ConfigServer Community Forum

I would like to aggregate logs from multiple servers to some service like FluentD or Logstash + Kibana + Elasticsearch.

I know that CSF (LFD actually) can log everything to syslog, but there is a huge difference between information in syslog and e-mails which are sent to some mailbox. So the question is - is there a way to enable e-mail like logging to disk (where e-mail like equals all information which is available in email to be available to the log file on disk (or syslog in JSON format))?

You would have to use the BLOCK_REPORT option and write a script to do what you want to achieve

This should work for all types of reports (IP blocks, mailing alerts, suspicious processes and so on)?