Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have 50 RHEL Apache web-servers. We want all the Apache logs to be processed on a dedicated server meant for this purpose as we don't the dependencies of log processing application installed on our production servers.

What is the best way to accomplish it ?

share|improve this question

4 Answers 4

you can use syslog-ng

http://peter.blogs.balabit.com/2010/02/how-to-collect-apache-logs-by-syslog-ng/

share|improve this answer
1  
Thats the collection part. And for log monitoring/searching, if you don't want to spend on splunk, you can try: Graylog2 or Logstash. –  Not Now Jan 12 '12 at 0:14

The awnser Daya gave was very helpfull but i want to suggest something else.

How about creating a nfs share and link the httpdlog folder to that share. The share will be the central server of course.

share|improve this answer
    
This could cost a huge performance penalty. –  b0ti Jan 11 '12 at 21:40
    
if all server are connected in a internal network with a gigabit switch and networkcards i really wouldnt see any trouble –  Metalmini Jan 12 '12 at 14:24

If you are going to be doing a lot of analysis, frequent queries, etc then it sounds like Splunk could fit the bill:

http://www.splunk.com

It's a great product but the downside is that the enterprise version is quite expensive. There is a free version with some limitations, it could be that this is suitable depending on the needs of your user base and the amount of data you intend to import. See the comparison between free and enterprise here:

http://www.splunk.com/view/free-vs-enterprise/SP-CAAAE8W

share|improve this answer

You can also use the open-source nxlog for log centralization.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.