Hi Could some one please point me into the right direction. I want to be able to send an email alert when failed logins occur and when users su to root. I have setup the loginlog file which captures the info ive setup send mail so that i am able to mail out, but i cannot figure out a script to capture and mail the info that i require, any help on this will be most welcomed. Cheers This message posted from opensolaris.org
syslog-ng supports e-mail alerts. However you might want to be careful with that. Make sure these e-mails are sent using gnupg encryption or TLS, you could have a user who type his password in the username field by mistake and your syslog alert might end up broadcasting passwords in cleartext. This message posted from opensolaris.org