Difference between revisions of "Logwatch"

From SME Server
m (Added categorisation as listed on SME 8 Contribs QA page)
Line 1: Line 1:
logwatch is a program that will analyze the server logs to detect attempts unsuccessful authentication for example.
+
'''LOGWATCH'''
All logs will be monitored, and an email summarizing the full report will be sent to the administrator of the Sme (admin) every night
+
Logwatch is a program that analyzes the server logs in /var/logs to detect errors and warnings such as, for exapmple, attempts unsuccessful of authentication, mail delivery errors ecc...
 +
All logs will be monitored, and an email summarizing the full report will be sent to the administrator of the Sme (admin) every night.
 +
To install the package:
  
 
  yum --enablerepo=smecontribs install logwatch
 
  yum --enablerepo=smecontribs install logwatch
Line 10: Line 12:
  
 
  signal-event post-upgrade && signal-event reboot
 
  signal-event post-upgrade && signal-event reboot
 +
 +
The program at the present time works without templates so all modification can be performed directly over conf files.
  
 
[[Category:Administration:Monitoring]][[Category:Contrib]]
 
[[Category:Administration:Monitoring]][[Category:Contrib]]

Revision as of 13:47, 3 December 2014

LOGWATCH Logwatch is a program that analyzes the server logs in /var/logs to detect errors and warnings such as, for exapmple, attempts unsuccessful of authentication, mail delivery errors ecc... All logs will be monitored, and an email summarizing the full report will be sent to the administrator of the Sme (admin) every night. To install the package:

yum --enablerepo=smecontribs install logwatch

then you can type this if you want a report lighter without the firewall reporting

echo 'Service = "-iptables"' >> /etc/logwatch/conf/logwatch.conf
echo 'Service = "-iptables-multi"' >> /etc/logwatch/conf/logwatch.conf
signal-event post-upgrade && signal-event reboot

The program at the present time works without templates so all modification can be performed directly over conf files.