From: "Phil Leinhauser" <[EMAIL PROTECTED]>
Speaking of the log file timestamps...
Has anyone found an easier way to view the logs using tai64nlocal? What
I'm
looking for is something like a Webmin plugin or some other type of
viewer,
rather than always going to command line.
I sure have... splunk. It provides a web based interface to your logs. You
can even search them (i.e. What IP addresses sent my server email that was
rejected yesterday?). The non-free version dosent have login (you just go to
the web page and it loads), but what I did was added iptables rules that
refuse everyone but my IP on those ports.
Here are my notes:
=item Download
# wget
'http://www.splunk.com/index.php/download_track?file=/3.0.2/linux/splunk-3.0.2-24828.i386.rpm&ac=&wget=true&name=wget
=item Install
# rpm -i splunk-3.0.2-24828.i386.rpm
=item License
# cp -i /opt/splunk/etc/splunk-free.license
/opt/splunk/etc/splunk.license
=item Start
# /opt/splunk/bin/splunk start
=item Index Logs
/opt/splunk/bin/splunk add tail /var/log/qmail/imap4-ssl/current
/opt/splunk/bin/splunk add tail /var/log/qmail/imap4/current
/opt/splunk/bin/splunk add tail /var/log/qmail/spamd/current
/opt/splunk/bin/splunk add tail /var/log/qmail/clamd/current
/opt/splunk/bin/splunk add tail /var/log/qmail/authlib/current
/opt/splunk/bin/splunk add tail /var/log/qmail/pop3/current
/opt/splunk/bin/splunk add tail /var/log/qmail/smtp/current
/opt/splunk/bin/splunk add tail /var/log/qmail/pop3-ssl/current
/opt/splunk/bin/splunk add tail /var/log/qmail/send/current
/opt/splunk/bin/splunk add tail /var/log/qmail/submission/current
/opt/splunk/bin/splunk add tail /var/log/clamav/freshclam.log
=item Browser
http://192.168.1.38:8000/
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
