Working with Syslog Data

Install logwatch and mailutils:

1. Connect to the lab server using SSH or the Instant Terminal.
2. Run the commands sudo apt-get update and sudo apt-get install -y logwatch.
3. When prompted, select OK by pressing the tab button until "OK" is highlighted, then select Local only and press "Enter/Return".
4. Next, use the down arrow to select OK and then click OK when asked for the System mail name.
5. Run the command sudo apt-get install -y mailutils.

Run Logwatch and view the results:

1. Run the command sudo logwatch --detail Low --mailto root --service All --range today.
2. Run the command sudo mail, then type the number 1 and hit enter. This will open up the email from Logwatch that contains the reported data. Use the spacebar to scroll through the report.
3. Use CTRL+X, or your system's equivalent, to exit the report.
4. Type exit to close the mail application.

1. Manually review syslog data:
   1. Type the command sudo cat /var/log/syslog | grep vnc.
   2. View the log entries pertaining to VNC activity.
2. Export syslog data to syslog.txt on the Desktop of the server with the command sudo cat /var/log/syslog > /home/cloud_user/Desktop/syslog.txt.