up vote 2 down vote favorite
1
share [g+] share [fb]

We have 50 RHEL Apache web-servers. We want all the Apache logs to be processed on a dedicated server meant for this purpose as we don't the dependencies of log processing application installed on our production servers.

What is the best way to accomplish it ?

link|improve this question
72% accept rate
feedback

4 Answers

up vote 3 down vote

you can use syslog-ng

http://peter.blogs.balabit.com/2010/02/how-to-collect-apache-logs-by-syslog-ng/

link|improve this answer
1  
Thats the collection part. And for log monitoring/searching, if you don't want to spend on splunk, you can try: Graylog2 or Logstash. – Not Now Jan 12 at 0:14
feedback
up vote 1 down vote

The awnser Daya gave was very helpfull but i want to suggest something else.

How about creating a nfs share and link the httpdlog folder to that share. The share will be the central server of course.

link|improve this answer
This could cost a huge performance penalty. – b0ti Jan 11 at 21:40
if all server are connected in a internal network with a gigabit switch and networkcards i really wouldnt see any trouble – Metalmini Jan 12 at 14:24
feedback
up vote 1 down vote

If you are going to be doing a lot of analysis, frequent queries, etc then it sounds like Splunk could fit the bill:

http://www.splunk.com

It's a great product but the downside is that the enterprise version is quite expensive. There is a free version with some limitations, it could be that this is suitable depending on the needs of your user base and the amount of data you intend to import. See the comparison between free and enterprise here:

http://www.splunk.com/view/free-vs-enterprise/SP-CAAAE8W

link|improve this answer
feedback
up vote 1 down vote

You can also use the open-source nxlog for log centralization.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.