It is fine for a 1-man server, but if you have multiple users and you have to be on top of things, then you need a bit more than that. Specially to look at suc

It is fine for a 1-man server, but if you have multiple users and you have to be on top of things, then you need a bit more than that. Specially to look at successful logins and audit where they come from. This is a good blog post on the subject: https://blog.sucuri.net/2016/03/server-security-anomaly-behaviour-with-ossec.html https://blog.sucuri.net/2016/03/server-security-anomaly-beha...