files downloaded by any user.
After some ...
3
votes
1answer
961 views
How can I stop hv_utils from logging a message in kern.log + syslog 2000+ times a second? Kern.log 32G in size and syslog is 11G
I recently received a warning message from my Ubuntu 16.04.2 VM on Hyper-V that 99% of my disk is full. Upon further inspection I noticed that my /var/ directory was using over 108G of space and that ...
1
vote
1answer
162 views
Best ways to manipulate system logs
I want to manipulate logs.
So far, for me the best way to clear system logs is:
truncate -s 0 /var/log/*log
I'm searching for the best ways to:
1 - Do the above periodically. I have already try ...
