Syslog monitor/Email alerts/Web instface/reports

reno138 · n00b Joined: 27 Oct 2003 Posts: 14 Location: Texas, US

I'm looking to set up a(nother) central syslog server and would like to find something that can do email alerts, reports, and just sit there and take about 2GB a day in logs. I have the hardware available, I just don't know where to start for getting this done. I'm currently using syslog-ng, and php-syslog-ng. It's fast, simple, and reliable, but having the other features would be nice. Any suggestions?

Thanks!

gimpel · Posted: Mon Oct 06, 2008 8:00 pm Post subject:

Splunk them!
http://www.splunk.com/

But for 2G/dayyou'll have to pay for that baby.

There are other things like http://www.crypt.gen.nz/logsurfer/ too.
_________________
http://proaudio.tuxfamily.org/wiki - pro-audio software overlay

think4urs11 · Posted: Mon Oct 06, 2008 8:00 pm Post subject:

a combination of logwatch, phplogcon, sec an splunk probably
_________________
Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself

gimpel · Posted: Mon Oct 06, 2008 8:05 pm Post subject:

sec! Thanks! Just scrubbed my head two minutes 'cause I forgot the name of that one.
_________________
http://proaudio.tuxfamily.org/wiki - pro-audio software overlay