[Logwatch] Logwatch and IP address reporting

nawshad hoossanbuksh nawshad01 at hotmail.com
Mon Jun 18 05:29:52 MST 2007


Hello all

   I would like to know if it is possible to report the whole log entry 
being matched while the monitoring processes. Using syslog to deport logs 
from remote machines, i would like to see the address IP of the source of 
the log entries in my centralized log file on the server.

>From logwatch report:
**Unmatched Entries**
    (root-5110): démarrage (version 2.16.1), pid 5110 utilisateur « root 
» : 1 Time(s)

>From my log file (auth.log)
Jun 18 10:48:19 194.3.***.*** (root-5110): démarrage (version 2.16.1), pid 
5110 utilisateur « root


Thank you very much for any help

_________________________________________________________________
PC Magazine’s 2007 editors’ choice for best Web mail—award-winning Windows 
Live Hotmail. 
http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migration_HM_mini_pcmag_0507



More information about the Logwatch mailing list