Page 1 of 1

Logscanner report truncated always.

Posted: 26 Mar 2017, 09:09
by HostBob
I'm recently not getting the end of the daily log scanner reports as it's being truncated to some maximum number of lines setting.

Is there a way to either increase the maximum number of lines - or choose to exclude some sections entirely?

My report is dominated by firewall block events - which I guess I'm not really that interested in as they were successfully blocked.

TY!

Re: Logscanner report truncated always.

Posted: 26 Mar 2017, 18:21
by sawbuck
HostBob wrote: 26 Mar 2017, 09:09 Is there a way to either increase the maximum number of lines - or choose to exclude some sections entirely?
In the Log Scanner section of the CSF config file you can set the number of lines reported:
Maximum number of lines in the report before it is truncated. This is to
prevent log lines flooding resulting in an excessively large report. This
might need to be increased if you choose a daily report
LOGSCANNER_LINES =
You can also add a regular expression in /etc/csf/csf.logignore to ignore certain logged events.

Re: Logscanner report truncated always.

Posted: 27 Mar 2017, 11:13
by HostBob
Ah great stuff, thank you!