Server access logs.

[nerbonne]

Hi,

I want to know if there is someway to monitor all the traffic coming into a server. More specifically, I want to know what site is being accessed. If I run "tail -f var/log/httpd/access_log" there are entries, but it appears to be only logs for the main IP of the webserver. Virtual sites do not show up in the logs. All virtual sites get logged to /var/

http://www/vhosts/sitename.com/statistics/logs

So great, I have all these log files, but I want to monitor them all! and at the same time? Any suggestions?

 

[thedaver]

What do you mean "monitor"??? That many logs of continuous traffic is essentially unreadable in real time for a human. What are you after?

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[nerbonne]

Well, sometimes the load becomes high on the server. mysql and httpd process climb. I just want to be able to look quickl to see if it is legitimate usage, or if it is someone trying to run exploits on the server. All my sites are php driven, so I get alot of exploit attempts.

 

[lgarner]

I think you'll need to separate your site logs into their own, like /var/log/httpd/site1-access_log, etc.