which events to look in the syslog.log ?

[Lionel MAZE]

I will wish to know which events I must supervise in the syslog.log.

There is you already scripts to filter possible errors?

I know I am a little lazy but it is my side DP man which speaks.

[Steven E. Protter]

Linux logs:

boot.log as the name says boot up messages, system start etc.


dmesg - hardware messages. timeouts ...

maillog - logs activities of the senmail daemon.

messages - messages associated with daemons

secure - security messages


xferlog - files trasnferred on and off your ftp server.

non admin

cups - from the printing system

httpd - /etc/httpd/logs from the web server

samba - from the file sharing service

squid - from the web proxy software

uucp - from unix to unix copy program.

SEP

[Huc_1]

If I understand your question what you need to look at is /etc/syslog.conf

as root do
#more /etc/syslog.conf

This will show you what is already logged and where it is logged ...

the syslog.conf file is pretty readable

Is it good for your enviroment, well I have no way of knowing that !

It is default and general usage after install, a sysadmin may need to tailor this !

You also need to take disk space into the picture .

I am afraid this does mean some work/read configure tune adapt and more

I would still recommand a man syslog.conf

Jean-Pierre

[Vitaly Karasik_1]

there are a lot of scripts/utilities for analyze syslog for suspicious activity and so on"


http://www.linux.org/apps/all/Administration/Log_Analyzers.html

regards,
Vitaly.