System log checker

[Justin Glass]

I need to install a system log checker on all of our unix systems. The only available program that i have been able to find is one called "Logsentry" that can be found on CNET, but when i go to install it, i'm unable to gunzip the file even though it is a .gz extension. Do you know of another available log checker program that i could consider trying or another option?

[harry d brown jr]

Justin,

What kind of error did you get? If you used FTP to get the file, did you do it using the BINARY transfer mode? Also, are you using the latest version of gunzip?

live free or die
harry

[Nick Wickens]

I had a go at writing a basic syslog check for some specific problems that we wanted to capture here - Its attached if you want to use it.

[Nick Wickens]

Try again with attachment -

[Steven Sim Kok Leong]

Hi,

Give swatch a try:

http://www.oit.ucsb.edu/~eta/swatch/

Swatch was written to actively monitor messages as they are written to a log file via the UNIX syslog utility.

Hope this helps. Regards.

Steven Sim Kok Leong

[Bill McNAMARA_1]

I can recall that SAM has a log monitoring interface in there somewhere, although it does not archiving/rollover, it at least monitors the logs!

I can recall Bill Hassel has a nifty log rotate cron script somewhere in his archives.. I'll ping the post back up!

Later,
Bill

[Bill McNAMARA_1]

Oops, pinged the wrong one:

Here's my link on the subject:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xbb188ffa98a2d5118ff10090279cd0f9,00.html

Good Luck,
Bill

[Jeff Schussele]

Hi Justin,

Do a
gunzip -tv filename.gz
to test integrity of the gzip file.
Suspect you have a bad file.

HTH,
Jeff

[Bill Thorsteinson]

I run logcheck on our HP-UX
and Linux systems. It runs
mostly with native tools.
There is only one non-native
tool used to strip off the
log since the last check.

I believe it is on the porting
center site. It is on the
Debian Linux site.

I find it easy to configure
and tune.