RE: Tripwire logs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-|-----Original Message-----
-|From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-
-|bounces@xxxxxxxxxx] On Behalf Of Adam Gilstrap
-|Sent: Wednesday, March 31, 2004 6:47 AM
-|To: redhat-list@xxxxxxxxxx
-|Subject: Tripwire logs
-|
-|
-|My tripwire logs, which are emailed to me, continuously grow in size(about
-|5mb now).  I have noticed that it keeps the same data over and over...it
-|will add any new system changes but what I want is to just have the days
-|logs of what happened.  Let me know if this isn't clear and I can explain
-|more.  Thanks
-|
-|Adam
-|
-|
-|--
-|redhat-list mailing list
-|unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
-|https://www.redhat.com/mailman/listinfo/redhat-list

Sounds like it's time for a database update. This will update your tripwire
and give the OK to all changed files.  PLEASE NOTE:  Any files (good or bad)
will be OK'd, so be sure of what you're giving the thumbs up to!

Tripwire -m u -r /var/lib/tripwire/reports/<MachineName-LatestDate>

With the <...> stuff filled in with the latest file from that directory.
Some people find it easier when they know the system is clear to do 

Rm -rf /var/lib/tripwire/reports/*
(this clears the report directory)

Tripwire --check
(This will manually run tripwire, creating a new report)

Tripwire -m u -r /var/lib/tripwire/reports/<tab>

You will need your tripwire passwords to update the file. 

Hope this helps,

Toby


-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux