Logwatch is a tool that will monitor your server's logs and email the administrator a digest on a daily basis, and is primarily used on Linux-based distros.
Questions tagged [logwatch]
86 questions
3
votes
1 answer
What does this kernel error mean and how should I respond?
The following except is taken from the logwatch of a production LAMP web server I'm about to inherit. It is a dedicated Dell server running CentOS 5 with RAID 1 across two 1TB drives.
I have little to no experience with anything other than…
GhostInTheSecureShell
- 417
- 2
- 5
- 10
3
votes
1 answer
What does "Mail Deferred:" mean in Linux Logwatch
I am just analyzing my logwatch logs, and I see the following entries:
SMTP SESSION, MESSAGE, OR RECIPIENT ERRORS
------------------------------------------
Mail Rejected:
Total: 6
Mail Deferred:
Total: 229
Total SMTP…
Saif Bechan
- 10,960
- 10
- 42
- 63
3
votes
1 answer
Logwatch without MTA/Postfix?
Is it possible to have Logwatch send daily emails without actually installing Postfix? I want to keep my server light and installing an MTA just because of Logwatch seems overkill. Or will I need Postfix anyways for admin work?
molidoli
- 231
- 4
- 8
3
votes
3 answers
Grouping vsftpd failures using logwatch
I'm trying to compact the syslog entries from vsftpd with logwatch, to get from:
vsftpd: pam_succeed_if(vsftpd:auth): error retrieving information about user Administrator
vsftpd: pam_succeed_if(vsftpd:auth): error retrieving information about…
Robert Munteanu
- 1,644
- 5
- 23
- 41
2
votes
2 answers
Using ignore.conf with logwatch
I have added the following to /etc/postfix/header_checks so that postfix will log the subject lines of every email:
/^subject: / WARN
This produces log entries in /var/log/mail.log like:
May 19 07:10:48 server postfix/cleanup[1737]: 12E9DB13A3:…
Brent
- 22,857
- 19
- 70
- 102
2
votes
1 answer
How to configure logwatch to monitor a custom log file
Ubuntu Server 9.10
Hi Guys,
Could someone point me to some instructions for how to get logwatch to monitor a custom log file? I have a dropbox solution that documents uploads/downloads to a log file and would like to include it in the updates from…
Mike B
- 11,871
- 42
- 107
- 168
2
votes
1 answer
configuration of logwatch: remove from "known attacks" & "probed the server"
I rely on logwatch to get infos about my production servers.
Unfortunately two sections provide to much information:
Attempts to use known hacks by 656 hosts were logged 1796 time(s)
from:
xxx.xxx.xxx.xx: 39 Time(s)
/\.\./\.\./\.\./…
caliph
- 213
- 1
- 4
- 8
2
votes
2 answers
LogWatch SMTP auth
So I've been using LogWatch for a little while and wanted to customize it a bit, so this is one of the things I want to edit.
I want LogWatch to verify via SMTP?
My mailserver (iREDmail) has some quite strict rules regarding auth, so that I have to…
Folkmann
- 160
- 1
- 1
- 9
2
votes
0 answers
Enabling logwatch to log successful requests as well
I have a very low-volume http server (Nginx) which is used by only a few users and otherwise receives some probes from hackers.
For this installation I would like the logwatch output to include successful http requests as well (i.e. 200-299), I…
centic
- 221
- 3
- 12
2
votes
1 answer
Logwatch postfix report. Where does this "Deferrals" come from and how to stop it?
I'm using logwatch to monitor the logs on my server and I'm trying to make sense out of the postfix report. (See the report below.)
By looking at /var/log/mail.log I saw that this mail seems to be bouncing for a long time.
How can I stop this? Also…
fabianmoronzirfas
- 153
- 7
2
votes
1 answer
Logwatch clam-update warnings
In Debian Linux stable version, there is always lag between current and stable version.
Thus one of packages Clamav is very noisy about this, and log files are full of:
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.98.5…
Arunas Bartisius
- 709
- 1
- 7
- 13
2
votes
1 answer
Error from logwatch while sending mail with ssmtp to SES
I'm running a server on AWS (ubuntu) and I need outgoing email to be able to email log files. To do this I'm using ssmtp and amazon's SES (Simple Email Service).
I have the email addresses verified and everything works fine when I run tests from…
Roger Gilbrat
- 271
- 5
- 9
2
votes
2 answers
How to set up Logwatch to receive high level messages immediately?
I have set up Logwatch on my (Debian) system. Mailing etc works well.
What I would like to is to get a daily report of the system once a day
And;
To receive any high level (failed login attempts, attacks -if possible- etc) immediately as they…
Phil
- 523
- 1
- 4
- 9
2
votes
1 answer
Analyse of logwatch and aide file
We have both logwatch and aide file. We would like to know how to know if there any intrusion have had taken place as this server was not active for some time. We quite a number of this entries in the aide files. Does this means some thing wrong…
user132638
- 151
- 1
- 2
- 9
2
votes
2 answers
logwatch - installing without postfix dependency
I want to install logwatch but configure it to use SendEmail (smpt authentication sender) instead of postfix. I don't need full blown mail server, I figure I can use google smtp.
I checked dependencies and logwatch installs automatically postfix.…
user113400