Re: some suggestions on log analysis

Check:

http://www.counterpane.com/log-analysis.html

You will find tons of information there (you also have references to application specific log analyzers).

As a recommendation, follow the instructions to set up a centralized log server, and then run some of the log analysis tools on the central log files.

In your case, it may suit you to send those application-specific log files through syslog to the central log server periodically by setting a cron job (e.g. every minute) to do something like this:

cat <DEFANGED_application-specific log file> | logger -p local3.info

Configuring the central log server properly to send facility local3 (e.g) to a different file, would allow you to store application-specific log files for all your network in specific files in the central log server.

Hope this helps.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

Aaron
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Received on Sun Jan 26 19:22:43 2003