topic Re: To Swatch or not to Swatch... in Operating System - HP-UX

To Swatch or not to Swatch...

Neil J. Glennon — Mon, 28 Aug 2000 02:47:23 GMT

Hi,

I have a remote site and currently use Swatch ( http://www.stanford.edu/~atkins/swatch/ ) to monitor syslog and email me of any problems.

Do you know if HP have a similar product or can recommend a better product from a commercial organisation
My organisation prefer to use HP software where ever they can or commercial products for support reasons.

Check out the link below for other system admin programs.
http://www.auscert.org.au/Information/Tools/other_tools.html

Cheers.

Re: To Swatch or not to Swatch...

Anthony Goonetilleke — Mon, 28 Aug 2000 03:51:58 GMT

The best program for this is ITO it maybe a bit of an overkil but it can monitor all logs and even perform actions based on it. Speka to your HP rep. and get a trial version its quite good and has clients for several OS's.

Re: To Swatch or not to Swatch...

Tim Malnati — Mon, 28 Aug 2000 04:00:49 GMT

Although a little different then how you are accomplishing things, Big Brother is a machine status monitor worth taking a look at. It's open source software and a large variety of platforms are supported. Commercial support is available these days as well and is very reasonably priced. Many monitors come built in. The bottom line with this product is that if you can write a script to monitor something (including swatch), Big Brother can effectively take it from there and display it in a web based format with additional goodies like paging support, etc. You can see it at http://www.bb4.com I've seen some very large organizations use this product with a lot of success (good enough to stop a $10M Tivoli project dead in its tracks).

There are many different HP Openview products that do this sort of thing plus a lot more, but have your wallet ready. I'm not as familiar with them as much as others in this forum, so I'll let them chime in.

Re: To Swatch or not to Swatch...

Darren Miller — Wed, 30 Aug 2000 16:28:14 GMT

HP has recently announced a product called IDS/9000 (Intrusion Detection System/9000) that autimatically monitors some syslog log files for suspicious activity. Go to http://www.hp.com/go/security for an overview of this, as well as other HP security products. The product is supposed to be released on software.hp.com this week.

HP's IT Operations (ITO) product also makes it possible to monitor log files.

Hope that helps.