I have an Ubuntu server. What are good tools that monitor my logs and can send me email notifications when errors (or other types of messages) occur? I've heard of logwatch and logcheck. What are others?
Tell me more
×
Server Fault is a question and answer site for
professional system and network administrators. It's 100% free, no registration required.
|
closed as not constructive by SvW, joeqwerty, Tim Brigham, Zoredache, John Gardeniers Feb 23 '12 at 22:57
As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.
|
I have been incredibly impressed with graylog2 It does a decent job. In the slightly older version it was leveraging mongodb to make capped data collections. Now it's moved on to elasticsearch. Pretty cool! |
|||
|
|
You may be interested in Splunk also. |
|||
|
|
Try the Simple Event Correlator (SEC). Pretty steep learning curve. But once you figure it out, you can easily build rules to watch your logs in real time. |
|||
|
|
|
You may be interested in using LogZilla. It is free for small networks and does everything you need very well. Full disclosure: I am the creator :-) |
|||
|
|
|
logwatch and logcheck run periodically, so these might not be the best choice if you need real-time alerting. There is also log2mail. Syslog-ng and nxlog can do real-time alerting based on patterns (disclaimer: I'm affiliated with the latter). |
|||
|
|
