Embedded Files
Logwatcher is a service to process the bloated and massive log files inside an operating system by emailing the logs periodically and then archived them. This helps in 3 ways:
- Send logs to elsewhere just in case the archived versions are compromised locally.
- Admin can review the logs without needing to login into the machine.
- Admin gets notified when suspicious activities are happening.
This section guides you on how to configure and use logwatcher.
Installation
Installation
Logwatcher can be installed using the native package:
$ sudo apt install logwatcher -yConfiguration
Configuration
This section covers all the configurations to logwatcher.
IMPORTANT NOTE:
A lot of Internet guides are asking users to edit /usr/share/logwatch/default.conf/logwatch.conf. This is not the right way.
The correct way is to create/update the configuration file in /etc/logwatch/conf/logwatch.conf by reading the configuration descriptions in /usr/share/logwatch/default.conf/logwatch.conf .
That's all for logwatcher.
Page updated
Google Sites
Report abuse