Automating Linux and Unix System Administration, Second Edition

CHAPTER 9Generating Reports andAnalyzing Logs

You need to know about errors on the systems in your environment before they turn into major problems. You also need the ability to see the actions your automation system is performing. This means you'll need two types of reporting:

• Log reports that capture bad strings, report them immediately, and ignore the rest
• Log reports that ignore "okay" strings and report on what's left

You want to know right away if a system has serious hardware issues or major application issues. We're going to run a reporting system that looks for unwanted words or phrases. Here is one such unwanted message:

using specific query-source port suppresses port randomization and can be insecure

This particular message means ...