System Log Checker

[Justin Glass]

What are some names for a System Log Checker for a UNIX system that will perform system log reviews and where can I find these programs?

[Clemens van Everdingen]

Hi,

See:

http://www.unixadm.net/#how

For example Big Brother.

HP Openview ITO.

Logcheck http://www.psionic.com/

C.

[Ricardo Bassoi]

Hi,

First of all welcome to the club.
Unix has several logs. One of the most important logs is:

/usr/var/adm/syslog

where you can find all the events that ocurred in the system, like reboots and others stuffs.

You can also create your own log using the script cmd

script -a logfile

For example,

$ script logfile
Script started, output file is logfile
$ rm -i f*
remove f1? y
remove f2? n
remove f3? y
remove f4? n
$ exit
exit

Script done, output file is logfile

The script output file, logfile, now contains a record of text printed at the terminal.

Try also 'man syslogd' and the COPS program avaiable at:

ftp://cert.sei.cmu.edu/pub/tools/cops/

Check the site for more informations : http://www.washington.edu/R870/Security.html

Regards,

Bassoi

[Ted Ellis_2]

swatch is another:

http://ftp.cerias.purdue.edu/pub/tools/unix/logutils/swatch/

[MANOJ SRIVASTAVA]

Hi Justin


try www.sarcheck.com free version for one month and good formtted reports . I am attaching one of them for your refernce.


Manoj Srivastava