A lightweight, cron-driven monitoring stack: 30 days of CPU, load, disk and Apache metrics with threshold alerting, live SSH-login tracking, and post-mortem snapshots captured automatically when an alert fires.
One-minute samples of the numbers that matter, charted with your alert thresholds drawn right on the graphs. Pick a range from the last 10 minutes to 30 days.
Each successful SSH authentication from /var/log/secure is recorded, grouped by source IP, and classified by risk — with an optional email on every login.
When an alert fires, Server Monitoring captures a wide cross-section of system state automatically — so you can investigate even if the server later goes down.
No. It's entirely cron-driven — a one-minute poll collects metrics and tails SSH logins, and a daily job prunes history. There's nothing resident to crash or leak.
An alert fires when a metric stays above its threshold for a whole duration window, and recovers when it drops back. CPU, I/O wait, load (1/5/15 min, per core), disk per mount, and Apache workers are all configurable; emails respect a per-metric cooldown.
Yes — it's the one Toolbox extension that's genuinely useful on DNSOnly nodes, for metrics and SSH-login tracking.
In a local SQLite database (metrics for 30 days, SSH logins for 45), plus snapshot ZIPs — all root-only on the server. Nothing is sent off the box.
Enable Server Monitoring and a free trial starts on its own — no key, no credit card.