> The systemd backend is necessary to read journald's binary 'logs'.
> The other backends (pyinotify, gamin, polling) read (Linux/Unix)
> log files.
> 
> If you want fail2ban to monitor a journald/binary log file, you 
> need backend=systemd.

I take that mean if I see log files in /var/log my system
not using journald (thus fail2ban-systemd not necessary in
my case)

> If you're reading traditional *nix text
> log files, I'd recommend pyinotify (and auto defaults to it if 
> available, as I mentioned).

got that, but you don't say WHY your recommendation.  my
question is why do you recommend (vs. gamin or polling)?
see again:

> > You said 'not so much benefit or weakness' but you went on
> > to advise using pyinotify. If no backend is better than any
> > other, why is there a preference? And why is there more than
> > one if they are all mostly the same?

thank you for time to respond!!

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to