0
votes
0answers
58 views

Logwatch Postfix Noise

I am using Logwatch to summarise log files on a web server and there is a lot of noise coming from Postfix. For example: postfix/smtpd[18524]: smtp_stream_setup: maxtime=300 enable_deadline=0 ...
0
votes
1answer
149 views

hacking attempt or something else in IMAP - logwatch logs

In my Logwatch logs I found 3 lines that look weird to me, I speculate that they are hacking attempts. IMAP connect from @ [::ffff:121.183.126.37]DEBUG: Connection, ip=[::ffff:5.102.221.2]: 6 ...
1
vote
1answer
824 views

What does this kernel error mean and how should I respond?

The following except is taken from the logwatch of a production LAMP web server I'm about to inherit. It is a dedicated Dell server running CentOS 5 with RAID 1 across two 1TB drives. I have little ...
0
votes
1answer
699 views

Change the sender email of logwatch on RH Linux

Im running logwatch on red hat 7 it sends mails using root@localhost.localdomain however, the email from localhost.localdomain is not received at the recipient because localhost.localdomain is not ...
0
votes
1answer
148 views

What do these kernel errors in my logwatch mean?

I was reading my logwatch this morning and I've noticed that there are a lot of kernel errors. I'm on CentOS 6 and the machine acts as a web server. Can anyone help me understand what these mean and ...
5
votes
3answers
1k views

Cannot run logwatch due to Date::Manip issue

I tried to run logwatch at follows [root@machine cron.daily]# ./0logwatch ERROR: Date::Manip unable to determine TimeZone. Execute the following command in a shell prompt: perldoc ...
2
votes
1answer
978 views

How should I setup email log notifications on Debian server

I've built lots of Debian servers. They hardly ever fail but when they do I've never had a good enough logging system. So I told myself this time would be different. I've got Apache2 and MySQL happy ...
0
votes
1answer
1k views

Logwatch httpd - hacks and probes

Sometimes in my daily logwatch report, I notice that there is a section under httpd for "attempts to use known hacks..." and another section about how many sites probed the server. I have a few ...
0
votes
1answer
2k views

Meaning of “SFTP subsystem requests”

The following message showed up in my logwatch: --------------------- SSHD Begin ------------------------ SFTP subsystem requests: 1 Time(s) ---------------------- SSHD End ...
11
votes
4answers
9k views

Linux: logwatch(8) is too noisy. How can I control the noise level?

Our Linux systems run logwatch(8) utility by default. On a RedHat/CentOS/SL system, Logwatch is called by the /etc/cron.daily/ cronjob, which then sends a daily email with the results. These emails ...
1
vote
2answers
2k views

How to change “sender:” field in the header of Logwatch emails

I changed MailFrom="" in /usr/share/logwatch/default.conf/logwatch.conf That altered "From:" in the headers, but "Sender:" is still "root@ip-xx-xx-xx-xx.domain" EC2 Linux AMI beta, Postfix is the ...
0
votes
1answer
622 views

Logwatch not showing FTP (Proftpd) success or failed logins, only shows uploades/downloads

Server: CentOS 5.2, Proftpd 1.3.3d, Logwatch 7.3-8.el5.noarch (updated with yum). I've just setup Logwatch and got the email output, it does show some FTP info for example it shows uploaded and ...
-1
votes
1answer
708 views

Confused by email messages from cron and logwatch

Actually I found these reports in server's mail queue. It repeats everyday i find 3 mails... 2 from Cron Daemon [cpbackup] Backups are not scheduled to run today (This can be adjusted in WHM => ...
0
votes
1answer
2k views

How can I get logwatch to process alternate apache logs?

CentOS 5 | Apache 2.2.3 | LogWatch 7.3 Hello All, I have Apache running on a CentOS box and am hosting multiple VirtualHosts. Each of these virtual hosts has a separate access log. For example: ...
1
vote
1answer
8k views

How to configure logwatch to monitor a custom log file

Ubuntu Server 9.10 Hi Guys, Could someone point me to some instructions for how to get logwatch to monitor a custom log file? I have a dropbox solution that documents uploads/downloads to a log ...
2
votes
2answers
2k views

Using ignore.conf with logwatch

I have added the following to /etc/postfix/header_checks so that postfix will log the subject lines of every email: /^subject: / WARN This produces log entries in /var/log/mail.log like: May 19 ...