Hello everyone! I have a lot of WWW servers(serving by apache2) in the internet. Each server have many virtual hosts. Each virtual host have own logs(error and common), which I need to auditing for security incidents by some tools. This tools will analyse log files and if some security event(unauthorized access attempt, scanning, DoS attempt, and other) happen it will send alert via email to administrator. Similar tools for syslog: logcheck/logsentry and swatch. Can someone recommended such tools? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx