up vote 0 down vote favorite
share [g+] share [fb]

I have plenty of programs that will parse IIS access logs and save them in a relational database (MS SQL or MySQL).
I am looking for a good interface that will allow me to query those logs.

For example, when our server error log shows that there was an exception in the application, it includes the user's IP address. I would like to have a program/web-interface where I can just put in information about that request (like IP address, time, url, etc.) and it will give me all of the log lines that relate to that request (that one and before and after it).

Alternatively, a log management system that can take care of automatically retrieving the newest logs and automatically processing it might work too.
I have used Awstats to get statistical information from log files, and I know that it can pull lines from the active log file and remember where it was up to in the file for the next run. (You can correct me if I am wrong, but I don't think Awstats can give you the history of a particular IP address or automatically pull logs.)

link|improve this question
100% accept rate
I suppose the type of log (IIS, Apache, Firewall, SMTP, etc) does not matter as long as it is in a standard machine-readable format. – yakatz Aug 2 '11 at 16:24
feedback

1 Answer

up vote 1 down vote accepted

Don't know for a fact but we do something similar using Splunk but against Cisco/Apache/ESX/Firewall logs - just a suggestion.

link|improve this answer
Not sure why I just noticed this answer. I will try it out and see if it works for me. For now, I am marking it as the answer. – yakatz Jan 18 at 21:06
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.