Logwatch and Gentoo
Today I have upgraded logwatch package on my VPS server to the latest version (7.1).
Most noticeable change in this version comparing to previous (6.0.2) installed on my system – whole new directory structure (see Details on how to create your own filter, create local customizations, etc for more details).
Logwatch is very useful tool if you want to know what your server is doing the whole day. It provides nice summary of log of every service, like list of emerged packages, number of mails sent by your mail server, number of failed authentication attempts through SSH, summary of served by apache files, free disk space, information about possible attacks on your server by using known hacks and a lot more.
Unfortunately default configuration of just installed package is not compliant with default logfiles used by gentoo and some services are missing in result report. logwatch provides easy way to override default configuration in /etc/logwatch/conf/override.conf file. Below is file that I am using on my gentoo server:
logwatch: Detail = High
logfiles/cron: LogFile = messages
logfiles/cron: Archive = messages.*.gz
logfiles/cron: *OnlyService = cron
logfiles/http: LogFile = apache2/*access_log
logfiles/http: Archive = apache2/*access_log.*.gz
logfiles/maillog: LogFile = messages
logfiles/maillog: Archive = messages.*.gz
Posted by on July 22, 2006 | gentoo, linux
Comments
<a href="javascript:alert('TooShort')">Antonio</a> August 27, 2006 at 1:10 p.m.
It seems to me, that you have to change logfiles/http because of bug. You should feel free to register it at bugzilla
http://bugs.gentoo.org/
Antonio August 27, 2006 at 1:13 p.m.
It seems that I've found another one bug.
Field "Your name:" is too short so I can not insert link to my homepage. But it is still possible to insert JavaScript here ;)
ksh August 27, 2006 at 3:48 p.m.
As you can see the latest bug is fixed now :)
Unfortunately I can not increase size of name field, because comments functionality is handled by django.comments application.
Antonio July 23, 2006 at 5:24 p.m.
Big brother is watching you :)