Logwatch

From SME Server
Revision as of 00:13, 15 September 2012 by Timn (talk | contribs) (Added categorisation as listed on SME 8 Contribs QA page)
Jump to navigationJump to search

logwatch is a program that will analyze the server logs to detect attempts unsuccessful authentication for example. All logs will be monitored, and an email summarizing the full report will be sent to the administrator of the Sme (admin) every night

yum --enablerepo=smecontribs install logwatch

then you can type this if you want a report lighter without the firewall reporting

echo 'Service = "-iptables"' >> /etc/logwatch/conf/logwatch.conf
echo 'Service = "-iptables-multi"' >> /etc/logwatch/conf/logwatch.conf
signal-event post-upgrade && signal-event reboot