Hi, swatch or maybe sec are the right tools.
It´s easy to integrate swatch into syslog (I prefer syslog-ng). Then you can (s)watch for expressions and release some events .
Chris
--On Montag, 19. Januar 2004 17:18 +0100 Michael Meckelein <[EMAIL PROTECTED]> wrote:
Hi all,
I want to monitor my debian machine. I found a really nice tool whowatch.
Now, in my environment is still a very important component left. I need a email notification if someone login by ssh/ftp/telnet and if someone request a special folder on my apache webserver (e.g. www.mydomain.com/special/ ). The notification should include the user's name, ip, timestamp and service name (ssh, telnet, ...).
Anyone know a tool that can handle my requirements?
By searching the web for monitoring tools, I have found swatch. I'm not really sure if it fits to me. The man page shows that I can monitor log files using reg ex to find events. Also email notification is available. But my feeling is that the configuration of swatch is a overhead in my case. And do I need for each service a separate configuration file, one for ssh, one for ftp, ...?
Please advice, is swatch the right one? Or if there another simple tool that can do what I want?
Thanks in advance. Michael
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
