Debug School

Deborah Mahima
Deborah Mahima

Posted on

Log analysis

1.Write down top 10 events in Windows and identify their event ID ?
104 Event Log was Cleared
4719 System audit policy was changed
4624 Successful account log on
4634 An account logged off
4722 A user account was enabled
4648 A logon attempt was made with explicit credentials
4719 System audit policy was changed.
4720 A user account was created

2.Write down top 10 events in Linux and identify their pattern and log linux ?
var/log/boot.log
/var/log/auth.log
/var/log/faillog
/var/log/yum.log
var/log/httpd/
/var/log/mail.log
/var/log/boot.log

3.Identify the log file in linux which log service
start|stop|enable|disable ?

systemctl start service
systemctl stop service
systemctl enable service
systemctl disable service

4.Identify the log file in linux which log process running or killed ?
Check in /var/log/kern.log

5.Identify the log file of apache and find out list of VERB and count of each using linux command?
Location of the Log Files By default on Debian-based distributions such as Ubuntu, access and error logs are located in the /var/log/apache2 directory.
On CentOS the log files are placed in /var/log/httpd directory.Reading and Understanding the Apache Log Files

Top comments (0)