LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Network log viewer, Which. (https://www.linuxquestions.org/questions/linux-networking-3/network-log-viewer-which-203342/)

Nichole_knc 07-10-2004 07:12 AM

Network log viewer, Which.
 
I have been searching for a network log viewer to check and monitor logs located on remote servers via ssh. I have not really found anything of value via searches of the net or local. Swatch seemed promising but I ran into compilee issues with Date::Calc requireing Bit::Vector 5.07. cpan only has version 5.0 of Bit::Vector. So finishing the compile of Swatch has not happened as of yet AND I am not looking for a viewer that I must make 5-6 xtra libs for to get it to work. Given that Swatch is out.

I run Slack 10+ on my systems and on client remote servers. I currently ssh to these boxes and check the logs daily via old-school methods. I would prefer a console based interface to read and monitor these logs via my remote admin server.
Logs I wish to read/monitor on a regular interval;
messages
apache access
mail
firewall

Anyone got any good suggestion??

keefaz 07-10-2004 07:39 AM

I would use a script on all machines needed to be monitored and use the ssh public key of the machine that performs analyze of the log to upload the log at certain period of time with a cron set on all machines and another cron on the analyzer machine to execute the script.

each machines cron with shifted cron like :
15 * * * * /path/to/script <- 1st machine
20 * * * * /path/to/script <- 2nd
25 * * * * /path/to/script <- 3rd
...
55 * * * * /path/to/script <- the last is the analizer machine which run the logs analyzer script one time all the logs are uploaded.

So the scripts are runned each hour shifted each by 5 minuts.

[edit]
To limit bandwidth usage I would parse the logs before upload them to put only the new log lines.

idaho 07-10-2004 06:00 PM

moodss (http://freshmeat.net/projects/moodss/) might be of interest to you.


All times are GMT -5. The time now is 10:00 AM.