Monitoring root su.

Marouane Himdi marouane.himdi at kereval.com
Fri Mar 13 15:47:31 CET 2009


It's possible to use Nagios coupled with  SEC (Simple Event Correlator) to achieve a realtime log analysis

Dr Marouane HIMDI


----- Mail Original -----
De: "Hari Sekhon" <hpsekhon at googlemail.com>
À: "Jussi Sallinen" <jussi at sallinen.name>
Cc: nagios-users at lists.sourceforge.net
Envoyé: Vendredi 13 Mars 2009 15h28:34 GMT +01:00 Amsterdam / Berlin / Berne / Rome / Stockholm / Vienne
Objet: Re: [Nagios-users] Monitoring root su.

Jussi Sallinen wrote:
> Has someone done email/sms monitoring service to nagios for monitoring use of "su"? 
> I would like to certain contact or contact group to be notified when someone su's or logins as root
> to the system - any recommendations for the best way to do such monitoring?
Nagios is not really the right tool for this job, look into logservers 
and automated alerting from syslog, this is how I do, much much better. 
Usually you would code any notification method you want, email or sms 
doesn't matter at that point, you can do what you want once you have the 
method of detection.

Google log analysis.

-h

-- 
Hari Sekhon
Always open to interesting opportunities
http://www.linkedin.com/in/harisekhon


------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null


More information about the Users mailing list