Hosting Provided By

Re: A tool like "logwatch" for a log server

From: Seth Mattinen <sethm(at)rollernet.us>
Date: Fri Sep 14 2007 - 11:32:57 EDT

Andy Davidson wrote:
>
> On 14 Sep 2007, at 15:59, Felipe Augusto van de Wiel (faw) wrote:
>

>>     Imagining that a lot of people here concentrate
>> their logs in a log server, I was wondering if there are
>> recommendation for a good log analyzer, something like
>> logwatch, or documented procedure to get logs from various
>> hosts checked and reported daily (maybe logcheck?).

>
> We aggregate with syslog-ng and analyze with splunk -
> http://www.splunk.com/
>
> Splunk isn't open source, but it's "the mutts".
>

Sort of related question: Does anybody (when aggregating logs to a dedicated logging host) stop logging to the local disk, or do you still do both local and remote logging?

~Seth

-- 
To UNSUBSCRIBE, email to debian-isp-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Received on Fri Sep 14 11:32:18 2007

This message: [ Message body ]
Next message: Steve Kemp: "Re: A tool like "logwatch" for a log server"
Previous message: Andy Davidson: "Re: A tool like "logwatch" for a log server"
In reply to: Andy Davidson: "Re: A tool like "logwatch" for a log server"
Next in thread: Steve Kemp: "Re: A tool like "logwatch" for a log server"
Reply: Steve Kemp: "Re: A tool like "logwatch" for a log server"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Sun Oct 07 2007 - 00:07:53 EDT