LOGFETCH
Section: User Commands  (1)
Updated: Version Exp:  9 Aug 2006
Index
Return to Main Contents
 
NAME
logfetch - Hobbit client data collector
 
SYNOPSIS
logfetch CONFIGFILE STATUSFILE
 
DESCRIPTION
logfetch is part of the Hobbit client. It is responsible
for collecting data from logfiles, and other file-related data,
which is then sent to the Hobbit server for analysis.
logfetch uses a configuration file, which is automatically
retrieved from the Hobbit server. There is no configuration
done locally. The configuration file is usually stored in
the $BBHOME/tmp/logfetch.cfg file, but editing this file has
no effect since it is re-written with data from the Hobbit 
server each time the client runs.
logfetch stores information about what parts of the monitored
logfiles have been processed already in the $BBHOME/tmp/logfetch.status 
file. This file is an internal file used by logfetch, and should
not be edited. If deleted, it will be re-created automatically.
 
SECURITY
logfetch needs read access to the logfiles it should monitor. If you 
configure monitoring of files or directories through the "file:"
and "dir:" entries in 
client-local.cfg(5)
then logfetch will require at least read-acces to the directory
where the file is located. If you request checksum calculation
for a file, then it must be readable by the hobbit client user.
Do NOT install logfetch as suid-root. There is no
way that logfetch can check whether the configuration file it uses
has been tampered with, so installing logfetch with suid-root
privileges could allow an attacker to read any file on the system
by using a hand-crafted configuration file. In fact, logfetch will
attempt to remove its own suid-root setup if it detects that it
has been installed suid-root.
 
ENVIRONMENT VARIABLES
- DU
- 
Command used to collect information about the size of directories.
By default, this is the command du -k. If the local
du-command on the client does not recognize the "-k" option,
you should set the DU environment variable in the 
$BBHOME/etc/hobbitclient.cfg file to a command that
does report directory sizes in kilobytes.
 
FILES
- $BBHOME/tmp/logfetch.cfg
- 
- $BBHOME/tmp/logfetch.status
- 
 
SEE ALSO
hobbit(7), hobbit-clients.cfg(5)
 Index
- NAME
- 
- SYNOPSIS
- 
- DESCRIPTION
- 
- SECURITY
- 
- ENVIRONMENT VARIABLES
- 
- FILES
- 
- SEE ALSO
- 
This document was created by
man2html,
using the manual pages.
Time: 19:49:57 GMT, August 09, 2006