HomePage » Monitoring » MonitoringSwatch


Monitoring log files with swatch

This is just a get-start. There are many more one can do with swatch.

Example log entry to catch:
Aug 10 01:16:36 ism sshd[3148]: pam_unix(sshd:session): session opened for user kn by (uid=0)


swatch startup command line command line
swatch --tail-file=/var/log/auth.log


swatch config file .swatchrc
watchfor /.*sshd.*for user (.*) by.*/
exec echo "ssh login detected for $1"

There are no comments on this page. [Add comment]

Valid XHTML 1.0 Transitional :: Valid CSS :: Powered by WikkaWiki