Logwatch

如何從 logwatch 中排除 proftp 身份驗證失敗消息?

  • August 15, 2013

logwatch在我的伺服器上使用,現在我在報告電子郵件中收到了數千條這樣的行:

--------------------- pam_unix Begin ------------------------ 

proftpd:
   Unknown Entries:
      check pass; user unknown: 339 Time(s)
      authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:62.115.255.98 : 27 Time(s)
      authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=::ffff:188.102.152.23 : 7 Time(s)
...

我已經有日誌級別低

編輯/etc/logwatch/conf/logwatch.conf

並添加

Service = "-proftpd-messages"
Service = "-pam_unix"

引用自:https://unix.stackexchange.com/questions/86891