Install tripwire to be sure that no files are tampered with that you don't
want changed and you should find all the log files you want to check in
/var/log. The most likely ones are messages, secure and httpd/error_log.
There are many systems to handle log monitoring logwatch and analog may come
Take a look at LogSentry (formerly Logcheck). It emails you relevant
entries from several logs.
http://www.psionic.com/products/logsentry.html
On Fri, 2002-02-22 at 10:23, Jianping Zhu wrote:
I am a newbie in linux administration . I am managing a lab with a
samba server and a web server,
