[rmdoss]

I recommend using something like OSSEC to watch your logs and also tie it to Slack/Pagerduty.

This post explains how to set it up:

https://blog.sucuri.net/2016/01/server-security-integrating-...