Trusted, Bureaucrats, Administrators
12,424
edits
Changes
From Amahi Wiki
Monitor System Logs On Ubuntu (view source)
Revision as of 23:50, 12 July 2012
, 23:50, 12 July 2012Created page with "This will provide the capability to receive system logs via e-mail. There are many customizable features ([http://www.logwatch.org/tabs/docs/HOWTO-Customize-LogWatch.html/ Logwa..."
This will provide the capability to receive system logs via e-mail. There are many customizable features ([http://www.logwatch.org/tabs/docs/HOWTO-Customize-LogWatch.html/ Logwatch Documentation]), but this will only identify the basic ones.
* First, open a terminal window and become '''root'''. Enter the following to install:
<blockquote>{{Code|sudo apt-get install logwatch}}</blockquote>
* There are some additional steps needed for Ubuntu to work correctly:
<blockquote>{{Code|sudo mkdir /var/cache/logwatch
sudo cp /usr/share/logwatch/default.conf/logwatch.conf /etc/logwatch/conf/}}</blockquote>
* You can customize the settings by adding options to '''''/etc/logwatch/conf/logwatch.conf'''''. If you want the log in email vs screen output, change this line read:
<blockquote>{{Text|Output <nowiki>=</nowiki> mail}}</blockquote>
* By default it sends the daily logwatch email to the local root mail box. To change it, edit this line (change user@yourisp.com to desired email address) to read:
<blockquote>{{Text|MailTo <nowiki>=</nowiki> user@yourisp.com}}</blockquote>
* If you want the email in html vs text, change this line to read:
<blockquote>{{Text|Format <nowiki>=</nowiki> html}}</blockquote>
* To test, enter the command '''''logwatch''''' and go check your email.
<blockquote>{{Code|sudo logwatch}}</blockquote>
* Ensure sendmail or postfix is running (rerun command and change '''''status''''' to '''''start''''' if not):
<blockquote>{{Code|service sendmail status}}
or
{{Code|service postfix status}}</blockquote>
'''Optional:'''
* These are a few more basic options that can be configured.
** '''Range = yesterday''' (default) - additional values are '''all''' or '''today'''.
** '''Detail = Low''' (default) - additional values are '''med''' or '''high'''. I set mine to '''med'''.
This application runs transparent in the background, once daily in the morning. If you want to run it more frequently (i.e. send logs for today), then change the range and execute the command '''''logwatch''''' as needed.
'''NOTE:''' If you want to forward these emails to another (including external) account, see [http://wiki.amahi.org/index.php/Forward_System_Emails Forward System Emails].
* First, open a terminal window and become '''root'''. Enter the following to install:
<blockquote>{{Code|sudo apt-get install logwatch}}</blockquote>
* There are some additional steps needed for Ubuntu to work correctly:
<blockquote>{{Code|sudo mkdir /var/cache/logwatch
sudo cp /usr/share/logwatch/default.conf/logwatch.conf /etc/logwatch/conf/}}</blockquote>
* You can customize the settings by adding options to '''''/etc/logwatch/conf/logwatch.conf'''''. If you want the log in email vs screen output, change this line read:
<blockquote>{{Text|Output <nowiki>=</nowiki> mail}}</blockquote>
* By default it sends the daily logwatch email to the local root mail box. To change it, edit this line (change user@yourisp.com to desired email address) to read:
<blockquote>{{Text|MailTo <nowiki>=</nowiki> user@yourisp.com}}</blockquote>
* If you want the email in html vs text, change this line to read:
<blockquote>{{Text|Format <nowiki>=</nowiki> html}}</blockquote>
* To test, enter the command '''''logwatch''''' and go check your email.
<blockquote>{{Code|sudo logwatch}}</blockquote>
* Ensure sendmail or postfix is running (rerun command and change '''''status''''' to '''''start''''' if not):
<blockquote>{{Code|service sendmail status}}
or
{{Code|service postfix status}}</blockquote>
'''Optional:'''
* These are a few more basic options that can be configured.
** '''Range = yesterday''' (default) - additional values are '''all''' or '''today'''.
** '''Detail = Low''' (default) - additional values are '''med''' or '''high'''. I set mine to '''med'''.
This application runs transparent in the background, once daily in the morning. If you want to run it more frequently (i.e. send logs for today), then change the range and execute the command '''''logwatch''''' as needed.
'''NOTE:''' If you want to forward these emails to another (including external) account, see [http://wiki.amahi.org/index.php/Forward_System_Emails Forward System Emails].
