Dear Linuxquestions:

I am looking to build a dedicated syslog-SNMP server with remote web interface and I would appreciate a discussion from our community on recommending the best solutions to deploy.

Ideally I would like to be able to create an opensource architecture I could easily duplicate for multiple stand-alone customer environments.

I have reviewed syslog.org as well as splunk and goggled for several days; surprisingly I found a lot on this subject, but mostly hype.

I am looking for comments from experienced syslog administrators who can recommend platforms and software they found useful.

If you have done this already, please share your experience and thoughts on the different solutions you have tried and what you liked or didn’t like about each.

Thanks in advance…

I have not been disappointed with splunk. It has extremely active development and community support. It may even be free if your requirements do not exceed their license requirements.

Perhaps Argus is also worth mentioning too. Network flow data has proven to be very valuable as well as syslog.
http://www.qosient.com/argus/

1 members found this post helpful.