Todd, You were right on the money with Splunk!!
Sorry the reply is a bit late but just got around to setting it up. This is exactly what I was looking for. Thanks, Phil -----Original Message----- From: Todd W [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 06, 2007 10:43 AM To: [email protected] Subject: Re: [qmailtoaster] web based log interface (WAS: lost emails) From: "Phil Leinhauser" <[EMAIL PROTECTED]> > Speaking of the log file timestamps... > > Has anyone found an easier way to view the logs using tai64nlocal? What > I'm > looking for is something like a Webmin plugin or some other type of > viewer, > rather than always going to command line. I sure have... splunk. It provides a web based interface to your logs. You can even search them (i.e. What IP addresses sent my server email that was rejected yesterday?). The non-free version dosent have login (you just go to the web page and it loads), but what I did was added iptables rules that refuse everyone but my IP on those ports. Here are my notes: =item Download # wget 'http://www.splunk.com/index.php/download_track?file=/3.0.2/linux/splunk-3.0 .2-24828.i386.rpm&ac=&wget=true&name=wget =item Install # rpm -i splunk-3.0.2-24828.i386.rpm =item License # cp -i /opt/splunk/etc/splunk-free.license /opt/splunk/etc/splunk.license =item Start # /opt/splunk/bin/splunk start =item Index Logs /opt/splunk/bin/splunk add tail /var/log/qmail/imap4-ssl/current /opt/splunk/bin/splunk add tail /var/log/qmail/imap4/current /opt/splunk/bin/splunk add tail /var/log/qmail/spamd/current /opt/splunk/bin/splunk add tail /var/log/qmail/clamd/current /opt/splunk/bin/splunk add tail /var/log/qmail/authlib/current /opt/splunk/bin/splunk add tail /var/log/qmail/pop3/current /opt/splunk/bin/splunk add tail /var/log/qmail/smtp/current /opt/splunk/bin/splunk add tail /var/log/qmail/pop3-ssl/current /opt/splunk/bin/splunk add tail /var/log/qmail/send/current /opt/splunk/bin/splunk add tail /var/log/qmail/submission/current /opt/splunk/bin/splunk add tail /var/log/clamav/freshclam.log =item Browser http://192.168.1.38:8000/ --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
