Tag Archives: Linux

Capturing IP tables logs

Overview CentOS7’RHEL7 – I needed to log dropped packets form IPtables to a separate file using rsyslog, I like my logs in separate files, and then rotate them. I read several online guides and most worked but ended up with … Continue reading

Posted in Uncategorized | Tagged , , , , | Leave a comment

Migrate and upgrade Tenable Security Center from RHEL6/CentOS6 to RHEL7/CentOS7

Overview I had Tenable Security Center running on a RHEL6 VM which scans around 1000 hosts several times a week. REHL6 is getting a bit long-in-the-tooth and also there was a need to upgrade to the latest and greatest version of … Continue reading

Posted in Linux & Solaris | Tagged , , , , , , | Leave a comment

How to prevent audit logs appearing in /var/log/messages – RHEL7

Overview For RHEL7. This took more work than I anticipated. My goal was this: Write audit logs to /var/log/audit Forward audit and syslog to central logging server Audit logs to NOT appear in /var/log/messages The items 1 and 2 were … Continue reading

Posted in Linux & Solaris | Tagged , , , , | Leave a comment

Samba troubleshooting tips & tricks

You are having problems getting samba to do your beck and call, and it’s not working as it should, well here a few things to help you diagnose things – it’s assumed you have the basic already configured. First, crank … Continue reading

Posted in Linux & Solaris | Tagged , , , | Leave a comment

RHEL6.4-64 – No networking after cloning via template VM using vSphere client

I had a VMware VM of a RHEL6.4 64-bit  machine, security hardened to CIS standards, converted to VM template within vSphere as it was going to be reused, I then used ‘Clone to New Virtual Machine’ to…well..erm..clone it, this worked … Continue reading

Posted in Linux & Solaris | Tagged , , | 1 Comment

Centos6.4 64-bit – No networking after clean install

I was recently running up a new CentOS6.4 64-bit minimal install on VMware vCenter v5  & vSphere client v5, and during the install of CentOS you can configure the networking manually, which I usually do for servers.  This VM server … Continue reading

Posted in Linux & Solaris | Tagged , | Leave a comment

pam_tally & pam_tally2

There a few minor differences between pam_tally & pam_tally2, just enough to trip you over and end up in another head scratching moment! pam_tally,  seems to have fallen out of favour for RHL6 & >= CentOS 6, they  seemed to … Continue reading

Posted in Linux & Solaris | Tagged , , , , | 4 Comments

Splunk – howto configure a RHEL6 host to send data to Spunk and to use the Splunk TA for Unix and Linux

I did this. On Splunk server (receiver) Download/install Splunk TA for Unix and Linux to the Splunk server (receiver) and enabled it by going to Manager|Apps|Enable On host you want to collect data from (sender) Download and install the Splunk … Continue reading

Posted in Linux & Solaris | Tagged , | Leave a comment