# Log Analysis Basics 1.2 Guided Exercise **URL:** \ **Category:** SOC Analyst\ **Created:** [August 2, 2024, 2:41pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220 "2024-08-02T14:41:00Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![AccurateParakeet9052](https://forums.cybrary.it/user_avatar/forums.cybrary.it/accurateparakeet9052/32/11_2.png) [@AccurateParakeet9052](https://forums.cybrary.it/u/AccurateParakeet9052)\ **Post date:** [August 2, 2024, 2:41pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/1 "2024-08-02T14:41:00Z")
#### 1. What is the time stamp of the earliest record in the file web.log.2? ANS: 00:56:00 Above time stamp is the earlist in web.log.2 file but still it asking retry and submit ---
**Author:** ![WearyLadybug6239](https://forums.cybrary.it/user_avatar/forums.cybrary.it/wearyladybug6239/32/11_2.png) [@WearyLadybug6239](https://forums.cybrary.it/u/WearyLadybug6239)\ **Post date:** [August 10, 2024, 4:30pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/2 "2024-08-10T16:30:55Z")
# Log Analysis Basics #### Which file in the Practice directory has the most lines? why is practice. log.2 wrong answer to this question ---
**Author:** ![Ghislainvieyra85](https://forums.cybrary.it/user_avatar/forums.cybrary.it/ghislainvieyra85/32/11_2.png) [@Ghislainvieyra85](https://forums.cybrary.it/u/Ghislainvieyra85)\ **Post date:** [September 12, 2024, 7:57pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/3 "2024-09-12T19:57:09Z")
same thing here, i don’t know ,im stuck. have found, check correctly the file list which is going to be auth.log.2 ---
**Author:** ![cybergeekwise](https://forums.cybrary.it/user_avatar/forums.cybrary.it/cybergeekwise/32/11_2.png) [@cybergeekwise](https://forums.cybrary.it/u/cybergeekwise)\ **Post date:** [October 9, 2024, 8:39am UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/4 "2024-10-09T08:39:13Z")
this is the earliest timestamp 00:13:00 recorded in web.log.2 file ---
**Author:** ![Liamreely1](https://forums.cybrary.it/user_avatar/forums.cybrary.it/liamreely1/32/11_2.png) [@Liamreely1](https://forums.cybrary.it/u/Liamreely1)\ **Post date:** [November 18, 2024, 11:05am UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/5 "2024-11-18T11:05:23Z")
I am stuck on the second question. I just want to know the answer as the entire lesson is just not working for me. I tried to type in the command /home/cybrary/Documents/Practice to get it into practise but it did not change it… ---
**Author:** ![Mentor09](https://forums.cybrary.it/user_avatar/forums.cybrary.it/mentor09/32/11_2.png) [@Mentor09](https://forums.cybrary.it/u/Mentor09)\ **Post date:** [January 26, 2025, 5:54pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/7 "2025-01-26T17:54:43Z")
I’m stuck here too, can’t possibly get the same answer with what it’s the command practice on the dashboard, can someone help me out here please ![Screenshot 2025-01-26 at 17.41.30](https://forums.cybrary.it/uploads/default/original/3X/a/7/a76ba9d7a562d8c5e40d91b78663bb8c7aa96d7d.jpeg) ---
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [January 26, 2025, 6:13pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/8 "2025-01-26T18:13:33Z")
It looks like the text broke in an unfortunate place, but there is a space between the cd command and the directory you want to go to: cd /hom/cybrary/Documents/Practice not cd/hom/cybrary/Documents/Practice ---
**Author:** ![Mentor09](https://forums.cybrary.it/user_avatar/forums.cybrary.it/mentor09/32/11_2.png) [@Mentor09](https://forums.cybrary.it/u/Mentor09)\ **Post date:** [January 27, 2025, 5:49pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/9 "2025-01-27T17:49:06Z")
Thanks, but on a contrary, there is no space there, kindly take a look at the screenshot once again ---
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [January 27, 2025, 6:48pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/10 "2025-01-27T18:48:34Z")
That may be, and if so, that is in error. You always have to have a space between cd and the place you want to go 🙂 ---
**Author:** ![Mentor09](https://forums.cybrary.it/user_avatar/forums.cybrary.it/mentor09/32/11_2.png) [@Mentor09](https://forums.cybrary.it/u/Mentor09)\ **Post date:** [January 27, 2025, 7:12pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/11 "2025-01-27T19:12:51Z")
Finally find a way to get it done ---
**Author:** ![CalmQuail2332](https://forums.cybrary.it/user_avatar/forums.cybrary.it/calmquail2332/32/33622_2.png) [@CalmQuail2332](https://forums.cybrary.it/u/CalmQuail2332)\ **Post date:** [January 27, 2025, 8:48pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/12 "2025-01-27T20:48:50Z")
Confirmed there’s a space there. You have to highlight the full line to see it. ![Screenshot 2025-01-27 at 3.45.59 PM](https://forums.cybrary.it/uploads/default/original/3X/c/0/c033a588663db62ea90c0a8b8ad655735e2c2f9d.png) Regardless, if you’re unfamiliar with the syntax of common Linux commands, we recommend completing Linux CLI Basics in the Foundations path before attempting any labs in the SOC Analyst, Penetration Tester, or Security Engineer paths! These paths all assume some light familiarity with command line navigation. ---
**Author:** ![Mentor09](https://forums.cybrary.it/user_avatar/forums.cybrary.it/mentor09/32/11_2.png) [@Mentor09](https://forums.cybrary.it/u/Mentor09)\ **Post date:** [January 27, 2025, 8:55pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/13 "2025-01-27T20:55:10Z")
Thank you, it’s even more than a space anyways ---
**Author:** ![EnviousPeafowl0641](https://forums.cybrary.it/user_avatar/forums.cybrary.it/enviouspeafowl0641/32/11_2.png) [@EnviousPeafowl0641](https://forums.cybrary.it/u/EnviousPeafowl0641)\ **Post date:** [February 17, 2025, 4:04pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/14 "2025-02-17T16:04:32Z")
I was so lost in this answer - I still do not see where auth.log.2 is listed in the search. I do not like that they have no way to contact for support. the lab is not efficient. I appreciate you answering this as I was down to the last 5 minutes of this activity. ---
**Author:** ![DeliberateJackal0107](https://forums.cybrary.it/user_avatar/forums.cybrary.it/deliberatejackal0107/32/11_2.png) [@DeliberateJackal0107](https://forums.cybrary.it/u/DeliberateJackal0107)\ **Post date:** [July 14, 2025, 6:17pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/15 "2025-07-14T18:17:39Z")
#### 3. What is the username of the account used for VPN authentications with the same source IP address as the “test” account(s)? Hide Hint ```auto •••••••.••••• ``` help me in topic Log Analysis Basic ---
**Author:** ![JosephWhite](https://forums.cybrary.it/user_avatar/forums.cybrary.it/josephwhite/32/2407_2.png) [@JosephWhite](https://forums.cybrary.it/u/JosephWhite)\ **Post date:** [July 14, 2025, 6:42pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/16 "2025-07-14T18:42:09Z")
Pay particular attention to Part 2, Step 3. Running a search for the IP address specified will reveal log records that include usernames. In addition to the vpn-related username that was surfaced in the previous step, there is only one new username that appears in the log records returned by your search. ---
**Author:** ![DeliberateJackal0107](https://forums.cybrary.it/user_avatar/forums.cybrary.it/deliberatejackal0107/32/11_2.png) [@DeliberateJackal0107](https://forums.cybrary.it/u/DeliberateJackal0107)\ **Post date:** [July 15, 2025, 9:10am UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/17 "2025-07-15T09:10:57Z")
The issue is commands are not showing any outputs, i manually opened all logs and checked all names with hint matching and non matching no awnser was right Then in part 3 step 3 and 4 i stucked ---
**Author:** ![DeliberateJackal0107](https://forums.cybrary.it/user_avatar/forums.cybrary.it/deliberatejackal0107/32/11_2.png) [@DeliberateJackal0107](https://forums.cybrary.it/u/DeliberateJackal0107)\ **Post date:** [July 15, 2025, 9:11am UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/18 "2025-07-15T09:11:59Z")
I was in there more than 5 hours wasted but couldn’t find ---
**Author:** ![CalmQuail2332](https://forums.cybrary.it/user_avatar/forums.cybrary.it/calmquail2332/32/33622_2.png) [@CalmQuail2332](https://forums.cybrary.it/u/CalmQuail2332)\ **Post date:** [July 15, 2025, 1:43pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/19 "2025-07-15T13:43:26Z")
Could you please provide screenshots demonstrating what you’re seeing (or not seeing)? ---
**Author:** ![NeighbouringHawk9702](https://forums.cybrary.it/user_avatar/forums.cybrary.it/neighbouringhawk9702/32/11_2.png) [@NeighbouringHawk9702](https://forums.cybrary.it/u/NeighbouringHawk9702)\ **Post date:** [July 28, 2025, 6:39pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/20 "2025-07-28T18:39:08Z")
¿Cuál es la marca de tiempo del registro más antiguo en el archivo web.log.2? 00:56:00 Tengo problema con está pregunta esá es la respuesta qué me sale pero la marca error, me podrían ayudar por favor ---
**Author:** ![CalmQuail2332](https://forums.cybrary.it/user_avatar/forums.cybrary.it/calmquail2332/32/33622_2.png) [@CalmQuail2332](https://forums.cybrary.it/u/CalmQuail2332)\ **Post date:** [July 28, 2025, 7:04pm UTC](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220/21 "2025-07-28T19:04:57Z")
Are you sure that’s the earliest record in the web.log.2 file? Or is it the last record? ![Screenshot 2025-07-28 at 3.04.43 PM](https://forums.cybrary.it/uploads/default/original/3X/a/9/a90313ee7b3804fd80a50e5e6cfcd8b767a29f85.jpeg) [Next page](https://forums.cybrary.it/t/log-analysis-basics-1-2-guided-exercise/231220.md?page=2)