Centralized log server with web gui
 

Hi there --

I want to set up a centralized log server, and I have several requisites:

1. The ability to view multiple log files via a web interface or browser.

2. The server's ability to send e-mails to the administrators when a critical condition occurs within the log files.

The logcheck application seems like a good start. However, it does not have a web gui so I was wondering if anyone can recommend a program that either works with logcheck or has the above two requisites on its own.

Thanks.

I would start here http://www.splunk.com/

I second that motion. I have worked with a couple of other products. Mainly Nagios based ones like Zenoss and others. These are more like snmp monitors which poll the servers.

Splunk gives you the ability to index many different types of files from various sources including syslog etc... and it will allow you to search this index using just about any search criteria you feel necessary. I am still working on getting the correct logs to Splunk so I havent setup the alerts specifically but I can tell you that it makes life much easier when searching through things like http access logs and firewall traffic logs looking for a specific pattern.