Ubuntu 14.04. auth.log deletedMissing logs - Tomcat 5.5 + Ubuntu 8.04/var/log/auth.log getting too big, records every minutes?/var/log/auth.log not logging failed ssh attemptsauth.log being filled by pointless logscentos cron logs are not executedUbuntu 14.04 System LoggingMySQL exits without any outputIs /var/log/auth.log incomplete a symptom of unauthorized access?Why is my auth.log file empty?nohup multiple sequential commands not logging output
Is Big Ben visible from the British museum?
How to handle professionally if colleagues has referred his relative and asking to take easy while taking interview
Can I pay my credit card?
How can I fix the label locations on my tikzcd diagram?
Why would you put your input amplifier in front of your filtering for and ECG signal?
Repairing the headers of phylip bioinformatics files to accurately reflect the updated number of samples in the file(s)
Why does the U.S military use mercenaries?
Why does string strummed with finger sound different from the one strummed with pick?
When the match time is called, does the current turn end immediately?
How can I make dummy text (like lipsum) grey?
What are the effects of eating many berries from the Goodberry spell per day?
Who is frowning in the sentence "Daisy looked at Tom frowning"?
Why do galaxies collide?
How to know the path of a particular software?
Have there been any examples of re-usable rockets in the past?
Why does Taylor’s series “work”?
Given 0s on Assignments with suspected and dismissed cheating?
Why did nobody know who the Lord of this region was?
Failing students when it might cause them economic ruin
How could it be that 80% of townspeople were farmers during the Edo period in Japan?
Why would company (decision makers) wait for someone to retire, rather than lay them off, when their role is no longer needed?
Physically unpleasant work environment
Is it standard for US-based universities to consider the ethnicity of an applicant during PhD admissions?
Promotion comes with unexpected 24/7/365 on-call
Ubuntu 14.04. auth.log deleted
Missing logs - Tomcat 5.5 + Ubuntu 8.04/var/log/auth.log getting too big, records every minutes?/var/log/auth.log not logging failed ssh attemptsauth.log being filled by pointless logscentos cron logs are not executedUbuntu 14.04 System LoggingMySQL exits without any outputIs /var/log/auth.log incomplete a symptom of unauthorized access?Why is my auth.log file empty?nohup multiple sequential commands not logging output
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
the log file auth.log has dissappeared on my ubuntu 14.04 server.
Fail2ban log says that suddenly the file was gone:
2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36
2016-04-17 01:27:51,182 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
2016-04-17 01:27:51,185 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
and fail2ban service finally went idle.
How can I recreate auth.log and mail.log and even more important does anybody have an idea how this could have happened? Thanks in advance for any tips.
logging
asked Apr 17 '16 at 17:28
miragemirage
1084
add a comment |
the log file auth.log has dissappeared on my ubuntu 14.04 server.
Fail2ban log says that suddenly the file was gone:
2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36
2016-04-17 01:27:51,182 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
2016-04-17 01:27:51,185 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
and fail2ban service finally went idle.
How can I recreate auth.log and mail.log and even more important does anybody have an idea how this could have happened? Thanks in advance for any tips.
logging
asked Apr 17 '16 at 17:28
miragemirage
1084
add a comment |
the log file auth.log has dissappeared on my ubuntu 14.04 server.
Fail2ban log says that suddenly the file was gone:
2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36
2016-04-17 01:27:51,182 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
2016-04-17 01:27:51,185 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
and fail2ban service finally went idle.
How can I recreate auth.log and mail.log and even more important does anybody have an idea how this could have happened? Thanks in advance for any tips.
logging
asked Apr 17 '16 at 17:28
miragemirage
1084
the log file auth.log has dissappeared on my ubuntu 14.04 server.
Fail2ban log says that suddenly the file was gone:
2016-04-16 21:59:56,735 fail2ban.actions: WARNING [ssh] Ban 192.169.189.36
2016-04-17 01:27:51,182 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
2016-04-17 01:27:51,185 fail2ban.filter : ERROR Unable to get stat on /var/log/auth.log because of: [Errno 2] No such file or directory: '/var/log/auth.log'
and fail2ban service finally went idle.
How can I recreate auth.log and mail.log and even more important does anybody have an idea how this could have happened? Thanks in advance for any tips.
logging
logging
asked Apr 17 '16 at 17:28
miragemirage
1084
asked Apr 17 '16 at 17:28
miragemirage
1084
edited Apr 17 '16 at 17:54
mirage
asked Apr 17 '16 at 17:28
miragemirage
1084
asked Apr 17 '16 at 17:28
miragemirage
1084
asked Apr 17 '16 at 17:28
miragemirage
1084
1084
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
You could recreate these files with following commands:
touch /var/log/auth.log && chmod 640 /var/log/auth.log && chown syslog:adm /var/log/auth.log
touch /var/log/mail.log && chmod 640 /var/log/mail.log && chown syslog:adm /var/log/mail.log
It's hard to say why the files got deleted. I have never experienced that. Maybe it could be the log-rotation if you have modified it recently.
answered Apr 17 '16 at 17:55
sanderpsanderp
742
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
add a comment |
For me, only the following worked:
/etc/init.d/rsyslog restart
answered May 5 at 10:46
agoldevagoldev
1112
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f770984%2fubuntu-14-04-auth-log-deleted%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
You could recreate these files with following commands:
touch /var/log/auth.log && chmod 640 /var/log/auth.log && chown syslog:adm /var/log/auth.log
touch /var/log/mail.log && chmod 640 /var/log/mail.log && chown syslog:adm /var/log/mail.log
It's hard to say why the files got deleted. I have never experienced that. Maybe it could be the log-rotation if you have modified it recently.
answered Apr 17 '16 at 17:55
sanderpsanderp
742
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
add a comment |
You could recreate these files with following commands:
touch /var/log/auth.log && chmod 640 /var/log/auth.log && chown syslog:adm /var/log/auth.log
touch /var/log/mail.log && chmod 640 /var/log/mail.log && chown syslog:adm /var/log/mail.log
It's hard to say why the files got deleted. I have never experienced that. Maybe it could be the log-rotation if you have modified it recently.
answered Apr 17 '16 at 17:55
sanderpsanderp
742
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
add a comment |
You could recreate these files with following commands:
touch /var/log/auth.log && chmod 640 /var/log/auth.log && chown syslog:adm /var/log/auth.log
touch /var/log/mail.log && chmod 640 /var/log/mail.log && chown syslog:adm /var/log/mail.log
It's hard to say why the files got deleted. I have never experienced that. Maybe it could be the log-rotation if you have modified it recently.
answered Apr 17 '16 at 17:55
sanderpsanderp
742
You could recreate these files with following commands:
touch /var/log/auth.log && chmod 640 /var/log/auth.log && chown syslog:adm /var/log/auth.log
touch /var/log/mail.log && chmod 640 /var/log/mail.log && chown syslog:adm /var/log/mail.log
It's hard to say why the files got deleted. I have never experienced that. Maybe it could be the log-rotation if you have modified it recently.
answered Apr 17 '16 at 17:55
sanderpsanderp
742
answered Apr 17 '16 at 17:55
sanderpsanderp
742
answered Apr 17 '16 at 17:55
sanderpsanderp
742
answered Apr 17 '16 at 17:55
sanderpsanderp
742
742
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
add a comment |
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
Thank you! This worked perfectly. Both files are there again.
– mirage
Apr 17 '16 at 17:57
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
NP! I'm glad that I could help.
– sanderp
Apr 17 '16 at 18:00
add a comment |
For me, only the following worked:
/etc/init.d/rsyslog restart
answered May 5 at 10:46
agoldevagoldev
1112
add a comment |
For me, only the following worked:
/etc/init.d/rsyslog restart
answered May 5 at 10:46
agoldevagoldev
1112
add a comment |
For me, only the following worked:
/etc/init.d/rsyslog restart
answered May 5 at 10:46
agoldevagoldev
1112
For me, only the following worked:
/etc/init.d/rsyslog restart
answered May 5 at 10:46
agoldevagoldev
1112
answered May 5 at 10:46
agoldevagoldev
1112
answered May 5 at 10:46
agoldevagoldev
1112
answered May 5 at 10:46
agoldevagoldev
1112
1112
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f770984%2fubuntu-14-04-auth-log-deleted%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
