Do you think it's important to analyse server logs? If so, which ones and why? A location would be good as well!
It depends on the logs, why you're monitoring them and what type of information is stored in them. Most of the time, mail logs that just record who sent what e-mail to someone will not hold much value. However, if you have SSH recording unsuccessful login attempts, it could have some great value to you.
If this is for one of your systems, can you provide some detail on the services that are running on it, and what information it logs?
As for location, can you clarify? Most logs are stored in /var/logs, if that is what you were wanting to know.
Information Server Management
Linux server management, PCI consultation and affordable web hosting.
Security For Us - Where security works for you
Providing server security and PCI compliance for individuals and businesses.
Important logs: apache, mysql, ftp, telnet (people still using, can believe it ?). Management panel, postfix, smtp
Yes i think it is really important to keep a record of the logins, errors and any other record if you need to know what's been going on, on your server when you were off.
I always prefer having a login record and PHP logs, MySQL logs, apache/lighttpd logs etc.
Check out Linux Central for Linux software and other goodies!
» Recent Threads
Top Poster: Fred