09-10-2013
Hello guys,
Thanks for the replies!
Unfortunately I cannot deploy your file edit suggestions. The syslog daemon is set to send the logging directly to ArcSight besides writing it to file. Manipulating the written syslogs is therefore not a valid solution besides the fact this would break security policy because editing a system file before submission will not be accepted, even via (cron)script. They don't really trust us root admins ;-)
I essentially thus really need to be able to change the output of the syslog daemon.
I will check what log level I have set and if your suggested change is something I can test. I will also revert to the OS supplier for checking version and update possibility.
But. Does anyone know about the ssh authentication order and the way that influences the logged message? I found some suggestions online that changing the order would change logged messages?
Best regards,
Sjleegketting.
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hi all,
Have been asked to learn up on providing Sytem Auditing on two SCO boxes.
Where should I start and what pointers can anyone provide.
Whilst I'm learning to look after these two SCO boxes, I'm also to eventually look after three Compaq DS20E True64 Unix boxes also in the near future. (2 Replies)
Discussion started by: Cameron
2 Replies
2. UNIX for Dummies Questions & Answers
Hello,
I am having a problem setting a range of numbers for the "case" structure.
I can use with no problems, but
when I use it doesn't work???
Does the case struture allow numeric ranges?
eg:
echo -e "enter number between 0 and 60: \c"
read $answer
case $answer in
) echo... (2 Replies)
Discussion started by: Joe54321
2 Replies
3. Shell Programming and Scripting
I need to check if $1 is A or B
I tried the following but it seems its not correct..would appreciate a suggestion ?
case "$1"
in
"A" || "B" )
;;
esac
Thanks (4 Replies)
Discussion started by: cosec
4 Replies
4. Solaris
dear all
does any one how to activate the log authlog on solaris (3 Replies)
Discussion started by: murad.jaber
3 Replies
5. Shell Programming and Scripting
Hi
When im listing (ls -al ) its listing directories without / at the end of directories
dir1 dir2 dir3
and i need to list directories with
dir1/ dir2/ dir3/ and this should not be made by command ls -F
/ should be embedded at the last
since one of the scripts reads directories... (1 Reply)
Discussion started by: vasanthan
1 Replies
6. Shell Programming and Scripting
I am trying to write a script which has to copy the directory structure from my system to another system on the network. But I dont want the files to be copied.
I think I have to start with copying all subdirectories names in a directory to a system on the network.
Here's the case:
Source... (1 Reply)
Discussion started by: firefox211
1 Replies
7. Programming
Hi,
I have a following problem in C.
I have a function A in which I used to call another function (function B) and pass an array of values through array variable by using below:-
foo=functionB(array);
In functionB, i used to just return some "values" (e.g return num;) in order to pass... (1 Reply)
Discussion started by: ahjiefreak
1 Replies
8. Shell Programming and Scripting
Hello,
I have a Bash script that processes a text file so that the existing file will look something like this:
/www/repository/2010/201002231329532/LTLO_0407.pdf
/www/repository/2010/201002231329532/LTLO_0507.pdf
/www/repository/2010/201002231329532/LTLO_0607.pdf... (1 Reply)
Discussion started by: manouche
1 Replies
9. UNIX for Dummies Questions & Answers
As part of server hardening process i would like to know the Best way of System Logging and Auditing.
Following point should be taken into consideration.
Logging of critical events
Logging access to critical accounts
Secure storage and availability of logs
Review of logs
Security of logs (4 Replies)
Discussion started by: pinga123
4 Replies
LEARN ABOUT DEBIAN
syslog2dlf
SYSLOG2DLF.IN(1) LogReport's Lire Documentation SYSLOG2DLF.IN(1)
NAME
syslog2dlf - convert syslog log files to DLF
SYNOPSIS
syslog2dlf
DESCRIPTION
This script uses the Lire::Syslog module to create a DLF representation of the syslog log files. It can process all the syslog log formats
supported by that module.
EXAMPLES
To process a log as produced by syslog:
$ syslog2dlf < syslog.log
syslog2dlf will be rarely used on its own, but is more likely called by lr_log2report:
$ lr_log2report syslog < /var/log/syslog.log
SEE ALSO
Lire::Syslog(3pm)
VERSION
$Id: syslog2dlf.in,v 1.6 2006/07/23 13:16:36 vanbaal Exp $
AUTHOR
Francis J. Lacoste <flacoste@logreport.org>
COPYRIGHT
Copyright (C) 2002 Stichting LogReport Foundation LogReport@LogReport.org
This program is part of Lire.
Lire is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free
Software Foundation; either version 2 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.
Lire 2.1.1 2006-07-23 SYSLOG2DLF.IN(1)