can’t find apache 408 in logs

I have logwatch report thousands of HTTP requests with a request url of “null” to have resulted in a 408 error. But I can’t find them in any of my logs. I tried cd /var/log/apache2 grep “HTTP/1\.1. 408″ * and grep ‘HTTP/1\.1″ 408” * Conversely grep “HTTP/1\.1. 200” * shows results. Any idea how to … Read more

Is there a way to see which process invoked a shell script?

Is there a possibility so see from some unix log file what process have invoked a bash/ksh shell script or is this shell script invoked manually from command line? So is there some log file which stores this kind of history automatically? Answer Unless you have audit logging enabled there isn’t typically any way to … Read more

bash + write standard output and error to both logs

in my bash script I use the following approach in order to write every thing from standard output and standard error to log.txt export LOG=/tmp/installation/log.txt exec > $LOG 2>&1 so everything is writing to /tmp/installation/log.txt but how to do the writing to two different logs path lets say I want to write the same standard … Read more

Find pattern on multiple lines within BIG log files

To investigate within logs, I am trying to find the very first time a vulnerability in a workflow has been exploited. The pattern is on multiple lines. The pattern would be AAAAAAAAA BBBBBBBBB CCCCCCCCC The problem is that AAAAAAAAA or BBBBBBBBB or CCCCCCCCC Can be found anywhere indivdually in the log without showing the vulnerability; … Read more