Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
mumble:benutzerhandbuch:murmur:logcheck [2017/02/20 00:09] Natenom [If the [[Murmur|Mumble server]] logs to [[syslog daemon]]] |
mumble:benutzerhandbuch:murmur:logcheck [2018/04/02 12:36] (aktuell) |
||
---|---|---|---|
Zeile 1: | Zeile 1: | ||
- | ======Logcheck regular expressions for Murmur (Mumble-Server)====== | + | ======Reguläre Ausdrücke für Logcheck für Murmur (Mumble-Server)====== |
- | This is a regex file for logcheck. Partially taken from [[mumble:benutzerhandbuch:murmur:multitail-theme|multitail-theme]]. | + | Diese Seite gibt es nur in Englisch, siehe [[en:mumble:benutzerhandbuch:murmur:logcheck|hier]]. |
- | + | ||
- | Hosted on GitHub with other logcheck rule files: https://github.com/Natenom/logcheck-rule-files. | + | |
- | + | ||
- | =====Installation===== | + | |
- | ====If using the original Mumble server logfile==== | + | |
- | Put [[https://raw.github.com/Natenom/logcheck-rule-files/master/murmur|this file]] into ''/etc/logcheck/ignore.d.server'' and add the murmur.log path to ''/etc/logcheck.logfiles''. | + | |
- | + | ||
- | Make sure logcheck can access the servers log file. | + | |
- | + | ||
- | To test what will be sent via mail, use: | + | |
- | <code> | + | |
- | logcheck-test -i -l /path/to/murmur.log -r /etc/logcheck/ignore.d.server/murmur | + | |
- | </code> | + | |
- | + | ||
- | To invoke logcheck manually: | + | |
- | <code>su -s /bin/bash -c "/usr/sbin/logcheck" logcheck</code> | + | |
- | + | ||
- | ====If the Mumble server logs to syslog daemon==== | + | |
- | Put [[https://raw.github.com/Natenom/logcheck-rule-files/master/murmur_syslog|this file]] into ''/etc/logcheck/ignore.d.server''. | + | |
- | + | ||
- | To test what will be sent via mail, use: | + | |
- | <code> | + | |
- | logcheck-test -i -l /var/log/syslog -r /etc/logcheck/ignore.d.server/murmur_syslog | + | |
- | </code> | + | |
- | + | ||
- | To invoke logcheck manually: | + | |
- | <code>su -s /bin/bash -c "/usr/sbin/logcheck" logcheck</code> | + | |
- | + | ||
- | =====Result===== | + | |
- | The following events are sent via email: | + | |
- | * [[Ice]] stuff | + | |
- | * Logins without correct certificate or logins with wrong password | + | |
- | * [[mumble:benutzerhandbuch:faq_murmur:global_ban|Global ban]] | + | |
- | * Server ban | + | |
- | * [[mumble:benutzerhandbuch:mumble:zertifikate|Certificate]] hash ban | + | |
- | * Banlist update | + | |
- | * Invalid [[mumble:namen_in_mumble|username]] | + | |
- | + | ||
- | =====Example===== | + | |
- | <code> | + | |
- | <W>2012-11-11 16:57:18.047 1 => Ice ServerCallback ABABABABAB-CCDD-EDEDE-BABA-9182ADFADADAD -o:tcp -h 127.0.0.1 -p 49621 failed | + | |
- | <W>2012-11-11 16:57:18.048 1 => Removed Ice ServerCallback ABABABABAB-CCDD-EDEDE-BABA-9182ADFADADAD -o:tcp -h 127.0.0.1 -p 49621 | + | |
- | <W>2012-11-11 16:57:31.306 Added Ice MetaCallback ABABABABAB-CCDD-EDEDE-BABA-9182ADFADADAD -o:tcp -h 127.0.0.1 -p 46513 -t 5000 | + | |
- | <W>2012-11-11 17:30:43.472 1 => <91:Username(-1)> Rejected connection: Wrong certificate or password for existing user | + | |
- | </code> | + | |
- | + | ||
- | {{tag>logcheck logs logfile check}} | + |