Monitoring root su.

[Marc Powell]

On Mar 13, 2009, at 8:42 AM, Jussi Sallinen wrote:

> Hi!
>
> My first post to Nagios list.
>
> Has someone done email/sms monitoring service to nagios for  
> monitoring use of "su"?
> I would like to certain contact or contact group to be notified when  
> someone su's or logins as root
> to the system - any recommendations for the best way to do such  
> monitoring?

Since they're logged, I'd look at using one of the check_log plugins.  
That, possibly combined with 'is_volatile', should get you an alert  
for those events. The notification part is standard fare...

--
Marc



------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null