1. Login to your server as root via SSH.
2. Load the logwatch configuration file
Type: pico -w /etc/log.d/conf/logwatch.conf
3. Search for where the log files are mailed too.
Press: CTRL-W
Type: MailTo
Set the e-mail address to an off server account so incase you get
hacked they can not delete the mail without hacking atleast 2 servers.
4. Now lets change what actions you are alerted of.
CTRL-W
Type: Detail
5. Detail = Low
Change that to Medium, or High.
I suggest high, because you will get more detailed logs with all actions.
6. Once you are done lets Exit & Save
CTRL-X then Y then Enter |
