Re: [cobalt-users] Logchecker

["H.P. Stroebel" <hpstr@xxxxxxxxxxxxx>]

JA schrieb:
 
> In setting up logchecker I have set up the software to check the following:-
> 
> $LOGTAIL /var/log/messages > $TMPDIR/check.$$
> $LOGTAIL /var/log/secure >> $TMPDIR/check.$$
> $LOGTAIL /var/log/maillog >> $TMPDIR/check.$$
> 
> Is this the correct configuration for a raq4r if the syslog.conf is setup
> as:-
> 
> *.*;mail,kern,auth,authpriv.none                /var/log/messages
> authpriv.*                              /var/log/secure
> mail.*                          /var/log/maillog

there`s no "correct" or "incorrect" setup, depends on the information
you want to see. the mail logs could be interesting (e.g. rejected
mails), but you will have to invest some time to filter out unimportant
messages using the .ignore-files.

secure and messages are the most important logs.

-- 

H. P.  Stroebel, Germany

CGI-FAQ for Raq-Newbies :
http://users.iol.it/hpstr/

Apollo 13 - Commander : "Houston, we have a problem"
Win2000 - Administrator : "Redmond, we have 64000 problems"