Logcheck

This article is a Draft. Help us to complete it.

https://salsa.debian.org/debian/logcheck

Binaries

• logcheck
• logtail
• logtail2

Ubuntu Configuration files

• /etc/logcheck
• /etc/logcheck/logcheck.conf

grep -v "#" /etc/logcheck/logcheck.conf | grep .
REPORTLEVEL="server"
SENDMAILTO="your_mail@your_domain.com"
MAILASATTACH=0
FQDN=1
TMP="/tmp"

• /etc/logcheck/logcheck.logfiles Files to check

/var/log/syslog
/var/log/auth.log

logcheck
sendmail: fatal: open /etc/postfix/main.cf: No such file or directory
Error closing sendmail: non-zero exit (75) at /usr/bin/mime-construct line 571.

Related terms

• fail2ban

Activities

• Read https://zeldor.biz/2010/08/configure-logcheck/

See also

• Linux logging, Cisco IOS logging
• Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard

https://linux.die.net/man/8/logcheck