To Swatch or not to Swatch...

[Neil J. Glennon]

Hi,

I have a remote site and currently use Swatch ( http://www.stanford.edu/~atkins/swatch/ ) to monitor syslog and email me of any problems.

Do you know if HP have a similar product or can recommend a better product from a commercial organisation
My organisation prefer to use HP software where ever they can or commercial products for support reasons.

Check out the link below for other system admin programs.
http://www.auscert.org.au/Information/Tools/other_tools.html



Cheers.

[Anthony Goonetilleke]

The best program for this is ITO it maybe a bit of an overkil but it can monitor all logs and even perform actions based on it. Speka to your HP rep. and get a trial version its quite good and has clients for several OS's.

[Tim Malnati]

Although a little different then how you are accomplishing things, Big Brother is a machine status monitor worth taking a look at. It's open source software and a large variety of platforms are supported. Commercial support is available these days as well and is very reasonably priced. Many monitors come built in. The bottom line with this product is that if you can write a script to monitor something (including swatch), Big Brother can effectively take it from there and display it in a web based format with additional goodies like paging support, etc. You can see it at http://www.bb4.com I've seen some very large organizations use this product with a lot of success (good enough to stop a $10M Tivoli project dead in its tracks).

There are many different HP Openview products that do this sort of thing plus a lot more, but have your wallet ready. I'm not as familiar with them as much as others in this forum, so I'll let them chime in.

[Darren Miller]

HP has recently announced a product called IDS/9000 (Intrusion Detection System/9000) that autimatically monitors some syslog log files for suspicious activity. Go to http://www.hp.com/go/security for an overview of this, as well as other HP security products. The product is supposed to be released on software.hp.com this week.

HP's IT Operations (ITO) product also makes it possible to monitor log files.

Hope that helps.