From owner-freebsd-questions Fri Feb 28 11:16: 2 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3358C37B418 for ; Fri, 28 Feb 2003 11:15:37 -0800 (PST) Received: from lv.raad.tartu.ee (lv.raad.tartu.ee [194.126.106.110]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9EDC144260 for ; Fri, 28 Feb 2003 10:38:08 -0800 (PST) (envelope-from toomas.aas@raad.tartu.ee) Received: Message by Barricade lv.raad.tartu.ee with ESMTP id h1SIbug21895; Fri, 28 Feb 2003 20:37:56 +0200 Message-Id: <200302281837.h1SIbug21895@lv.raad.tartu.ee> Received: from INFO/SpoolDir by raad.tartu.ee (Mercury 1.48); 28 Feb 03 20:37:34 +0200 Received: from SpoolDir by INFO (Mercury 1.48); 28 Feb 03 20:37:20 +0200 From: "Toomas Aas" Organization: Tartu City Government To: Peter Elsner , t@garbage.dk, questions@freebsd.org Date: Fri, 28 Feb 2003 20:37:17 +0200 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Best way to log from several servers In-reply-to: <5.2.0.9.2.20030228080645.025f7c10@mail.servplex.com> References: <2B3CC68F-4B18-11D7-9EAA-003065B0995C@garbage.dk> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi! > You could write a Perl script to parse them and email them to you ... > > That's what I did for about 14 of my customers... I get an email daily that > emails me the logs. As mentioned by Roger Vetterberg, the Real Men (tm) of course configure syslogd to have all machines to log to a central server. It's wussies like me who use some kind of e-mail solution described above ;-) You don't even have to do any scripting, because someone has already done it and the results are available in /usr/ports/security/logcheck. I have it installed on all the FreeBSD servers I'm responsible for. -- Toomas Aas | toomas.aas@raad.tartu.ee | http://www.raad.tartu.ee/~toomas/ * Computers are not intelligent. They only think they are. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message