Re: [K12OSN] Checking log files

[Konstantin Riabitsev <icon phy duke edu>]

Shawn Austin wrote:
> I would recommend looking over /var/log/messages and /var/log/secure at
> least twice a day.  I usually just keep both files open on the top of my
> screen with a tail -f on them.  That way, you can tell if there are
> errors authenticating, the disk is full, or someone is trying to login
> as root from somewhere.

There is software that would make this much easier. Logwatch, for 
example, or... ahem... this. :)

http://linux.duke.edu/epylog/

Version 0.8.14 is currently pretty stable -- we are using it to 
monitor about 500 hosts. An enhanced version is coming soon...

Regards,
--
Konstantin ("Icon") Riabitsev
Duke University Physics Sysadmin
www.phy.duke.edu/~icon/pubkey.asc