On 07/12/2015 03:53 PM, E.B. wrote:
>> The systemd backend is necessary to read journald's binary 'logs'.
>> The other backends (pyinotify, gamin, polling) read (Linux/Unix)
>> log files.
>>
>> If you want fail2ban to monitor a journald/binary log file, you 
>> need backend=systemd.
> 
> I take that mean if I see log files in /var/log my system
> not using journald (thus fail2ban-systemd not necessary in
> my case)

I don't know what you have in /var/log and I don't have a CentOS 7 system to 
test with.

> 
>> If you're reading traditional *nix text
>> log files, I'd recommend pyinotify (and auto defaults to it if 
>> available, as I mentioned).
> 
> got that, but you don't say WHY your recommendation.  my
> question is why do you recommend (vs. gamin or polling)?
> see again:

pyinotify uses the Linux kernel's inotify system calls. polling actually causes 
fail2ban to sleep and check the file's mtime periodically, iirc.

> 
>>> You said 'not so much benefit or weakness' but you went on
>>> to advise using pyinotify. If no backend is better than any
>>> other, why is there a preference? And why is there more than
>>> one if they are all mostly the same?
> 
> thank you for time to respond!!
> 
> ------------------------------------------------------------------------------
> Don't Limit Your Business. Reach for the Cloud.
> GigeNET's Cloud Solutions provide you with the tools and support that
> you need to offload your IT needs and focus on growing your business.
> Configured For All Businesses. Start Your Cloud Today.
> https://www.gigenetcloud.com/
> _______________________________________________
> Fail2ban-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
> 

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to