How manage syslog

[PCIS]

Hello,

Do you use a tool to manage your syslog like logwatch on linux.
A usefull tool very simple.

I'm interested about your opinion on this subject.

Regards.

Nicolas WOOD

[Kenan Erdey · Accepted solution]

Hi,

i am redirecting syslogs to syslog-ng server. and on this server i am running php-syslog-ng. with this web interface i am watching and advanced searching in logs.

Kenan.

[Steven E. Protter]

Shalom,

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/logrotate-2.5/

It works just like Linux.

I write a cron job to trim them once in a while.

cp /var/adm/syslog/syslog.log /logs/
> /var/adm/syslog/syslog.log

SEP

[Rita C Workman]

By using the /etc/syslog.conf file you can redirect where you want "specific levels of alerts" to report - i.e. to a central server.

On the central server that gets all the more serious alerts you can set up a simple script that checks the log and sends an email alert reporting the message to whoever you want to get that message. Then cron the script so it keeps you updated.
Remember to clean up or copy elsewhere all messages sent, so they don't keep repeating.

Rgrds,
Rita

[Tim Nelson]

Wrote my own logwatch. A ksh script of maybe 30 lines or so.

Simply takes note of the number of lines in syslog since last run, emails new entries minus a list of ignore files.

[PCIS]

Thank you all,

I will try php-syslog-ng, on a linux server with syslog-ng.

Thank you for your help

Regards

Nicolas