logsend's main goal is to provide an easy way of receiving e-mail notifications about the changes to the system's (log) files, which makes it suitable for watching mainly the server activity.
Logsend acts like a daemon; it watches the specified files and mails the changes (additions) to your e-mail address. It can search for a pattern in the new added lines and send only those that match. It uses either the inotify kernel subsystem or the tail backend for the systems which don't support inotify (eg. the 2.4 linux kernels, or the non-linux ones).
Since logsend can watch any text file, it can be used in association with other (security) tools, such as Snort, if their output is redirected to a file. Log rotation is fully supported.
Logsend is entirely written in bash and comes with a dialog-based configuration tool, but configuring by hand is possible and straightforward. It also comes with a live file monitor, allowing users to watch the changes in real time. Any user can run an instance of logsend if the files to watch are readable.
· Dialog 0.9a-20010811
· inotify-tools 3.5
What's New in This Release:
· This version brings Two new backends were added: Tail and Simple.
· The Inotify backend was rewritten from scratch.
· An improved live file monitor based on dialog was added.