• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Empty access_ssl_log with enabled pipelog and nginx

XAMeLeOH

New Pleskian
It seems like there is a problem with logging https connections through the pipelog along with enabled nginx. When the pipelog starts it retrieves the https port as an argument to parse shared access log and to separate secured and non-secured connections. By default LogFormat for access logs looks like this:
LogFormat "%v@@%p@@%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" plesklog
There is no problem until nginx is enabled. When nginx is enabled, Plesk changes apache2 http port from 80 to 7080 and https port from 443 to 7081.
Since %p means canonical port which is 443 for any secured virtual host and 80 for non-secured, pipelog receives something like this for secured connections:
somehost.example.com@@443@@127.0.0.1 - - [21/Feb/2013:18:59:56 +0700] "GET /nonexist.html HTTP/1.0" 404 1269 "-" "Wget/1.13.4 (linux-gnu)"
Pipelog assumes this is a non-secured connection, 'cause for secured connections port 7081 should be used.
The result is all access_ssl_log files are empty and access_log files contain records about both http and https connections.

As a workaround for this you should create custom template file and replace @@%p@@ with @@%{local}p@@ - which means local port instead of canonical.

Here is example of how to do this:

cd /opt/psa/admin/conf/templates
mkdir custom
cat default/server.php | sed 's/%v@@%p@@/%v@@%{local}p@@/g' > custom/server.php
 
Back
Top