The log scanner will send out an email summary of the log lines of each log listed in /etc/csf/csf.logfiles. All lines will be reported unless
they match a regular expression in /etc/csf/csf.logignore
• File globbing is supported for logs listed in
/etc/csf/csf.logfiles. Be aware that the more files LFD has to track, the greater the performance hit.
• File globs are only evaluated when LFD is started.
• LFD builds the report continuously from lines logged after LFD has started, so any lines logged when LFD is not running will not be reported.
| File | Description |
|---|---|
/etc/csf/csf.conf |
LOGSCANNER_* configuration options |
/etc/csf/csf.logfiles |
Log files to monitor. |
/etc/csf/csf.logignore |
Regular expressions to ignore. |
/usr/local/csf/tpl/logalert.txt |
Log scanner report email template. |