Logwatch
Jump to navigation
Jump to search
logwatch is a program that will analyze the server logs to detect attempts unsuccessful authentication for example. All logs will be monitored, and an email summarizing the full report will be sent to the administrator of the Sme (admin) every night
yum --enablerepo=smecontribs install logwatch
then you can type this if you want a report lighter without the firewall reporting
echo 'Service = "-iptables"' >> /etc/logwatch/conf/logwatch.conf echo 'Service = "-iptables-multi"' >> /etc/logwatch/conf/logwatch.conf
signal-event post-upgrade && signal-event reboot