LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 10-23-2007, 03:22 AM   #1
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Rep: Reputation: 15
Syslog server


Hi All

As per our company policy we need to store all the logs likes in Application, system logs in win2k3 server, my cisco firewall logs, squid proxy etc on periodical basis.

Is there any mechanism, to collect all the logs from various sources and storing in a readable format.

Can anyone tell me what is the best possible method to store all these logs, and how corporates managing it.

Regards
Sakthi
 
Old 10-23-2007, 04:09 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,376

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
for a real slick solution for a small / medium sized business, check out splunk. it's very clever and intuitive, and *very* web2.0 if you know what that means. you'd just tell it to listen on a tcp and udp port, 514 for default syslog and tell all devices to send syslog to it. to get windows to send syslog from event logs, check out a tool called snare. if you wish to read other log files, mount that file system on your linux server, using nfs, samba or whatever... and then tell splunk to read the files itself and watch for changes.

for a more traditional syslog, syslog-ng is also very very good, especially when coupled with php-syslog-ng. here, rather than feeding events into a database, you would be looking to store into flat files, potentially directory structured on date, hostname etc...

Last edited by acid_kewpie; 10-23-2007 at 04:14 AM.
 
Old 10-23-2007, 05:53 AM   #3
coolpal
LQ Newbie
 
Registered: Aug 2005
Posts: 14

Rep: Reputation: 0
Wink

I have recently installed syslog-ng. It store the event logs of my servers, routers, n/w printers and n/w switches.
I use phpsyslog-ng as the web frontend for viewing the logs through web.
The system is working perfectly and meets all my reqs.

Give it a shot.
 
Old 11-05-2007, 04:24 AM   #4
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Original Poster
Rep: Reputation: 15
Syslog

Hi All

As per our company policy we need to store all the logs likes in Application, system logs in win2k3 server, my cisco firewall logs etc on periodical basis.

Is there any mechanism, to collect all the logs from various sources and storing in a readable format.

Can anyone tell me what is the best possible method to store all these logs, and how corporates managing it.

Regards
Sakthi
 
Old 11-05-2007, 04:35 AM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,376

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
for a real professional solution (whilst remaining free on certain forms of implementation) i'd very very strongly urge you to look at splunk - splunk.com if you do wish to stay within a genuine syslog solution all the way, then syslog-ng provides a good simple framswork for recieving syslog and storing well. php-syslog-ng can also then serve as a good front end for it.
 
Old 11-05-2007, 05:31 AM   #6
sakthi.s
Member
 
Registered: Nov 2006
Posts: 42

Original Poster
Rep: Reputation: 15
Re:

Thanks for the reply, also I am looking to capture my squid proxy server logs. I just need to user readable format.
 
Old 11-05-2007, 05:47 AM   #7
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,376

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
well if you want to analyse the users and things, splunk is a perfect tool for that too. you can use specific tools like sarg to analyse them, but if a generic tool can do the job with a touch more complexity, it should be hard to ignore.
 
Old 11-05-2007, 07:13 AM   #8
complich8
Member
 
Registered: Oct 2007
Distribution: rhel, fedora, gentoo, ubuntu, freebsd
Posts: 104

Rep: Reputation: 15
exporting all the eventlogs from windows to a listening syslog daemon: use evtsys. easy to configure, easy to install, does that.

cisco ios and catos have a mechanism to specify a loghost, but I don't know what it is offhand.

squid proxy server logs ... dunno if that supports logging to syslog. If it does, then you can collect all your logs in one place and make sense of them fairly trivially with syslog-ng, evtsys, and the builtin features of your various things you want to log.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Centralized Syslog Server Using syslog-NG LXer Syndicated Linux News 0 04-28-2006 06:21 PM
Syslog-ng XaViaR Suse/Novell 2 06-16-2005 03:45 PM
syslog-ng keex Linux - Software 0 09-19-2003 08:13 AM
what is the syslog for? yenonn Linux - General 5 08-15-2003 03:08 AM
syslog bulliver Linux - General 4 04-22-2003 03:45 PM


All times are GMT -5. The time now is 08:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration