Re: [PLUG] 'logcheck'

[Doug Stewart <zamoose@gmail.com>]

On Sun, Mar 22, 2009 at 7:15 PM, jeff <jeffv@op.net> wrote:

JP Vossen wrote:
> I have said this before but I am a huge fan of the Debian/Ubuntu
> implementation of logcheck.  I am also not aware of any other major
> distro that makes using logcheck so "built-in" and easy.

Well, as easy as a CLI log checker is going to be.
I hate to sound like a Windows or Mac geek but I'd still prefer a more
graphical/elegant way of doing it.

Splunk!

http://splunk.com

Not F/OSS, unfortunately, but it ought to scratch the itches you're referring to.  If you do more than 500MB of log parsing daily, you'll have to buy the "Enterprise" edition.

Not as elegant, but there's Munin too:

http://munin.projects.linpro.no/

There's a good article on Munin in this month's Linux Journal (stuck behind a pay-only firewall until May or so, unfortunately, otherwise I'd link to the online version).  Section 5 of this LJ article covers Splunk:

http://www.linuxjournal.com/article/9893

--
-Doug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug