Logwatch is a tool that will monitor your server's logs and email the administrator a digest on a daily basis, and is primarily used on Linux-based distros.
Questions tagged [logwatch]
86 questions
0
votes
0 answers
Installed, purged, then re-installed logwatch, now getting missing /var/cache/logwatch error
On Ubuntu 12.04, I installed logwatch via
sudo apt-get install logwatch
Worked great. I made some changes to the shared conf, then realized it was better to leave those alone and override then via /etc/logwatch/conf. So I purged and reinstalled,…
Ghopper21
- 113
- 10
0
votes
1 answer
How can I modify the disk space output of Logwatch?
I've got logwatch sending me reports every day and part of that report is a disk space analysis. I was wondering how I could modify the disk space script to put emphasis on disks that are greater than 90% full. Is there a way to do that without…
n0pe
- 363
- 5
- 13
0
votes
1 answer
Prevent empty apache requests in access.log
In my access.log file I found a hundreds of lines of empty request like this
mydomain.com:80 [ip-address] - - [02/Jul/2014:09:11:20 -0500] "GET / HTTP/1.0" 200 25491 "-" "-"
mydomain.com:80 [ip-address] - - [02/Jul/2014:09:11:24 -0500] "GET /…
dav
- 255
- 2
- 13
0
votes
1 answer
logwatch on Centos 6.4
My logwatch is configured correctly and is working correctly when I issue manually
/usr/sbin/logwatch
I added it to root's crontab and it is listed correctly when I make crontab -l which gives:
0 5 * * * /etc/cron.daily/0logwatch
0 2 * * *…
mmonem
- 209
- 1
- 2
- 9
0
votes
1 answer
Cannot close Port 25 after installing postfix
Before installing logwatch (which installs postfix) on Ubuntu 12.04, the port 25 is blocked by iptables/csf
PORT STATE SERVICE
25/tcp filtered smtp
After installing logwatch (which installs postfix), port 25 is now opened
PORT STATE…
Nyxynyx
- 1,459
- 11
- 39
- 49
0
votes
1 answer
monitor rsnapshot's log file with logwatch
How does one go about including rsnapshot's log file in logwatch's configuration?
Logwatch is software that will parse logs and check for important information and email it to someone. How can one have logwatch look over rsnapshot's log file.
d-_-b
- 1,124
- 3
- 11
- 23
0
votes
1 answer
How to retrieve all the system mails like LogWatch
Hi if you have a handful of servers around each with LogWatch installed and generating a daily summary mail for you, how do you retrieve these mails?
At the moment I only have Dovecot installed on one of the boxes, from which I can download via…
user192702
- 931
- 5
- 15
- 22
0
votes
1 answer
Are these disk errors cause for concern?
Every day I get an email from the logwatch program on our company web server. The server is running CentOS 6 and uses Apache, MySQL and PHP to serve web pages. It is a dedicated piece of hardware (not a VPS) in a data centre in the UK. We have two…
GhostInTheSecureShell
- 417
- 2
- 5
- 10
0
votes
1 answer
hacking attempt or something else in IMAP - logwatch logs
In my Logwatch logs I found 3 lines that look weird to me, I speculate that they are hacking attempts.
IMAP connect from @ [::ffff:121.183.126.37]DEBUG: Connection, ip=[::ffff:5.102.221.2]: 6 Time(s)
The address 121.183.126.37 is a Korean IP, not…
Jack Deeds
- 3
- 1
0
votes
1 answer
What do these kernel errors in my logwatch mean?
I was reading my logwatch this morning and I've noticed that there are a lot of kernel errors. I'm on CentOS 6 and the machine acts as a web server. Can anyone help me understand what these mean and if I need to take any…
GhostInTheSecureShell
- 417
- 2
- 5
- 10
0
votes
1 answer
strange Postfix logwatch log summary on my ubuntu vps
Hi I would be very thankful if someone could help me on explaining this logwatch summary of my postfix installation on my ubuntu 10.04 vps. I dont really know if this might be a normal log file because of the many authentication failed entries and…
DannyRe
- 109
- 4
0
votes
2 answers
Logwatch Unmatched Entries for named connection refused resolving
Using the default setup of Logwatch on RHEL 6 and the caching name server (BIND 9) package, my daily logwatch reports are filled with unmatched entries regarding DNS server errors.
What do I need to change in the configuration in order to either…
tgharold
- 609
- 8
- 19
0
votes
2 answers
Add drive to Logwatch disk space check
I'm looking to add a LVM volume to a Logwatch report for a Xen dom0. Currently this LVM volume doesn't show in the report as it is not mounted on the machine but is a physical drive. Any ideas on how to accomplish that?
I have no other reason for…
user98651
- 95
- 1
- 2
- 11
0
votes
1 answer
Meaning of "SFTP subsystem requests"
The following message showed up in my logwatch:
--------------------- SSHD Begin ------------------------
SFTP subsystem requests: 1 Time(s)
---------------------- SSHD End -------------------------
I understand that it means SFTP has been…
Anthony Miller
- 457
- 3
- 6
- 19
0
votes
1 answer
Logwatch: sendmail - sent/received?
Is it possible to get # of sent emails using logwatch? With our current setup I can see the number of received emails using 'logwatch --service sendmail -detail=11' but not the # sent.
I can probably parse this info out of the sendmail logs but it…
ethrbunny
- 2,369
- 4
- 41
- 75