Log Analysis

[MustangV10]

Do you think it's important to analyse server logs? If so, which ones and why? A location would be good as well!

[ehansen]

It depends on the logs, why you're monitoring them and what type of information is stored in them. Most of the time, mail logs that just record who sent what e-mail to someone will not hold much value. However, if you have SSH recording unsuccessful login attempts, it could have some great value to you.

If this is for one of your systems, can you provide some detail on the services that are running on it, and what information it logs?

As for location, can you clarify? Most logs are stored in /var/logs, if that is what you were wanting to know.

[diegosuse]

Important logs: apache, mysql, ftp, telnet (people still using, can believe it ?). Management panel, postfix, smtp

[DaReaper]

Yes i think it is really important to keep a record of the logins, errors and any other record if you need to know what's been going on, on your server when you were off.

I always prefer having a login record and PHP logs, MySQL logs, apache/lighttpd logs etc.