[NTLUG:Discuss] syslog parser recommendation?

Mark Hanna Mark.Hanna at freemanco.com
Mon May 8 11:19:48 CDT 2006


If you are look for an enterprise type solution, take a look at
splunk.com.  They have been called the "Google for log files".  It will
index multiple logs from multiple hosts and allow for monitoring and
alerting.

They have a free Splunk Server edition and a for pay Splunk Professional
edition.  

-----Original Message-----
From: Discuss-bounces at ntlug.org [mailto:Discuss-bounces at ntlug.org] On
Behalf Of Richard Geoffrion
Sent: Monday, May 08, 2006 11:12 AM
To: NTLUG Discussion List
Subject: [NTLUG:Discuss] syslog parser recommendation?

Does anyone have any suggestions for either syslog replacement or a 
syslog parser?   I'm wanting dang near instant notification of certain 
events (like drive seek errors (BAD EVIL Maxtor SATA drives!))

Much of what I've found on sourceforge seems to be syslog parsers, ways 
to split and store your syslog in MySQL, and 'after-the-fact' browse
tools.

Am I using the wrong term for what I want?

-- 
Richard


_______________________________________________
http://ntlug.pmichaud.com/mailman/listinfo/discuss



More information about the Discuss mailing list