On Tue, Jan 16, 2007 at 05:00:34PM -0800, Christian Seberino wrote: > //daily// reading of log reports is tedious and leads to burnout. > > The only way out of this log jam (pun intended) is for WEEKLY reading of > log summeries right? > > Anyone have any other ways to avoid log burnout?
Nope :-) All of the Red Hat-ish machines I've installed in the past few years include logwatch by default. The emails it generates each day get deleted unread. This thread makes me want to turn it off. Whenever I'm looking into an issue, I go right to the log files anyway, rather than try to read emails. The best I can suggest is, about ten years ago I used "logcheck". It was the same type of thing, but it ran every five minutes in cron. After you spent some time configuring it to ignore log entries that you expect or don't care about, you could get to the point where you'd only receive an email when there was an indication of an actual problem. You could probably configure logwatch to run each week, instead of each day, since logs are rotated weekly by default. But what are you going to accomplish? Once a week, you'll have one big email. If there's a problem in there, it's up to a week old, and you'll probably never notice it. I just don't see the point. If you're looking for statistical or historic analysis of performance, there are much better ways to accomplish that. But if you're looking for problems, you need to do that a lot more often, not less. -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * *********************************************************************** -- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
