Not watching pureftpd.log and phpmyadmin.log
Posted: 21 Nov 2019, 19:30
Hi,
It seems that CSF is not watching pureftpd.log and phpmyadmin.log
Is there any way to get the actual counters for each monitored log ?
I meen to see how much failed attempts were made.
In system rsyslog,conf I make this changes:
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
ftp.* -/var/log/pureftpd.log
*.info;mail.none;authpriv.none;cron.none;ftp.none; /var/log/messages
In /etc/csf/csf.conf I fix the roundcube log path
HTACCESS_LOG = "/var/log/httpd/error_log"
MODSEC_LOG = "/var/log/httpd/error_log"
SSHD_LOG = "/var/log/secure"
SU_LOG = "/var/log/secure"
FTPD_LOG = "/var/log/pureftpd.log"
SMTPAUTH_LOG = "/var/log/exim/mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"
IPTABLES_LOG = "/var/log/messages"
SUHOSIN_LOG = "/var/log/messages"
SMTPRELAY_LOG = "/var/log/exim/mainlog"
BIND_LOG = "/var/log/messages"
SYSLOG_LOG = "/var/log/messages"
WEBMIN_LOG = "/var/log/secure"
DIRECTADMIN_LOG = "/var/log/directadmin/login.log"
DIRECTADMIN_LOG_R = "/var/www/html/roundcube/logs/errors.log”
DIRECTADMIN_LOG_S = "/var/www/html/squirrelmail/data/squirrelmail_access_log"
I do not see the call to the phpmyadmin log, where should I add it ?
Thanks
It seems that CSF is not watching pureftpd.log and phpmyadmin.log
Is there any way to get the actual counters for each monitored log ?
I meen to see how much failed attempts were made.
In system rsyslog,conf I make this changes:
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
ftp.* -/var/log/pureftpd.log
*.info;mail.none;authpriv.none;cron.none;ftp.none; /var/log/messages
In /etc/csf/csf.conf I fix the roundcube log path
HTACCESS_LOG = "/var/log/httpd/error_log"
MODSEC_LOG = "/var/log/httpd/error_log"
SSHD_LOG = "/var/log/secure"
SU_LOG = "/var/log/secure"
FTPD_LOG = "/var/log/pureftpd.log"
SMTPAUTH_LOG = "/var/log/exim/mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"
IPTABLES_LOG = "/var/log/messages"
SUHOSIN_LOG = "/var/log/messages"
SMTPRELAY_LOG = "/var/log/exim/mainlog"
BIND_LOG = "/var/log/messages"
SYSLOG_LOG = "/var/log/messages"
WEBMIN_LOG = "/var/log/secure"
DIRECTADMIN_LOG = "/var/log/directadmin/login.log"
DIRECTADMIN_LOG_R = "/var/www/html/roundcube/logs/errors.log”
DIRECTADMIN_LOG_S = "/var/www/html/squirrelmail/data/squirrelmail_access_log"
I do not see the call to the phpmyadmin log, where should I add it ?
Thanks