Re: [sshd] send a mail when a event login occur ?

Ayaz Ahmed Khan <ayaz@xxxxxxxxxxxxxxxx> (06-09-30 18:19:29):

Why not just remote log? Email could end up creating a lot of
traffic.

My sentiments exactly. Setting up syslog or syslog-ng to send logs to
a remote logging server is a much better approach.

True, but as said, that's overkill for most configurations.


Regards,
E.S.
.

Relevant Pages

  • Re: [sshd] send a mail when a event login occur ?
    ... Setting up syslog or syslog-ng to send logs to ... a remote logging server is a much better approach. ...
    (comp.os.linux.security)
  • RE: audit trails for file access
    ... I actually use NTSyslog to send my logs off to a syslog server, ... On the syslog server side, I use syslog-ng to log to a MySQL database. ... In regards to logging to another machine, use the Eventlog to Syslog ...
    (Focus-Microsoft)
  • Re: Windows event auditing and reporting
    ... Log to Syslog translators and subsequent Syslog reporting tools. ... Once you get your logs into a generally vendor-agnostic format such as ... Event logs, especially DC logs for events such as New user accounts, ... Computer Emergency Response Teams, and Digital Investigations. ...
    (Security-Basics)
  • Re: Cisco ASA Syslog Messages
    ... syslog log files and alert us based on specific queries. ... look for in the logs. ... take a look at some of the PIX syslog tools at ...
    (comp.dcom.sys.cisco)
  • Re: Cisco ASA Syslog Messages
    ... syslog log files and alert us based on specific queries. ... reviewing the documentation regarding the ASA/PIX syslog format and it ... look for in the logs. ...
    (comp.dcom.sys.cisco)
Quantcast