Is anyone using Samhain with centralized logging?

abefroman · 04-06-2008, 09:05 PM

unSpawn · 04-10-2008, 07:40 AM

Maybe it would be better to ask specific questions we can answer, or else maybe seek advice on the Samhain mailing list?

abefroman · 04-10-2008, 09:37 AM

I am just trying to get an idea of if people here are using centralized loggings and what tool they are using for it.

Ex. Samhain, syslog-ng, etc

unSpawn · 04-10-2008, 12:11 PM

Sounds like you got a reason to have this thread deleted and set up a new one as a poll instead.

DotHQ · 04-10-2008, 12:18 PM

I use syslog-ng. It does a fine job for us. 100+ systesms. Works GREAT!

I've never looked at the other product you mentioned.

abefroman · 04-10-2008, 12:38 PM

Quote:

Originally Posted by unSpawn

Sounds like you got a reason to have this thread deleted and set up a new one as a poll instead.

I thought people would respond if they feel strongly for or against Samhain for this.

I'm reading the docs for syslog-ng now.

abefroman · 04-10-2008, 12:40 PM

Quote:

Originally Posted by DotHQ

I use syslog-ng. It does a fine job for us. 100+ systesms. Works GREAT!

I've never looked at the other product you mentioned.

Are you using the Entreprise version of it or the free open source version and how much differnce is there between the two if you know?