Mission 192

Capstone log sweep

Sweep auth, nginx, and package logs for evidence.

Capstone labs
8 minutes Capstone Lesson 192 of 360
greptail
Lesson 192 of 360 0/360 lessons 0/17 missions Capstone labs · 8 minutes
0%
Continue View profile
Ops lab terminal Training lab
New learnerrank 0XP 0%complete
learner@clairos:/home/learner $ Unix ops lab: type a command, press Enter
Instructions 8 minutes

Click any instruction for the command details, the why, and the common mistake to avoid.

Find denied auth

Run grep denied /var/log/auth.log.

grep denied /var/log/auth.log
Read nginx errors

Run tail -n 2 /var/log/nginx-error.log.

tail -n 2 /var/log/nginx-error.log
Find package upgrades

Run grep upgrade /var/log/dpkg.log.

grep upgrade /var/log/dpkg.log
Lesson support

What to notice while you play.

Objective

Sweep auth, nginx, and package logs for evidence.

Hint

Run the commands in order and compare the outputs.

Why it matters

Junior operators build confidence by gathering evidence before changing systems.

Common mistakes
  • Skipping the inspection step.
  • Assuming one command tells the whole story.
Reference

Commands in this lesson.

grep [-i] <text> <file>

Find literal text inside a file.