<< Logwatch is a customizable log analysis system It parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. Logwatch is already installed on most CPanel servers. >>
--------------------- To modify LogWatch, SSH into server and login as root.
At command prompt type: pico -w /etc/log.d/conf/logwatch.conf
To have the server e-mail you everytime someone logs in as root, SSH into server and login as root.
---------------------------------
At command prompt type: pico .bash_profile
---------------------------------
Scroll down to the end of the file and add the following line:
---------------------------------
echo 'ALERT - Root Shell Access on:' `date` `who` | mail -s "Alert: Root Access from `who | awk '{print $6}'`" your@email.com
---------------------------------
Save and exit