Thursday, December 29, 2011

How to Modify LogWatch

<< Logwatch is a customizable log analysis system It parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. Logwatch is already installed on most CPanel servers. >>

---------------------
To modify LogWatch, SSH into server and login as root.

At command prompt type: pico -w /etc/log.d/conf/logwatch.conf 


Scroll down to

MailTo = root

and change to

Mailto = your@email.com

<Note >: Set the e-mail address to an offsite account incase you get hacked.


Now scroll down to 

Detail = Low

Change that to Medium, or High...

Detail = 5 or Detail = 10

Note: High will give you more detailed logs with all actions. 

Save and exit.


-----------------------------------

No comments:

Post a Comment