On Mon, 2002-10-28 at 17:57, cert wrote: > If there is too much information, I use higher priority level then .info for > kern and syslog facilities. I log *.debug remotely and deal with log rotation and disk management on that box. Additionally, set up swatch to key on certain phrases so you get paged when you know something isn't right and get email on the unknown messages. You can quickly build a decent list of messages to alert on, ignore and email on. > Is that a good practice or am I logging garbage ? You will likely log garbage, but logging 10 lbs of trash is better than trashing 1 oz of important information. Ben ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Oct 30 2002 - 03:12:46 PST