topic Re: which events to look in the syslog.log ? in Operating System - Linux

which events to look in the syslog.log ?

Lionel MAZE — Fri, 08 Aug 2003 07:29:00 GMT

I will wish to know which events I must supervise in the syslog.log.

There is you already scripts to filter possible errors?

I know I am a little lazy but it is my side DP man which speaks.

Re: which events to look in the syslog.log ?

Steven E. Protter — Fri, 08 Aug 2003 10:51:24 GMT

Linux logs:

boot.log as the name says boot up messages, system start etc.

dmesg - hardware messages. timeouts ...

maillog - logs activities of the senmail daemon.

messages - messages associated with daemons

secure - security messages

xferlog - files trasnferred on and off your ftp server.

non admin

cups - from the printing system

httpd - /etc/httpd/logs from the web server

samba - from the file sharing service

squid - from the web proxy software

uucp - from unix to unix copy program.

SEP

Re: which events to look in the syslog.log ?

Huc_1 — Sat, 09 Aug 2003 06:03:46 GMT

If I understand your question what you need to look at is /etc/syslog.conf

as root do
#more /etc/syslog.conf

This will show you what is already logged and where it is logged ...

the syslog.conf file is pretty readable

Is it good for your enviroment, well I have no way of knowing that !

It is default and general usage after install, a sysadmin may need to tailor this !

You also need to take disk space into the picture .

I am afraid this does mean some work/read configure tune adapt and more

I would still recommand a man syslog.conf

Jean-Pierre

Re: which events to look in the syslog.log ?

Vitaly Karasik_1 — Sun, 10 Aug 2003 07:50:05 GMT

there are a lot of scripts/utilities for analyze syslog for suspicious activity and so on"

http://www.linux.org/apps/all/Administration/Log_Analyzers.html

regards,
Vitaly.