Page 1 of 1

Not watching pureftpd.log and phpmyadmin.log

Posted: 21 Nov 2019, 19:30
by crehost
Hi,

It seems that CSF is not watching pureftpd.log and phpmyadmin.log

Is there any way to get the actual counters for each monitored log ?
I meen to see how much failed attempts were made.

In system rsyslog,conf I make this changes:

auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog
#cron.* /var/log/cron.log
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
ftp.* -/var/log/pureftpd.log

*.info;mail.none;authpriv.none;cron.none;ftp.none; /var/log/messages

In /etc/csf/csf.conf I fix the roundcube log path

HTACCESS_LOG = "/var/log/httpd/error_log"
MODSEC_LOG = "/var/log/httpd/error_log"
SSHD_LOG = "/var/log/secure"
SU_LOG = "/var/log/secure"
FTPD_LOG = "/var/log/pureftpd.log"
SMTPAUTH_LOG = "/var/log/exim/mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"
IPTABLES_LOG = "/var/log/messages"
SUHOSIN_LOG = "/var/log/messages"
SMTPRELAY_LOG = "/var/log/exim/mainlog"
BIND_LOG = "/var/log/messages"
SYSLOG_LOG = "/var/log/messages"
WEBMIN_LOG = "/var/log/secure"
DIRECTADMIN_LOG = "/var/log/directadmin/login.log"
DIRECTADMIN_LOG_R = "/var/www/html/roundcube/logs/errors.log
DIRECTADMIN_LOG_S = "/var/www/html/squirrelmail/data/squirrelmail_access_log"

I do not see the call to the phpmyadmin log, where should I add it ?

Thanks