Mission 293

Incident evidence bundle

Collect service, log, and network evidence in one drill.

Troubleshooting
8 minutes Advanced Lesson 293 of 360
systemctlgrepsstee
Lesson 293 of 360 0/360 lessons 0/17 missions Troubleshooting · 8 minutes
0%
Continue View profile
Ops lab terminal Training lab
New learnerrank 0XP 0%complete
learner@clairos:/home/learner $ Unix ops lab: type a command, press Enter
Instructions 8 minutes

Click any instruction for the command details, the why, and the common mistake to avoid.

Check nginx

Run systemctl status nginx.

systemctl status nginx
Find 404

Run grep 404 /var/log/nginx-access.log.

grep 404 /var/log/nginx-access.log
Capture listeners

Run ss -tulpn | tee lab/incident-listeners.txt.

ss -tulpn | tee lab/incident-listeners.txt
Lesson support

What to notice while you play.

Objective

Collect service, log, and network evidence in one drill.

Hint

Run the commands in order and compare the outputs.

Why it matters

Junior operators build confidence by gathering evidence before changing systems.

Common mistakes
  • Skipping the inspection step.
  • Assuming one command tells the whole story.
Reference

Commands in this lesson.

grep [-i] <text> <file>

Find literal text inside a file.

tee <file>

Write piped text to a lab file and keep it on screen.

systemctl status <service>

Inspect simulated service status.

ss|ip

Inspect simulated sockets and addresses.

ssh|scp|ssh-keygen

Practice SSH inspection and dry-run transfer shapes without network access.