Thread: Event log monitoring...

Hello Lea,

Did you see Logcheck - Logfile Scanner?

for pure awesomeness:

Splunk | IT Search for Log Management, Operations, Security and Compliance

spiceworks??

I use Nagios, which I think is used by many, many people around the world.

Originally Posted by gigatux

I use Nagios, which I think is used by many, many people around the world.

AFAIK nagios does not monitor and report on log files...

Originally Posted by goscombtech

AFAIK nagios does not monitor and report on log files...

Apologies - I think you're right (unless you write a plugin!)

On my Linux system log though, I also use Logcheck, which has some standard filtering criteria to get rid of most harmless entries. It still requires quite a lot of fine tuning. Combining this with redirecting syslog output to remote hosts should mean you can scan for interesting events.

It's quite simple though, so won't collate events etc.

Xymon with the WinBB client maybe?

Or for the ultimate in luxury, Splunk

It's free up to a certain level of syslog messages, that level is pretty high so you might be able to get away with the free one!

Information is all on their site somewhere.

splunk splunk splunk

splunk don't publish their pricing anywhere, as it would scare people off - they want you to play with it, then contact them to find out how much, at which ponit you might decide it's worth it.

Someone I know got some pricing last year, and it was something around about £10k/year for 500MB/day, so quite crazy - however they know that nothing else comes close so can afford to charge that much!