Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Unix Syslog monitoring tool / best practice

1 view
Skip to first unread message

Trent Rivers

unread,
Mar 18, 2004, 9:09:51 AM3/18/04
to
Would like to know what the current best practice is for Syslog
monitoring for Unix. Some tools i've seen suggested are: Swatch,
LogSentry, LogTool, Analog, Nagios.

I'm intertested in something that does active Syslog monitioring and
can generate Sys Admin email alerts when nasty things might be
happening.

Dave Hinz

unread,
Mar 18, 2004, 8:26:15 PM3/18/04
to

BigBrother (bb4.com) also does this out of the box - configurable
however you want, but by default sends one messages for events that
you'd want to see in a logfile. Free for most users, easy to set up,
doesn't suck. We're using it in conjunction with Nagios.

I'm not sure how you'd use Analog for syslog monitoring, unless this
is some add-on I haven't seen; we use that for webserver logfiles
where it performs admirably, but it's a reporting tool, not a monitoring
and notification tool far as I know. BB will be up and running for you
in half a day if you have a reasonably coherent system to start with.

Dave Hinz


Trent Rivers

unread,
Mar 21, 2004, 9:24:07 PM3/21/04
to
Ok, thanks for the suggestion... i'll check it out

Dave Hinz <dave...@spamcop.net> wrote in message news:<c3di7n$26p6hs$6...@ID-134476.news.uni-berlin.de>...

David Douthitt

unread,
May 10, 2004, 2:36:05 AM5/10/04
to
Trent Rivers wrote:

You might be interested in System Event Correllator (SEC) and in
syslog-ng. syslog-ng can provide active alerts based on content of the
logs. SEC also does this, but also handles event correlation: it
recognizes when events happen multiple times over a period of time, or
when an event starts to happen "too often", and other similar time-based
checks. SEC is quite powerful.

Nagios is more of a system monitoring system, though you could have an
alert based on log entries. I also like SGI's Performance CoPilot (PCP)
for monitoring purposes.

Kyle

unread,
May 12, 2004, 3:49:23 PM5/12/04
to
Hello,

>> Would like to know what the current best practice is for Syslog
>> monitoring for Unix. Some tools i've seen suggested are: Swatch,
>> LogSentry, LogTool, Analog, Nagios.
>>
>> I'm intertested in something that does active Syslog monitioring and
>> can generate Sys Admin email alerts when nasty things might be
>> happening.

Take a look at Kiwi Syslog they have email and SMS alert add-on options.
http://www.notepage.net/kiwi-syslog/kiwi-syslog.htm

Kyle

0 new messages