I'm looking for a few F/OSS syslog programs -- one easy to use (sort of like
Kiwi syslog) and another that's much more scalable and would let me, say,
aggregate logs from lots of different boxes and maybe even do other sorts of
cool things (find patterns, etc).

Any suggestions would be greatly appreciated.

On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> like Kiwi syslog) and another that's much more scalable and would let
> me, say, aggregate logs from lots of different boxes and maybe even do
> other sorts of cool things (find patterns, etc).

I am not aware of a single package that will do all that you want, but a
combination of a few packages should get you there. I use syslog-ng for
aggregating logs from many servers, and I think it far surpasses the
standard udp syslog daemon for reliability. Running logcheck and/or
logtool on the syslog server to parse the raw logs will get you pattern
matching and various reporting possibilities.

--
Kind Regards,
Michael Shuler


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Michael Shuler <michael@pbandjelly.org>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and maybe even do
> > other sorts of cool things (find patterns, etc).
>
> I am not aware of a single package that will do all that you want, but a
> combination of a few packages should get you there. I use syslog-ng for
> aggregating logs from many servers, and I think it far surpasses the
> standard udp syslog daemon for reliability. Running logcheck and/or

It's far more powerful in filtering too. When pump was filling my
/var with meaningless logging, syslog-ng was very easy to configure to
/dev/null them.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

2007/9/29, s. keeling <keeling@nucleus.com>:
> Michael Shuler <michael@pbandjelly.org>:
> > On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > > like Kiwi syslog) and another that's much more scalable and would let
> > > me, say, aggregate logs from lots of different boxes and maybe even do
> > > other sorts of cool things (find patterns, etc).

rsyslog may be what you are searching for


--
http://noneisyours.marcher.name
http://feeds.feedburner.com/NoneIsYours


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Michael Shuler <michael@pbandjelly.org>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and maybe even do
> > other sorts of cool things (find patterns, etc).
>
> I am not aware of a single package that will do all that you want, but a
> combination of a few packages should get you there. I use syslog-ng for
> aggregating logs from many servers, and I think it far surpasses the
> standard udp syslog daemon for reliability. Running logcheck and/or

It's far more powerful in filtering too. When pump was filling my
/var with meaningless logging, syslog-ng was very easy to configure to
/dev/null them.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
..


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Michael Shuler <michael@pbandjelly.org>:
> On 09/28/2007 11:29 PM, Rogelio Bastardo wrote:
> > I'm looking for a few F/OSS syslog programs -- one easy to use (sort of
> > like Kiwi syslog) and another that's much more scalable and would let
> > me, say, aggregate logs from lots of different boxes and maybe even do
> > other sorts of cool things (find patterns, etc).
>
> I am not aware of a single package that will do all that you want, but a
> combination of a few packages should get you there. I use syslog-ng for
> aggregating logs from many servers, and I think it far surpasses the
> standard udp syslog daemon for reliability. Running logcheck and/or

It's far more powerful in filtering too. When pump was filling my
/var with meaningless logging, syslog-ng was very easy to configure to
/dev/null them.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
...


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
..


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org