Questions tagged [logging]
The act of recording actions, requests, and other meaningful data in a computer. Often used for troubleshooting kernels, servers, etc.
1,017
questions
0
votes
0answers
11 views
How to monitor Putty usage
I've windows jumphost which allows engineers to connect to customer environment.
On jump is putty, which is uses by huge amount of users and here is the problem - how to monitor who run the putty.exe (...
1
vote
0answers
11 views
Capture traffic on specific SFTP Port
I have configured my SFTP server to run on the default SSH port 22 and another port (X). I want to monitor the traffic on my server in the default port to check if anyone is still using port 22.
I ...
1
vote
2answers
27 views
What are the right logs to read for understanding the causes of crashes?
I have a laptop with Ubuntu 20.04.2 LTS, 64 bit.
From some time now, it suffers from inexplicable crashes. At random time, without any heads-up or warnings, the audio stops, the screen gets black, the ...
0
votes
0answers
22 views
Proxy probe requests filling up my log files and then my disk?
I have an Ubuntu/Apache 2 web server I set up recently. I quickly ran into a problem with proxy abuse, which I documented here:
I disallowed use of proxy capability on Ubuntu Apache 2 web server. How ...
1
vote
2answers
62 views
Slow excel document verbose status
I have inherited a set of large poorly optimised excel documents used to post process outputs from a bespoke matlab simulator and they are so slow. They're slow to open, recalculate, and save; and ...
0
votes
0answers
7 views
What's the effective size of all borgbackup archives
What is the effective size of the backup:
Original size Compressed size Deduplicated size
This archive: 12.53 GB 12.49 GB 1.62 kB
All archives: ...
0
votes
1answer
26 views
MacOS log each connection with related process
My new IDS is telling me that my host is behaving badly.
As I'm not sure of it, I'd need to investigate it further.
I'm working on a macOS Big Sur (11.2.1) host and, as soon as I receive a new ...
3
votes
0answers
36 views
How to get output to STDOUT in Rsync while only logging changes to “--log-file” the way Rsync 2.6.9 did with Rsync 3.x
As a longtime macOS user I have used the built-in/bundled rsync binary that has been stuck at version 2.6.9 for various licensing reasons.
I recently decided to start using modern rsync via Homebrew. ...
0
votes
0answers
10 views
CentOS 8 - Rsyslog rename logs
I want to rename logs that I get on my CentOS coming from other networking devices, but I am not sure how to do that. This is the template that I configured in rsyslog.config file:
$template ...
0
votes
0answers
44 views
Something cause BSOD. A device attached to the system is not functioning
For some time now I started getting BSOD screens. Just now after the one IRQL NOT LESS OR EQUAL, right after system rebooting I opened Event Viewer and the last one error message was:
The Network ...
1
vote
1answer
37 views
how to get print of ssh user logged in by password?
I want to know if it is possible to get the hash key fp from the ssh diaries for the ssh user login with a password, not a key. I see public key login keyprints recorded in the file, but no passwd ...
0
votes
0answers
6 views
Syslog forwarding in MAC OS Catalina
Could anyone please help me on how to forward all logs as syslog from MAC Catalina to my remote server . I tried using syslog.conf to forward logs but the logs are not forwarded properly. I didn't ...
0
votes
0answers
21 views
How to log disk i/o per user
In a program that I am coding, I want to calculate disk i/o (read and write operations, in bytes) during any specific time duration for each user in a Linux machine.
I think there is no straight ...
-3
votes
2answers
120 views
Have I been hacked?
I recently received my laptop from repair and I just had a hunch that something fishy might have happened so I checked the log files on Windows Event Viewer and it turns out that my laptop has been ...
2
votes
0answers
43 views
Rsyslog fills up disk - unexpected behaviour
I have a rsyslog that forwards messages to elasticsearch. It worked well for over a year but recently the disk starts to fill mysteriously until it reaches 100%.
When I restart the process the disk ...
0
votes
1answer
27 views
What could be a list of important configuration files and logs file on a Linux system that deserve to be monitored by a SIEM? [closed]
I am not a system engineer and not a security expert (I am more a software developer) but I am working on a project related to a SIEM installation (Wazuh). At the moment this installation have only a ...
0
votes
1answer
25 views
Where does VirtualBox (host application) store logs?
I have a super weird issue which I've been trying to investigate for hours now. When I attempt to open VirtualBox on a Windows 10 host, nothing happens. A couple of VirtualBox processes appear in Task ...
0
votes
1answer
13 views
Ansible Customizing a local log file that contains multiple tasks outputs from a playbook
In my playbook I have two major tasks one task that change the gateway last digit for Debian machines and the second one applies to Redhat machines everything works fine but to be able to trace the ...
1
vote
1answer
52 views
disable (or trim) logging of bytea requests in postgres
Our application store some big blob (bytea) in a separate database every 30 minutes. It's fine and we want to keep it like, this, but it's causing crazy logging:
2021-01-25 11:11:00 UTC postgres109432 ...
0
votes
0answers
15 views
How can I detect someone has changed Ubuntu Server's date time?
Is there any method to find the changes of the time in the ubuntu server?
Can we find when someone changes it?
0
votes
1answer
40 views
SFTP backup task got a network issue and cannot reconnect after on debian
I have got a problem with a scheduled task in PHP on my debian server.
Every night, I send a backup of data from server S1 to server S2. The two server are dedicated server but not host at the same ...
0
votes
0answers
43 views
xubuntu using hostapd and freeradius log
I want to show the log file of freeradius with good pass and bad pass when user is trying to connect.I found this: https://www.techonia.com/5767/log-authentication-requests-freeradius
I use
auth=yes
...
0
votes
1answer
455 views
PuTTy session cannot write session log
On my putty recently it stopped writing session logs and started giving this error:
Error writing session log (ASCII mode) to file: C:\Users\Documents\PUTTY\jump-01_113100.log
I do have configured ...
1
vote
1answer
102 views
How can I select which monitor to view on Google Remote Desktop?
I use Google Remote Desktop (Windows 7 client, Windows 10 server). The host has 2 monitors. When I connect to it, I see the 2 monitors: how can I select which monitor to view? Viewing 2 monitors at ...
2
votes
1answer
157 views
How to find when a user is started and ended a session on computer based on Windows Event Log?
As part of some research I need to collect working hours of all the workers in my company. I have no code execution of their PCs, but I can collected any type of event log from their computer.
I need ...
0
votes
1answer
388 views
'DisplaySessionContainer1' files inside ProgramData directory of C drive
There are about 100+ files named 'DisplaySessionContainer1' and 'DisplaySessionContainer1.log_backup1' in my 'C:\ProgramData' path. I cannnot find the reason where they are coming from. Please help me ...
0
votes
0answers
29 views
It's possible to fully disable windows logs? [duplicate]
I've configured auditpol auditpol /set /category:* /success:disable /failure:disable - the size of the logs has decreased, but I would like to know if it is possible to make them 0... For all channels:...
0
votes
0answers
13 views
tail -f * doesn't show all log changes
I have log folder with catalina and applications logs,
I want to view all logs changes/records when doing operation
But not all logs records are shown when using
tail -f *
Meaning it sometimes show ...
0
votes
1answer
18 views
prevent kernel message which appears on terminal screen /dev/tty1
Kernel debug level message
watchdog : BUG: soft lockup - CPU#0 stuck for 22s!
appears in my console(/dev/tty1) and I am trying to prevent it.
I tried following 3 methods but none of them worked:
I ...
0
votes
0answers
3 views
Verification steps from filebeat to logstash
I have a linux machine with a python application that generates json logs, some fields are not mandatory for every type of the log message. I've managed to configure filebeat to send data to logstash ...
0
votes
1answer
25 views
Router : logging port traffic
I have a router Fibergateway from my ISP provider and I would like to forward a large spectrum of external ports to a single port in a computer in my intranet. Does this make any sense? Is this ...
2
votes
1answer
705 views
How to stop journalctl showing audit logs and only keep them in file?
I would like to have all auditd logs only in it's own log file and keep my journalctl view less polluted with events that most of the time, are generated by my own actions (single-user/personal ...
0
votes
0answers
19 views
Log a TCP stream so it can be opened in Wireshark
I have an application that opens a TCP socket and sends and receives some data binary data. I would like the application to be able to log the sent and recieved data into a format that can be opened ...
0
votes
1answer
775 views
macOS Big Sur - high CPU usage before user login
Is there a way to log the system activities, such as errors or cpu usage data, before user login?
I'm using macOS Big Sur 11.0.1 on MacBook Pro 16 inch - 2019, and I found the machine is hot and the ...
0
votes
0answers
26 views
Where should I put a log file from my web application running as non-root user?
I make server applications in C# / .NET Core. They are both web applications and WebSocket services. I use Apache as reverse proxy to make them accessible from the Internet and to provide SSL ...
0
votes
0answers
32 views
How to edit file inplace
I am writing some logs in a file using logging module
#filename : demo.py
import logging
#other imports as well
logging.basicConfig(filename="myfile.log",
format='%(...
-1
votes
1answer
25 views
Is this kind of log system harmful to the hard disk?
Recently I'm learning the web development and I found the applications will write their running
logs into /tmp/appname/logs/a.log or /tmp/appname/logs/a.log.1 with the following format:
{"message&...
1
vote
3answers
35 views
PDF Document tracking & logging information
Once a PDF document has been sent through email, control is lost to the owner. Anyone could be viewing the data and the owner lost awareness about it. That's why as an owner of the document, I want to ...
0
votes
0answers
54 views
Using ROBOCOPY and appending log entries
I have been trying to use batch commands to backup my 29k image library to OneDrive. I started with COPY, then XCOPY and now ROBOCOPY.
ROBOCOPY seemed to do everything I want (copy updated files, ...
0
votes
0answers
19 views
What is the location of Alert logs in OSX Catalina?
Does MacOS log all system Alert messages somewhere? My partner saw an Alert during a Facetime call with a set of 'Don't Allow' and 'Okay' Response Buttons. She got rid of the Alert box without reading ...
0
votes
0answers
141 views
WIndows Terminal SSH Connection Logging
I have been advised to assess the usage of Windows Terminal in our environment which spans across four domains. As it is possible to use SSH to connect to different servers using Windows Terminal, our ...
1
vote
0answers
31 views
Windows EVTX Delete Via RecordId
I am trying to figure out a way to delete only a single entry (identified via EventRecordID, found in the Details > XML View) from a Windows Log file (.evtx extension).
Tried so far via PowerShell, ...
0
votes
0answers
9 views
Samba simple log
I would like samba to log this basic information:
Timestamp user hostname/ip action
Timestamp meaning the time the user did the action. User meaning the username. Hostname/IP meaning 192....
1
vote
0answers
78 views
Powershell to delete DNS logs (QRadar)
So I'm working to grab DNS logs from our Domain Controller for the purpose of sending them to our SIEM. This has been successfully, however, due to the limitations of Microsoft, it's required that the ...
0
votes
0answers
48 views
How can I start my network log in Safari right from the launch?
So far I have seen how I can use the Developer menu in Safari in order to analyze my network traffic and how I can preserve the logs. But I have to re-open my browser very often. Therefore I want to ...
0
votes
0answers
9 views
Analyze the programs/commands frequency since boot up (command vs. PID histogram)
I would like to see which program got a PID most frequently and second frequently in my system since the last reboot. If I run top now, I can see the PID column and the COMMAND column but only for ...
1
vote
0answers
62 views
Windows partition refusing to boot after cloning and extending
I recently bought a new, bigger and faster ssd. I needed to clone the disk and extend the windows partition, and did this with Acronis True Image, whose cloning function also happens to extend the ...
1
vote
1answer
30 views
Audit registry access or modification
I want to audit registry modifications, or attempts in case of failure. For that purpose, I have set the audit policy as follows:
auditpol /set /subcategory:"Registry" /success:enable /...
0
votes
0answers
6 views
It is possible to change the verbosity of the ODBC trace for the Access Driver?
I am trying to debug some errors in a software, which connects over the network to an .mdb file, using ODBC and the MS Access Database driver.
Tracing has been activated, but it generates a huge ...
0
votes
0answers
9 views
iptables - wrong date being logged
Running Ubuntu 16.04.3 with iptables logging. At the time of the original question (1 Oct 2020, 08:33:48 EDT), an otherwise correct log entry shows the date is July 23, and the time stamp doesn't seem ...
