Can we send vhots logs to a syslog server ?

Discussion in 'Installation/Configuration' started by cremos, Jan 10, 2022.

  1. cremos

    cremos Member

    Hello,
    First of all, I would like to thank the whole team for the work done and wish you a very happy new year.
    Can we send the photo logs to a syslog server?
    I also have another question regarding logs.
    Is it normal to have in the logs of the directory Ispconfig / var / log / ispconfig / httpd / in IP form an access.log which contains only "GET" commands.
    Code:
    /var/log/ispconfig/httpd/77.193.33.47/access.log
    20211203-access.log
    
    access.log -> 20211203-access.log
    - - [03/Dec/2021:13:27:05 +0100] "GET /wp-content/uploads/Concours-decriture-2020-2021-recueil-categorie-BD.pdf HTTP/1.1" 301 605 "https : //www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, comme Gecko) Chrome/96.0.4664.45 Safari/537.36"
    I also have an error in the vhot logs.
    Note: The error log file is correct, but the access.log and hier-access.log files are empty.
    Code:
    lrwxrwxrwx 1 racine racine 19 nov. 9 10:41 access.log -> 20211109-access.log
    -rw-r--r-- 1 racine racine 143106 janv. 10 11:21 error.log
    -rw-r--r-- 1 root root 47145 janv. 1 00:02 error.log.10.gz
    -rw-r--r-- 1 racine racine 19174 déc. 31 00:03 error.log.11.gz
    lrwxrwxrwx 1 racine racine 54 nov. 10 00:03 hier-access.log -> /var/www/clients/client8/web84/log/20211109-access.log
    
    access.log: no such file or folder 
    yesterday-access.log: no such file or folder
    
    Thank you in advance for your answers.
     
    Last edited: Jan 10, 2022
  2. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    I think you mean vhost logs? You can configure your web server to do that, a quick search for "nginx log to syslog" or "apache log to syslog" will show how.
    The directories under /var/log/ispconfig/httpd/ are the requested hostname, so an ip address there would mean the ip were accessed directly, not via a hostname. It would be normal to only have GET commands logged there if there were no other requests made (eg. if any POST requests were made, those would also be logged, etc.).
    The access.log files are rotated by an ISPConfig cron job that runs at midnight, try editing /usr/local/ispconfig/server/lib/config.inc.php and set
    Code:
    $conf['log_priority'] = 0;
    Then see what shows up for log rotation in /var/log/ispconfig/cron.log tonight. (You could check that log file now, but setting the log priority might get more info.)
     

Share This Page