Choosing what logwatch is reporting on, on Centos 5.4

Posted by florin on Server Fault See other posts from Server Fault or by florin
Published on 2010-04-08T14:19:55Z Indexed on 2010/04/08 14:23 UTC
Read the original article Hit count: 510

Filed under:

logwatch

|

ssh

|

centos

I have two Centos 5.4 servers that I set up within weeks of each other. One is e-mail server (let's label it EM) and the other is a web and ftp server (labeled WF). Logwatch came pre-configured and I have not altered its setup in any way -- but the log messages are quite different between the two: server EM reports ssh status while WF does not. With ntpd, the situation is reversed. I know I could start tweaking some knobs in /etc/logwatch and somesuch, but why are the results from the default configuration so different?

© Server Fault or respective owner

Related posts about logwatch

Including hostname in apache logwatch reports

as seen on Server Fault - Search for 'Server Fault'
When hosting multiple domains with apache it's useful to see the logwatch apache output with the virtual host name included, but I only get: --------------------- httpd Begin ------------------------ Requests with error response codes 400 Bad Request /: 1 Time(s) /robots.txt: 1… >>> More
Choosing what logwatch is reporting on, on Centos 5.4

as seen on Server Fault - Search for 'Server Fault'
I have two Centos 5.4 servers that I set up within weeks of each other. One is e-mail server (let's label it EM) and the other is a web and ftp server (labeled WF). Logwatch came pre-configured and I have not altered its setup in any way -- but the log messages are quite different between the two:… >>> More
Can i safely disable IPv6 in BIND to prevent logwatch entries

as seen on Server Fault - Search for 'Server Fault'
My logwatch is going nuts with unmatched network lookups for IPv6. One solution is to disable IPv6 and get rid of the most entries. My question is if it is save to do this. What are the pro's and cons of taking this step. I am planning on running an auction website, and I don't want to block out… >>> More
Hundreds of unknown entries in Linux logwatch

as seen on Server Fault - Search for 'Server Fault'
I have a dedicated server which runs centos. Today i got an email from loginwatch on my server with hundreds of lines of 'errors'. I don't really know what they are becasue i am fairly new at this. The lines are in a few sections, I will display the first 10 of all of them, i hope someone can help… >>> More
From the Sys Admin Toolbox: Logwatch

as seen on Internet.com - Search for 'Internet.com'
<b>Linux Magazine: </b>"Q: What did one lumberjack say to the other lumberjack? A: Watch those logs. Now, what will you, as a system administrator, use to watch logs? Logwatch, of course." >>> More

Related posts about ssh

Problem with hadoop start-dfs.sh

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I installed and configured hadoop on my Ubuntu 14.04 server, virtualized inside of hyper-v, however I am getting an issue when i run start-dfs.sh root@sUbuntu01:/var/log# start-dfs.sh 14/06/04 15:27:08 WARN util.NativeCodeLoader: Unable to load native-hadoop library for your platform... using builtin-java… >>> More
SSH problems (ssh_exchange_identification: read: Connection reset by peer)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I was running 11.10 and decided to do the full upgrade and come up to 12.04 after the update SSH (not SSHD) is now misbehaving when attempting to connect to other OpenSSH instances. I say OpenSSH as I am running a DropBear sshd on my router and I am able to connect to it. When attempting to connect… >>> More
SSH main process ended

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a running ubuntu server 10.04.1. When I tried to login to the server via ssh, I could not. Instead, I got connection refused error. I tried to ping the machine and I got reply! So, the clear reason is that SSH daemon is stopped. After reboot, I was able to login to my server via ssh. After… >>> More
SSH server not working (respawns until stopped)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a running Ubuntu Server 10.04.1. When I tried to login to the server via ssh, I could not. Instead, I got connection refused error. I tried to ping the machine and I got reply! So, the clear reason is that SSH daemon is stopped. After reboot, I was able to login to my server via ssh. After… >>> More
Cannot SSH after resetting firewall on VPS

as seen on Server Fault - Search for 'Server Fault'
I'm having trouble trying to SSH to my Debian 5 VPS with blacknight. It was working fine until I did the following: Logged into 'Parallels Infrastructure Manager' - Container - Firewall - Set to 'Normal Firewall settings'. It told me there was an error with the IPTables and offered the option again… >>> More