Re: [cobalt-users] Newbie: Where are the logs?

[flash22@xxxxxxx]

On Tue, 5 Dec 2000, Scott Horton wrote:

> I've had the RaQ2 for a while - it seems to be running fine - we don't put
 to much of a load on it.  I have been concerned about the machines
 'hackability', but I haven't had time to figure out which logs to
> look at or where they are actually stored.  
>Can anyone give me a quick pointer on which files to examine? 

Well, i'd note that by the time you see something in the logs you're
probably already in trouble -/

 /var/log

maillog - stuff from sendmail
secure  - logins (doesn't list errors unfortunatly)
xferlog - ftp uploads/downloads
samba   - win shares 
messages - system / kernel messages and just about everything else
httpd/access system wide web logs
httpd/error  logs of errors serving web pages
httpd/adm_access GUI access logs

all of the above files get archived occasionally btw, the .1.gz versions
contain the older parts...

also running 'last' will tell you about recent logins (wtmp is in a
compressed format)
--
You did install the security updates from cobalt's site right ?