[AusNOG] Logging & Notifications

[Eric Pinkerton]

+1 for Splunk, yes it can be pricey but it is pretty granular (ie you can strip unwanted noise before you index it so you can manage this) it's massively scalable, pretty easy to learn, runs on whatever you are comfortable with and is very well supported.

Also you can run up a proof of concept in about an hour using the free 500mb per day licence.

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of OZSUPRA
Sent: 02 February 2015 20:25
To: ausnog at lists.ausnog.net
Subject: [AusNOG] Logging & Notifications

Hi AusNOG community,

Longtime reader, not much of a poster.

We're currently in the process of revamping the way we handle logging requests - we currently monitor quite a large number of devices and servers (from device logs, down to the server side service logs such as exim, or crucial messages outputted by the OS), problem is a lot of this logging is being delivered to an e-mail.

We've been looking for a solution where we can consolidate logs from rsyslogd and syslogd at the same time use these to be set rules/alerts of some kind if a certain log is passed through the system.  At the same time we're also looking for a system that will also monitor a device (eg. servers hard drives, network ports, bandwidth etc).

Happy for it to be a paid solution, as long as it's represented well and works flawlessly!

Feel free to pm me off list, I am interested to find out what solutions other larger based providers are using to combat logs from multiple devices and monitoring of hardware/network gear!

Kind Regards,
Adam R
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog
#####################################################################################
Confidentiality and Privilege Notice 
This document is intended solely for the named addressee.  The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
#####################################################################################