<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Logstash is just the log processing engine which can insert data
    into a variety of storage engines, but which ElasticSearch is the
    most common.  Kibana is a web interface for visualizing the log
    data.  You can download a complete JAR file from the logstash site
    which includes a basic elasticsearch setup, kibana and a simple web
    server, but you'll find that this setup won't scale nicely.  When
    you start throwing a decent amount of data at ElasticSearch, you'll
    want to have a proper cluster set up.  <br>
    <br>
    Best,<br>
    <br>
    Gary<br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 12/08/2014 10:07 am, Jacob Gardiner
      wrote:<br>
    </div>
    <blockquote cite="mid:etPan.53e95aad.6b8b4567.503f@JG-MBP.local"
      type="cite">
      <style>body{font-family:Helvetica,Arial;font-size:13px}</style>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Hey Gary,</div>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br>
      </div>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;">I’m assuming
        by logstash you actually mean Kibana? Or do you use some other
        storage & interface to parse the logs - if so, do you mind
        sharing?</div>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br>
      </div>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Cheers</div>
      <div id="bloop_customfont"
        style="font-family:Helvetica,Arial;font-size:13px; color:
        rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br>
      </div>
      <div id="bloop_sign_1407801980009954816" class="bloop_sign">
        <div style="font-family:helvetica,arial;font-size:13px">-- <br>
          Jacob Gardiner<br>
        </div>
      </div>
      <br>
      <p style="color:#000;">On 10 August 2014 at 10:13:12 pm, Gary
        Buckmaster (<a moz-do-not-send="true"
          href="mailto:gary.buckmaster@digitalpacific.com.au">gary.buckmaster@digitalpacific.com.au</a>)
        wrote:</p>
      <blockquote type="cite" class="clean_bq"><span>
          <div>
            <div>
              <title></title>
              <div>+1 for Logstash. We use it extensively and have
                managed to
                solve a lot of interesting problems with it. Our Service
                Desk folks
                love it for troubleshooting customer issues as well. </div>
              <div><br>
              </div>
              <div><br>
              </div>
              <div>
                <div style="font-size:9px;color:#575757">Sent on the go
                  with
                  Vodafone</div>
              </div>
              <br>
              <br>
              <div>-------- Original message --------</div>
              <div>From: Daniel Hood</div>
              <div>Date:10/08/2014 13:29 (GMT+10:00)</div>
              <div>To: "Beeson, Ayden"</div>
              <div>Cc: <a class="moz-txt-link-abbreviated" href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a></div>
              <div>Subject: Re: [AusNOG] NOC Software</div>
              <div><br>
              </div>
              <p dir="ltr">Anyone else here use kibana and logstash for
                logging?
                Would recommend it as well.</p>
              <div class="gmail_quote">On 10/08/2014 1:23 pm, "Beeson,
                Ayden"
                <<a moz-do-not-send="true"
                  href="mailto:ABeeson@csu.edu.au">ABeeson@csu.edu.au</a>>
                wrote:<br type="attribution">
                <blockquote class="gmail_quote" style="margin:0 0 0
                  .8ex;border-left:1px #ccc solid;padding-left:1ex">I
                  believe the Cisco 1000v virtual switch can do this in
                  the way you
                  want.<br>
                  <br>
                  I think it's free to a point as well :-)<br>
                  <br>
                  Cheers,<br>
                  Ayden<br>
                  (This email was sent from a mobile device, please
                  forgive any typos
                  etc)<br>
                  <br>
                  <br>
                  ---- Nathan Brookfield wrote ----<br>
                  <br>
                  'Subnetting' even<br>
                  <br>
                  Kindest Regards,<br>
                  Nathan Brookfield<br>
                  <br>
                  Chief Executive Officer<br>
                  Simtronic Technologies Pty Ltd<br>
                  <br>
                  Web: <a moz-do-not-send="true"
                    href="http://simtronic.com.au" target="_blank">http://simtronic.com.au</a><br>
                  Phone: 1300 592 330<br>
                  Fax: (02) 4749 4950<br>
                  <br>
                  On 10 Aug 2014, at 13:11, "Nathan Brookfield" <<a
                    moz-do-not-send="true"
                    href="mailto:Nathan.Brookfield@simtronic.com.au">Nathan.Brookfield@simtronic.com.au</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:Nathan.Brookfield@simtronic.com.au">Nathan.Brookfield@simtronic.com.au</a>>>
                  wrote:<br>
                  <br>
                  I would recommend using VLAN's and submitting and then
                  you monitor
                  the VIF within Vyatta using SNMP.<br>
                  <br>
                  Kindest Regards,<br>
                  Nathan Brookfield<br>
                  <br>
                  Chief Executive Officer<br>
                  Simtronic Technologies Pty Ltd<br>
                  <br>
                  Web: <a moz-do-not-send="true"
                    href="http://simtronic.com.au" target="_blank">http://simtronic.com.au</a><br>
                  Phone: 1300 592 330<br>
                  Fax: (02) 4749 4950<br>
                  <br>
                  On 10 Aug 2014, at 12:27, "Daniel Watson" <<a
                    moz-do-not-send="true"
                    href="mailto:Daniel@glovine.com.au">Daniel@glovine.com.au</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:Daniel@glovine.com.au">Daniel@glovine.com.au</a>>>
                  wrote:<br>
                  <br>
                  <br>
                  Hi guys<br>
                  <br>
                  Thanks for the responses thus far<br>
                  <br>
                  One quick question, how do you actively monitor
                  bandwidth on VMWare
                  VM's on a VM instance, without having to install snmpd
                  on each
                  vm?<br>
                  <br>
                  Say one node has 10 customers vm's on it. And we want
                  to monitor
                  their throughput. How can I best achieve this?<br>
                  <br>
                  Daniel​<br>
                  <br>
                  <br>
                  ________________________________<br>
                  From: AusNOG <<a moz-do-not-send="true"
                    href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>>>
on
                  behalf of Bradley Amm <<a moz-do-not-send="true"
                    href="mailto:Bradley.Amm@homegroupwa.com.au">Bradley.Amm@homegroupwa.com.au</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:Bradley.Amm@homegroupwa.com.au">Bradley.Amm@homegroupwa.com.au</a>>><br>
                  Sent: Sunday, 10 August 2014 12:36 AM<br>
                  To: Nathan Brookfield<br>
                  Cc: <a moz-do-not-send="true"
                    href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br>
                  Subject: Re: [AusNOG] NOC Software<br>
                  <br>
                  I use confluence as well. Pretty good for 10$<br>
                  <br>
                  I use Cacti and Manage Engine Ops Manager<br>
                  <br>
                  Sent from my iPhone<br>
                  <br>
                  On 9 Aug 2014, at 4:22 pm, "Nathan Brookfield" <<a
                    moz-do-not-send="true"
                    href="mailto:Nathan.Brookfield@simtronic.com.au">Nathan.Brookfield@simtronic.com.au</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:Nathan.Brookfield@simtronic.com.au">Nathan.Brookfield@simtronic.com.au</a>>>
                  wrote:<br>
                  <br>
                  +1 for Confluence! We are in the progress of replacing
                  MediaWiKi
                  and a few other systems :)<br>
                  <br>
                  Kindest Regards,<br>
                  Nathan Brookfield<br>
                  <br>
                  Chief Executive Officer<br>
                  Simtronic Technologies Pty Ltd<br>
                  <br>
                  Web: <a moz-do-not-send="true"
                    href="http://simtronic.com.au" target="_blank">http://simtronic.com.au</a><<a
                    moz-do-not-send="true"
                    href="http://simtronic.com.au/" target="_blank">http://simtronic.com.au/</a>><br>
                  Phone: 1300 592 330<br>
                  Fax: (02) 4749 4950<br>
                  <br>
                  On 9 Aug 2014, at 18:16, "<a moz-do-not-send="true"
                    href="mailto:jcbrandis@gmail.com">jcbrandis@gmail.com</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:jcbrandis@gmail.com">jcbrandis@gmail.com</a>>"
                  <<a moz-do-not-send="true"
                    href="mailto:jcbrandis@gmail.com">jcbrandis@gmail.com</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:jcbrandis@gmail.com">jcbrandis@gmail.com</a>>>
                  wrote:<br>
                  <br>
                  One that's missing and I may cop some flack over this,
                  Knowledge
                  management software/tool. Recently introduced to
                  confluence and I
                  added it to my NOC software inventory (then posted
                  that on
                  confluence).<br>
                  <br>
                  Like I said, I may cop it from all sides here (not on
                  topic etc
                  etc, but in my on opinion it's NOC software)<br>
                  <br>
                  Off to ride my new Ducati, night all.<br>
                  <br>
                  Jb | Sydney<br>
                  <br>
                  <br>
                  Sent from my iPhone<br>
                  <br>
                  On 9 Aug 2014, at 10:23 am, Daniel Watson <<a
                    moz-do-not-send="true"
                    href="mailto:Daniel@glovine.com.au">Daniel@glovine.com.au</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:Daniel@glovine.com.au">Daniel@glovine.com.au</a>>>
                  wrote:<br>
                  <br>
                  Hi Guys<br>
                  <br>
                  Just wanted to get your opinions on other software I
                  should be
                  investing in,<br>
                  <br>
                  We currently use Observium, Cacti, Nagios, PRTG,
                  Solarwinds Real
                  Time Bandwidth Monitor and Sflow on our networks at
                  present.<br>
                  <br>
                  I was wondering if you wouldn't mind, letting me know
                  what other
                  software you may use or have used in the past for
                  monitoring and
                  management including remote installations, ipmi
                  management, asset
                  management ect, anything a NOC team may need or want<br>
                  <br>
                  Looking forward to your responses<br>
                  <br>
                  Daniel<br>
                  <br>
                  Sent from my iPhone<br>
                  _______________________________________________<br>
                  AusNOG mailing list<br>
                  <a moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>><br>
                  <a moz-do-not-send="true"
                    href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                    target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
                  _______________________________________________<br>
                  AusNOG mailing list<br>
                  <a moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>><br>
                  <a moz-do-not-send="true"
                    href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                    target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
                  _______________________________________________<br>
                  AusNOG mailing list<br>
                  <a moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>><br>
                  <a moz-do-not-send="true"
                    href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                    target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
                  _______________________________________________<br>
                  AusNOG mailing list<br>
                  <a moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><mailto:<a
                    moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>><br>
                  <a moz-do-not-send="true"
                    href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                    target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
                  <br>
                  [<a class="moz-txt-link-freetext" href="cid:csu-logo4b40.bmp">cid:csu-logo4b40.bmp</a>]<<a moz-do-not-send="true"
                    href="http://www.csu.edu.au/" target="_blank">http://www.csu.edu.au/</a>><br>
                  <br>
                  |   ALBURY-WODONGA   |   BATHURST   |  
                  CANBERRA   |   DUBBO   |   GOULBURN   |
                    MELBOURNE   |   ONTARIO   |   ORANGE
                    |   PORT MACQUARIE   |   SYDNEY   |
                    WAGGA WAGGA   |<br>
                  <br>
                  ________________________________<br>
                  LEGAL NOTICE<br>
                  This email (and any attachment) is confidential and is
                  intended for
                  the use of the addressee(s) only. If you are not the
                  intended
                  recipient of this email, you must not copy,
                  distribute, take any
                  action in reliance on it or disclose it to anyone. Any
                  confidentiality is not waived or lost by reason of
                  mistaken
                  delivery. Email should be checked for viruses and
                  defects before
                  opening. Charles Sturt University (CSU) does not
                  accept liability
                  for viruses or any consequence which arise as a result
                  of this
                  email transmission. Email communications with CSU may
                  be subject to
                  automated email filtering, which could result in the
                  delay or
                  deletion of a legitimate email before it is read at
                  CSU. The views
                  expressed in this email are not necessarily those of
                  CSU.<br>
                  <br>
                  Charles Sturt University in Australia<<a
                    moz-do-not-send="true" href="http://www.csu.edu.au"
                    target="_blank">http://www.csu.edu.au</a>> The
                  Grange Chancellery,
                  Panorama Avenue, Bathurst NSW Australia 2795 (ABN: 83
                  878 708 551;
                  CRICOS Provider Number: 00005F (National)). TEQSA
                  Provider Number:
                  PV12018<br>
                  Charles Sturt University in Ontario<<a
                    moz-do-not-send="true"
                    href="http://www.charlessturt.ca/" target="_blank">http://www.charlessturt.ca/</a>>
                  860 Harrington Court,
                  Burlington Ontario Canada L7N 3N4 Registration: <a
                    moz-do-not-send="true" href="http://www.peqab.ca"
                    target="_blank">www.peqab.ca</a><<a
                    moz-do-not-send="true" href="http://www.peqab.ca"
                    target="_blank">http://www.peqab.ca</a>><br>
                  <br>
                  [<a class="moz-txt-link-freetext" href="cid:anniversay5878.bmp">cid:anniversay5878.bmp</a>]<br>
                  <br>
                  Consider the environment before printing this email.<br>
                  <br>
                  _______________________________________________<br>
                  AusNOG mailing list<br>
                  <a moz-do-not-send="true"
                    href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
                  <a moz-do-not-send="true"
                    href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                    target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
                  <br>
                </blockquote>
              </div>
              _______________________________________________
              <br>
              AusNOG mailing list
              <br>
              <a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
              <br>
              <a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
              <br>
            </div>
          </div>
        </span></blockquote>
    </blockquote>
    <br>
  </body>
</html>