EnServe Guides
contents
How To...


What EnServe related Schedular Jobs Should I have?

Cron is the schedular that controls when unattended jobs are run. It runs in the background and there is no administration other than keeping the job list correct.

There are five jobs relating to Enserve:

update_uvscan Check for Virus updates
squid rotate Rotate the Squid logfiles to keep them in check
savelog Rotate other EnServe logfile.
sec Security report to monitor activity.
uvscan Scan for viruses

There is another related cron job 'prune', usually runs on Sunday at 1:01 am - prune will shrink some of the other EnServe log files. However, the files 'pruned' are not related to the main security report.

What order should I have my Enserve cron jobs in?

It does not matter when update_uvscan is run - every night is ideal but it is up to you. We recommend it is run at least weekly, new viruses come out all the time - keep the scanner up-to-date.

You will find a default uvscan job to scan the disk once a week (Sunday at 1:20 am). You can alter that as suits - you can also manually scan the disk (or part of it). See the EnServe Manual for more details.

The others (savelog/squid/sec) - you should run 'sec' after both squid and the savelog job, sec will look at the current log contents, if you run it before you will get the data offset by one week. To look at the CURRENT log files you can use the Admin option as this lets you choose.

Here is a sample set of crontab entries for Enserve sites

# Run EVERY night at 10 o'clock to update Virus Scanner Definitions
0 22 * * *    /usr/utilities/update_uvscan
#
# Keep the size of the logfiles in check - Sunday 1:01 am
1 1 * * 0    /usr/utilities/savelog >/dev/null
#
# Rotate the Web Cache log files 
5 1 * * 0   /etc/squid rotate
#
# Scan the 'common' area and the user home directories.
20 1 * * 0 /usr/local/bin/uvscan -rp --ignore-links --summary \
  -f /etc/default/uvscan | mail -s "Virus Scan" security
#
# Mail out the security report (Use mail alias)
0 2 * * 0  /usr/utilities/sec -R | mail -s "Security Report" security


FAQ's