|
In order to make your logs as comprehensive as possible, I recommend a few changes to your /etc/syslog.conf file. Add the following lines:
*.warn;*.err /var/log/syslog
kern.* /var/log/kernel
ftp.info /var/log/ftplog
daemon.info /var/log/daemonlog
Be sure to use tabs between the element, and not spaces. Now locate the following line
*.info;mail.none;news.none;authpriv.none /var/log/messages
and change it to:
*.info;mail,ftp,daemon,authpriv.none /var/log/messages
These changes will separate various system messages into more logs, so any problems will be easier to track down. More on this below.
Next, you will have to create the new logs and change their permissions so that prying “friendly” eyes will not be able pursue them:
touch /var/log/ftplog /var/log/daemonlog
touch /var/log/syslog /var/log/kernel
chmod 600 /var/log/ftplog /var/log/daemonlog
chmod 600 /var/log/syslog /var/log/kernel
Finally, to make these changes take immediate effect, enter:
killall –HUP syslogd
|