Difference between revisions of "Monitor System Logs via E-mail"

From Amahi Wiki
Jump to: navigation, search
 
(42 intermediate revisions by 3 users not shown)
Line 1: Line 1:
−
This will provide the capability to receive system logs via e-mail.  This applies to Fedora 9 & 10.  There are many customizable features, but this will only identify the basic ones.
+
This will provide the capability to receive system logs via e-mail.  There are many customizable features ([http://www.logwatch.org/tabs/docs/HOWTO-Customize-LogWatch.html/ Logwatch Documentation]), but this will only identify the basic ones.
  
 
* First, open a terminal window and become '''root'''.  Enter the following to install:
 
* First, open a terminal window and become '''root'''.  Enter the following to install:
−
  yum install logwatch
+
<pre>yum install logwatch</pre>
  
−
* Settings are stored in '''''/etc/usr/share/logwatch/default.conf/logwatch.conf''''' and require minor changes to make it work. Use your favorite editor (mine is nano) and make the following change:
+
::'''NOTE:'''  <code>yum</code> (deprecated) has been replaced with <code>dnf</code> as the package manager for Fedora 23 and greater.
−
** '''MailTo = root''' (line 35) to '''MailTo = (your email address)'''
 
  
−
* Ensure sendmail is started ('''''/etc/init.d/sendmail start''''') or it won't work.
+
* You can customize the settings by adding options to '''''/etc/logwatch/conf/logwatch.conf'''''.  By default it sends the daily logwatch email to the local root mail box.  To change it, add this line (change user@yourisp.com to desired email address):
 +
<pre>Output = mail
 +
MailTo = user@yourisp.com</pre>
  
−
* To test, enter the command '''''logwatch''''' and go check your email.
+
* If you want the email in html, add this line:
 +
<pre>Format = html</pre>
 +
 
 +
* To test, enter the command '''''logwatch''''' and go check your email.
 +
<pre>logwatch</pre>
 +
* Ensure sendmail or postfix is running (rerun command and change '''''status''''' to '''''start''''' if not):
 +
<pre>service sendmail status</pre>
 +
or
 +
<pre>service postfix status</pre>
  
 
'''Optional:'''
 
'''Optional:'''
  
 
* These are a few more basic options that can be configured.
 
* These are a few more basic options that can be configured.
−
** '''Range = yesterday''' (line 65) - additional values are '''all''' or '''today'''.
+
** '''Range = yesterday''' (default) - additional values are '''all''' or '''today'''.
−
** '''Detail = Low''' (line 72) additional values are '''med''' or '''high'''.  I set mine to '''med'''.
+
** '''Detail = Low''' (default) - additional values are '''med''' or '''high'''.  I set mine to '''med'''.
 +
 
  
 
This application runs transparent in the background, once daily in the morning.  If you want to run it more frequently (i.e. send logs for today), then change the range and execute the command '''''logwatch''''' as needed.
 
This application runs transparent in the background, once daily in the morning.  If you want to run it more frequently (i.e. send logs for today), then change the range and execute the command '''''logwatch''''' as needed.
 +
 +
'''NOTE:'''  If you want to forward these emails to another (including external) account, see [http://wiki.amahi.org/index.php/Forward_System_Emails Forward System Emails].

Latest revision as of 03:53, 18 June 2017

This will provide the capability to receive system logs via e-mail. There are many customizable features (Logwatch Documentation), but this will only identify the basic ones.

  • First, open a terminal window and become root. Enter the following to install:
yum install logwatch
NOTE: yum (deprecated) has been replaced with dnf as the package manager for Fedora 23 and greater.
  • You can customize the settings by adding options to /etc/logwatch/conf/logwatch.conf. By default it sends the daily logwatch email to the local root mail box. To change it, add this line (change user@yourisp.com to desired email address):
Output = mail
MailTo = user@yourisp.com
  • If you want the email in html, add this line:
Format = html
  • To test, enter the command logwatch and go check your email.
logwatch
  • Ensure sendmail or postfix is running (rerun command and change status to start if not):
service sendmail status

or 

service postfix status

Optional:

  • These are a few more basic options that can be configured.
    • Range = yesterday (default) - additional values are all or today.
    • Detail = Low (default) - additional values are med or high. I set mine to med.


This application runs transparent in the background, once daily in the morning. If you want to run it more frequently (i.e. send logs for today), then change the range and execute the command logwatch as needed.

NOTE: If you want to forward these emails to another (including external) account, see Forward System Emails.

Retrieved from "https://wiki.amahi.org/index.php?title=Monitor_System_Logs_via_E-mail&oldid=108811"