<div dir="ltr">Splunk.<div><br></div><div><a href="http://www.splunk.com/">http://www.splunk.com/</a><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 September 2015 at 09:51, Ruben Schade <span dir="ltr"><<a href="mailto:newsgroups@rubenschade.com" target="_blank">newsgroups@rubenschade.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 29/09/2015 2:25 pm, Ben Hohnke wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
We use graylog,  which is built on the elk stack. It does everything you<br>
need a log server to do, I like it.<br>
<br>
</blockquote>
<br></span>
+1 for Graylog. It's relatively quick to start with too, and easy to deploy in cloud environments/VPSs. They have Ansible playbooks, Puppet etc too, which translates to less work writing ones myself.<br>
<br>
<a href="http://docs.graylog.org/en/1.1/pages/installation/config_management_tools.html" rel="noreferrer" target="_blank">http://docs.graylog.org/en/1.1/pages/installation/config_management_tools.html</a><br>
<br>
Logstash is another, though I think as others have said it can chew up quite a bit of CPU (it *is* Ruby, I suppose). They also have the cutest logo.<span class="HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Cheers,<br>
Ruben Schade in s/Singapore/Sydney/<br>
<a href="https://rubenerd.com/" rel="noreferrer" target="_blank">https://rubenerd.com/</a></font></span><div class="HOEnZb"><div class="h5"><br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><font face="verdana, sans-serif" size="2"><i>Chris Prangnell</i></font><div><font face="verdana, sans-serif" size="2"><i>Sydney</i></font></div><div><font face="verdana, sans-serif" size="2"><i>+61449247557</i></font></div></div></div>
</div>