Focus on Linux
important errors to control with swatch Nov 19 2007 03:06PM
Isaac Perez Moncho (suscripcions tsolucio com) (2 replies)
Re: important errors to control with swatch Nov 20 2007 09:35AM
Hari Sekhon (hpsekhon googlemail com) (2 replies)
RE: important errors to control with swatch Nov 20 2007 06:09PM
Reynold McGuire (rmcguire suffolk edu)
Re: important errors to control with swatch Nov 20 2007 05:48PM
Michael Robbert (mrobbert mines edu) (1 replies)
Re: important errors to control with swatch Nov 21 2007 05:22PM
Hari Sekhon (hpsekhon googlemail com)
Re: important errors to control with swatch Nov 19 2007 11:54PM
Reynold McGuire (rmcguire suffolk edu)

I moved away from SWATCH quite some time ago as it was always crashing.

SEC, simple event correlator may be better, and it uses perl regular
expressions.

http://kodu.neti.ee/~risto/sec/

- Reynold

Isaac Perez Moncho wrote:
> Hello,
> I just installed swatch, and used this configuration file for the
> checks:
> http://www.loganalysis.org/sections/signatures/log-swatch-skendrick.txt
>
> Anyone knows any other common phrase or word that I should find the logs
> for hardware and system errors?
> Or what you consider important to monitor in the logs?
> Thanks
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus