On 07/12/2015 04:42 PM, E.B. wrote: >> This might be some of the confusion. Fail2ban can read a journal file >> if you tell it to with the backend = systemd in the jail.conf or >> jail.local. If you tell it to used systemd for that jail then in the >> filter for that jail you have to tell it what unit to match for example >> journalmatch = _SYSTEMD_UNIT=vncserver-x11-serviced.service. But if you >> have the backend = auto then it will look for the plain text logs. If you >> set the backend = systmed in the jail.conf file you can still tell a single >> jail to look for a log file somewhere else a good example is the selinux-ssh >> jail. The it's log is in /var/log/audit and is in plain text. > > OK i understand how configuration works, it is flexible. > I now noticed if I try like: > > journalctl | grep sshd > > There are lots of sshd logs there so i guess centOS has > journald logging but also dump to files because i have > normal log files too and fail2ban i think using polling > now by default. > > So back again to not knowing what is best backend.... > systemd, poling or gamin/pyinotify) and the merits/detractions > of each?
As has been mentioned, you cannot compare systemd to polling/gamin/pyinotify. They are apples and oranges. The negatives of polling have already been discussed, and I have already mentioned reasons to prefer pyinotify to gamin. What further information are you looking for? > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
