Jerome, I can't speak about logwatch or swatch, but this comment of yours about logcheck...
On Wed, Jan 09, 2002 at 09:45:23AM +0100, Jerome Tytgat wrote: > Logcheck is pretty good and fairly simple to configure but limited > to /var/log/messages... ...is wrong. Logcheck can be used to monitor *any* file. You just add further lines to the logcheck.sh script, adding the file(s) you want to be monitored. Logcheck also has an active mailing list for support (the Abacus list, which you can find via http://www.psionic.com/) and the tool's author Craig Rowland is very good about responding to questions. The othr tools may be just as good or maybe even better for your specific needs. I jast happen to use Logcheck on a few different machines (ranging from web servers to firewalls) and am happy with the results. To be honest, I suspect all the log monitoring tools are about the same -- after all, they all just look at log files and filter them for interesting messages. I'd just use whichever one makes more sense to you. Stil -- : Stilgherrian, Director of Operations, prussia.net : Internet infrastructure services focussing on the essentials : http://www.prussia.net/ : ARBN BN97858688, ABN 15 148 757 893
