[AusNOG] Logging & Notifications

[Tim Raphael]

The only thing that contradicts Splunk is the general recommendation to log whatever is possible without impacting performance. Splunk pricing increases with volume and yes, it is rather shocking. So if you're starting to think "what can I stop logging to save cost", you'll end up trying to debug issues with arms tied behind your back - much better having the information at hand.

Regards,

- Tim 

> On 2 Feb 2015, at 6:20 pm, Chris Gibbs <chris.t.gibbs at gmail.com> wrote:
> 
> +1 Logstash / Elasticsearch / Kibana.
> 
> Not too hard to get going and there are plenty of tutorials around on the Internet for it.
> 
> 
> 
> Be prepared and sit down when you look at the Splunk quote. Great product as well through.
> 
>> On 2 February 2015 at 20:54, OZSUPRA <sales at ozsupra.com> wrote:
>> Hi AusNOG community,
>> 
>> Longtime reader, not much of a poster.
>> 
>> We're currently in the process of revamping the way we handle logging requests - we currently monitor quite a large number of devices and servers (from device logs, down to the server side service logs such as exim, or crucial messages outputted by the OS), problem is a lot of this logging is being delivered to an e-mail.
>> 
>> We've been looking for a solution where we can consolidate logs from rsyslogd and syslogd at the same time use these to be set rules/alerts of some kind if a certain log is passed through the system.  At the same time we're also looking for a system that will also monitor a device (eg. servers hard drives, network ports, bandwidth etc).
>> 
>> Happy for it to be a paid solution, as long as it's represented well and works flawlessly!
>> 
>> Feel free to pm me off list, I am interested to find out what solutions other larger based providers are using to combat logs from multiple devices and monitoring of hardware/network gear!
>> 
>> Kind Regards,
>> Adam R
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20150202/5d38ded7/attachment.html>