Hello! I'm trying to figure out why Pi-Hole isn't logging DNS queries anymore, after my most recent update (I believe from 3.0.0 to 3.0.1. The query list is empty on the homepage, but it shows "Queries over the last 24 hours", but no query types over time, nor forward destinations over time. Top domains and top advertisers do appear, however..
I verified permissions are 644 (found that somewhere else on here), and removed /var/log/pihole.log, and then rebooted (which caused everything to reset and either show "---" or undefined% in the top colored rectangles), and FTL go offline...) After, permissions were 640 (-rw-r----), Changed them back to 644, and rebooted again. Now, I show numbers in the rectangles, only "Active" in the status (no mention about FTL), and nothing still in the query log...
I'm running this on a Debian Jessie VM sitting inside Hyper-V (not sure if that matters, but yea...)
Run pihole -d for a debug token.
Thank you for the quick reply!
Token is akk3lmdge0
Your debug log shows that queries are being logged to the log file. What is the output of these commands?
ls -al /var/log/pihole.log
telnet localhost 4711
>getallqueries
For the last command, that will be executed in the telnet session. If it returns a lot of info, you don't need to give the whole output.
That's the thing. Everything looks like it's logging correctly, except for the places I noted on the webUI.
ls -al /var/log/pihole.log:
-rw-r--r-- 1 dnsmasq root 524913 May 19 23:27 /var/log/pihole.log
telnet localhost 4711
getallqueries
returned:
.....etc
1495250953 IPv4 ssw.live.com 10.9.0.1 1
1495250954 IPv4 pollserver.lastpass.com 10.9.0.1 2
1495250954 IPv4 art-0.nflximg.net 10.9.0.1 2
1495250954 IPv4 art-2.nflximg.net 10.9.0.1 2
1495250957 IPv4 ichnaea.netflix.com 10.9.0.1 3
1495250959 IPv4 nrdp.nccp.netflix.com 10.9.0.1 3
1495250960 IPv4 appboot.netflix.com 10.9.0.1 3
1495250965 IPv4 settings-win.data.microsoft.com 10.9.0.1 1
1495250965 IPv4 secure.netflix.com 10.9.0.1 3
1495250969 IPv4 art-1.nflximg.net 10.9.0.1 2
1495250971 IPv4 river.data.ea.com 10.9.0.1 2
1495250975 IPv4 www.google.com 10.9.0.1 2
1495250975 IPv4 aviationweather.gov 10.9.0.1 2
1495250976 IPv4 art-0.nflximg.net 10.9.0.1 2
1495250976 IPv4 art-2.nflximg.net 10.9.0.1 2
1495250976 IPv4 api.openweathermap.org 10.9.0.1 2
1495250978 IPv4 www.example.com 10.9.0.1 3
1495250978 IPv6 www.example.com 10.9.0.1 3
1495250978 IPv4 www.example.net 10.9.0.1 3
1495250978 IPv6 www.example.net 10.9.0.1 3
1495250978 IPv4 www.example.org 10.9.0.1 3
1495250978 IPv6 www.example.org 10.9.0.1 3
1495250983 IPv4 api.wunderground.com 10.9.0.1 2
What does http://pi.hole/admin/api.php?getAllQueries get you on a client device (after signing in to the web interface)?
That returns, only two brackets "" without the quotes.
Viewed page source, same thing.
Did you open the web interface and sign in, then load the page?
Yup. I opened the web UI, signed in, loaded that page, and then went back to the webUI just to confirm I didn't get kicked out for some reason.
Are there any recent errors in /var/log/lightptd/error.log?
I tried cat /var/log/lightptb/error.log as well as sudo... but, no such file or directory.
Oh, spelling mistake. /var/log/lighttpd/error.log
That returned quite a bit...
I have restarted the server a few times manually.
2017-05-19 22:24:03: (mod_fastcgi.c.2702) FastCGI-stderr: PHP Warning: filesize(): stat failed for /var/log/pihole.log in /var/www/html/admin/settings.php on line 624
2017-05-19 22:24:07: (mod_fastcgi.c.2702) FastCGI-stderr: PHP Warning: filesize(): stat failed for /var/log/pihole.log in /var/www/html/admin/settings.php on line 624
2017-05-19 22:24:21: (mod_fastcgi.c.2702) FastCGI-stderr: PHP Warning: filesize(): stat failed for /var/log/pihole.log in /var/www/html/admin/settings.php on line 624
2017-05-19 22:24:25: (mod_fastcgi.c.2702) FastCGI-stderr: PHP Warning: filesize(): stat failed for /var/log/pihole.log in /var/www/html/admin/settings.php on line 624
2017-05-19 22:24:30: (server.c.1558) server stopped by UID = 0 PID = 1
2017-05-19 22:26:08: (log.c.164) server started
2017-05-19 22:31:53: (server.c.1558) server stopped by UID = 0 PID = 1
2017-05-19 22:32:27: (log.c.164) server started
2017-05-19 23:19:40: (mod_fastcgi.c.2702) FastCGI-stderr: PHP Warning: unlink(../custom_disable_timer): No such file or directory in /var/www/html/admin/api.php on line 46
Since FTL is returning the data, it is probably an error in the web PHP. @DL6ER might be able to help as well (getting late here).
Getting late here as well. Thank you very much so far! Should I try maybe just another install using the curl command?
Sure, or pihole -r
Darn. I ran that with the repair option, same thing.
We'll see what DL6ER says later then. I could use the reconfigure option, but not sure if you guys want to figure out what broke in the upgrade or not. And, it's late for me for today.
Thanks again!
I mean ... that sounds like not logged in, esp. since there seem to be no related lighttpd errors. Do you have any browser plugin that might be messing things up (like cookie blocker, content filter, etc.)?
If http://pi.hole/admin/api.php?getAllQueries does still not work, but http://pi.hole/admin/api.php?summaryRaw works for you - then it can only be an authentication issue. Please test both links.
Hi there!
The first URL still returns even after verifying that I'm logged into the webUI. The second URL shows
{"domains_being_blocked":106964,"dns_queries_today":8316,"ads_blocked_today":801,"ads_percentage_today":9,"unique_domains":811,"queries_forwarded":4516,"queries_cached":2999}
If it's an authentication issue, where would I correct it? Everything was working before I updated, and I didn't change any username/passwords for either the OS or Pi-Hole.
Okay, just to be definitely sure, could you temporarily disable the password for your web interface using
sudo pihole -a -p
without entering a password?
Then try http://pi.hole/admin/api.php?getAllQueries again and re-enable your password afterwards.
I looked into the code and cannot tell yet what is causing the problems - are you opening the API page in the very same browser you can also use to look at the dash board? What browser and which operating system is this?