flarum.log file does not exist

dragonandy

I install flarum using composer method installed into /var/www/flarum folder, Flarum is up and running on my server
The question is where is the flarum.log placed? or is a log file feature even implemented?
There is no such a flarum.log file in the folder /var/www/flarum/storage/logs
I tried touch and chown a flarum.log file and it doesn't work, not log out put in this file
I only find one post to discuss this and the codes it point to seens to have log register implemented

Here is my flarum info:

php flarum info
Flarum core 0.1.0-beta.8.1
PHP version: 7.2.15-0ubuntu0.18.04.2
Loaded extensions: Core, date, libxml, openssl, pcre, zlib, filter, hash, pcntl, Reflection, SPL, sodium, session, standard, mysqlnd, PDO, xml, apcu, apc, calendar, ctype, curl, dom, mbstring, fileinfo, ftp, gd, gettext, iconv, igbinary, imagick, intl, json, ldap, exif, mysqli, pdo_mysql, pdo_pgsql, pgsql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xmlreader, xmlwriter, xsl, yaml, zip, Zend OPcache
+----------------------------------+------------------+--------+
| Flarum Extensions                |                  |        |
+----------------------------------+------------------+--------+
| ID                               | Version          | Commit |
+----------------------------------+------------------+--------+
| flarum-approval                  | v0.1.0-beta.8    |        |
| flarum-bbcode                    | v0.1.0-beta.8    |        |
| flarum-emoji                     | v0.1.0-beta.8    |        |
| flarum-lang-english              | v0.1.0-beta.8    |        |
| flarum-flags                     | v0.1.0-beta.8.1  |        |
| flarum-likes                     | v0.1.0-beta.8.1  |        |
| flarum-lock                      | v0.1.0-beta.8    |        |
| flarum-markdown                  | v0.1.0-beta.8    |        |
| flarum-mentions                  | v0.1.0-beta.8.1  |        |
| flarum-statistics                | v0.1.0-beta.8    |        |
| flarum-sticky                    | v0.1.0-beta.8    |        |
| flarum-subscriptions             | v0.1.0-beta.8    |        |
| flarum-suspend                   | v0.1.0-beta.8    |        |
| flarum-tags                      | v0.1.0-beta.8.2  |        |
| csineneo-lang-simplified-chinese | v0.1.0-beta.8.25 |        |
+----------------------------------+------------------+--------+
Base URL: https://myflarum
Installation path: /var/www/flarum
Debug mode: off

needs help, thanks in advance

jordanjay29

dragonandy this should be okay, the log file won't exist until something goes wrong and needs to be logged. It's just an error log, so it's absence generally means your Flarum site hasn't encountered errors yet.

dragonandy

jordanjay29 got this. is there any configuration that i can switch from an error log to an event log? or a separate login log file?
Let's say there're some guys are brute force attacking the user passwords, I want to ban those user's ip with fail2ban.
What should I do

clarkwinkelmann

dragonandy no such log exists in core Flarum. You'd need an extension that records those additional events.

Or you might be able to implement the ban at the webserver user based on the urls ? I'm not familiar with those ip ban tools.

dragonandy

Thanks for the info clarkwinkelmann Okay. Is there any chances that flarum will implement a login event log feature?
Maybe I should start a post in the Feature tag?

clarkwinkelmann

dragonandy I think Flarum already ships with all the events and exceptions needed to watch those events. It's just a matter of subscribing/catching them from an extension.

One way to catch wrong logins could be to simply override the default login check by listening to CheckingPassword event and repeat the core logic there, and do something else with failed logins.

Or, alternatively, use a middleware to catch failed requests to /login.

I'm not sure if the linked GitHub issue has any implication on catching login fails, it's mostly about how formatting the error to the front-end user it seems.

dragonandy

I found this on github!
Is that indicate a separate log middleware (will it handles login fail? ) will come to flarum in 0.1.0-beta.10?

dragonandy

Thanks It's much clearer