On Tue, 2006-08-22 at 21:04 -0500, Troy Curtis Jr wrote: > Logwatch is really designed to be run as a cronjob which sends you an > email after it has parsed through your logs. The configuration for > logwatch is located in the /etc/log.d/ directory. In that directory > you will find many scripts and configuration options for a wide range > of different log files. You will want to start with > /etc/log.d/conf/logwatch.conf. By default it send the email message > with the log analysis to root (you can set it to whatever you like if > you have your mailer configured correctly). > > You should probably get a meaningful analysis with all the defaults, > just check your root accounts mail. > > I have been using logwatch for many months now and have been very > happy with it. Hope this helps point you in the right direction. > (Also check /etc/cron.daily/logwatch for the default cronjob). > > Troy > I've been having a little trouble with the logwatch script on my server box; particularly the FTP section. If there is nothing for FTP in the logs for the current day, and there was in the same date a year ago, it shows the activity from a year ago. I use logrotate and have logs going back quite awhile - I guess that's where it's getting the informationf from. It's just been doing that for about a month now. I haven't gotten around to looking at the logwatch config yet. It kinda freaked me out the first time it happened, until I looked at the dates. Just this morning, my logwatch was dated August 22, 2006, but it had records of files uploaded with my account from Aug 22, 2005... > BTW the obfuscated perl email address that gentux uses has to be the > coolest sig ever! > > > On 8/22/06, Grant <[EMAIL PROTECTED]> wrote: > > > > Does anyone know of a practical way to review all the various logs on > > > > the system each day? Does it just come down to a brisk scroll through > > > > the previous day's rotated logs? > > > > > > > > > > Isn't that why logwatch was created? > > > > I emerged logwatch, but even though the man pages reference the > > command 'logwatch' it is a 'command not found'. I ran 'logwatch.pl' > > which I spotted from the emerge's output, but there was no ouput from > > that script at all. > > > > - Grant > > -- > > gentoo-user@gentoo.org mailing list > > > > > > > -- > "Beware of spyware. If you can, use the Firefox browser." - USA Today > Download now at http://getfirefox.com > Registered Linux User #354814 ( http://counter.li.org/)
-- gentoo-user@gentoo.org mailing list
