From owner-freebsd-questions@FreeBSD.ORG  Sat Dec 27 11:00:17 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 87E2016A4CE
	for <freebsd-questions@freebsd.org>;
	Sat, 27 Dec 2003 11:00:17 -0800 (PST)
Received: from sentry.24cl.com (174.113.sn.ct.dsl.thebiz.net
	[216.238.113.174])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 16C1B43D48
	for <freebsd-questions@freebsd.org>;
	Sat, 27 Dec 2003 11:00:16 -0800 (PST)
	(envelope-from zlists@mgm51.com)
Received: from winbloat (winbloat.24cl.home [10.0.1.10])
	by sentry.24cl.com (Postfix) with ESMTP
	id 662CF29437; Sat, 27 Dec 2003 14:00:15 -0500 (EST)
Message-ID: <200312271400150479.0110DC8A@sentry.24cl.home>
In-Reply-To: <200312271840.hBRIeK418241@thunder.trej.net>
References: <200312271840.hBRIeK418241@thunder.trej.net>
X-Mailer: Courier 3.50.00.09.1092 (http://www.rosecitysoftware.com) (K)
Date: Sat, 27 Dec 2003 14:00:15 -0500
From: "MikeM" <zlists@mgm51.com>
To: "Joachim Dagerot" <freebsd@dagerot.nu>,
	freebsd-questions@freebsd.org
Content-Type: text/plain; charset="ISO-8859-1"
Subject: Re: What logs etc do I need to checkfrequently?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Dec 2003 19:00:17 -0000

On 12/27/2003 at 7:40 PM Joachim Dagerot wrote:

|As you with good memories know, I lost 3000 pictures of my first sons
|first year this month. I did have a RAID-5 system with fresh disks,
|however, shit happens and I have a feeling that this could have been
|avoided if I read my log files better.
|
|So basically, 
|
|a) I get a mail each time my a cron-event fires, this happens every 30
|min so the mailbox are quite loaded, not very funny going through.
|
|b) The file messages contained information that my raid-system was
|about to blow, I didn't see this because I never read that file. Also
|it appears to only log information after a reboot.
|The vinum history file seems to only hold information about the vinum
|setup, not the health of the volumes.
|
|Questions:
|
|a1) Is it possible to only get a mail with critical information, where
|and what do I need to do to achieve this?

/usr/ports/security/logcheck