View previous topic :: View next topic |
Author |
Message |
InsaneHamster Guru
Joined: 02 May 2003 Posts: 435
|
Posted: Sun Mar 19, 2006 2:15 am Post subject: reading logs securly |
|
|
i know how easy it is these days to be hacked so im wondering what is the best way to read and check my logs everyday
currently i just do a sudo tail /var/log/messages which of course isnt the best
and also to add i do not want to run apache and mysql inorder to read logs via web base.
thank you. |
|
Back to top |
|
|
JeliJami Veteran
Joined: 17 Jan 2006 Posts: 1086 Location: Belgium
|
Posted: Sun Mar 19, 2006 7:22 am Post subject: |
|
|
first, you would send your logs to different syslog servers, but this may be overkill
a first step could be the installation of logsentry
it runs a script every day, analyzing the log files, and emails the results
that would automate your current, manual, procedure _________________ Unanswered Post Initiative | Search | FAQ
Former username: davjel |
|
Back to top |
|
|
kg n00b
Joined: 17 May 2003 Posts: 55 Location: Not where I want to be
|
Posted: Sun Mar 19, 2006 7:53 pm Post subject: |
|
|
I'd also mention logwatch (it's in portage). Not currently using it, but did briefly in the past.
You definitely will get overwhelmed if you rely on doing it all manually.... _________________ If at first you don't succeed, try again. Then quit. No use being a damn fool about it. --W.C. Fields |
|
Back to top |
|
|
|