About:
Logcheck parses system logs and generates email reports based on anomalies. Anomolies can be defined by users with 'violations' files. It differentiates between 'Active System Attacks', 'Security Violations', and 'Unusual Activity', and is smart enough to remember where in the log it stopped processing to improve efficiency. It can also warn when log files shrink, and does not report errors when they are rotated.

Author:
Todd Troxell [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.42/10.00 (6 votes)

Homepage:
http://logcheck.org
Tar/GZ:
https://alioth.debian.org/project/showfiles.php?group_id=30198
Debian package:
https://alioth.debian.org/project/showfiles.php?group_id=30198
CVS tree (cvsweb):
http://alioth.debian.org/scm/?group_id=30198
Mailing list archive:
http://alioth.debian.org/mail/?group_id=30198

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Intended Audience]		System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX, POSIX :: BSD, POSIX :: HP-UX, POSIX :: IRIX, POSIX :: Linux, POSIX :: SunOS/Solaris
[Topic]		Security, System, System :: Logging, System :: Monitoring

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	1.2.45	06-Jul-2006	GNU General Public License (GPL)

 Articles referencing this project

• Debian: New logcheck packages fix insecure temporary directory
  by Patrick Lenz , in Security
  Sat, Apr 17th 2004 03:21