What logs should be checked and how often?

[betoranaldi]

I am new to the whole direct admin administration thing and have just finished setting up my server.

I was wondering what logs I should be checking to make sure if everything is up to par and to make sure nothing fishy is going on.

Is there a list that I should run down on a regular basis?

 

[OxnardMontalvo]

I am new to the whole direct admin administration thing and have just finished setting up my server.

I was wondering what logs I should be checking to make sure if everything is up to par and to make sure nothing fishy is going on.

Is there a list that I should run down on a regular basis?

IMHO, it really depends on how bored you are.

I check the following every day or so.

/var/log/maillog:
I tail this for a few minutes each day looking for errors.

/var/log/exim/paniclog:
If there's anything in this other than exim bitching that someone tried to mail to root then there's a problem.

/var/log/exim/mainlog:
I just like to see the mail flow. My server is small enough so that I can read some of the lines to make sure everything looks ok.

/var/log/messages:
This is the...and everything else check. I'll tail this for a few minutes every day to see if any errors are popping up.

DA does a good job of making sure services are operational and emailing me if they are not so I don't generally worry about that.

HTH,
=C=

 

[betoranaldi]

Excellent!

Thank you for your quick response... my main concern is email and attacks on the server.

 

[OxnardMontalvo]

Make sure you are running the most recent version of Jeff Lasman's SpamBlocker config file for exim. It's in the '3rd Party Software' forum of this board.

=C=