1

I have an Ubuntu server. What are good tools that monitor my logs and can send me email notifications when errors (or other types of messages) occur? I've heard of logwatch and logcheck. What are others?

0

5 Answers 5

0

I have been incredibly impressed with graylog2 It does a decent job. In the slightly older version it was leveraging mongodb to make capped data collections. Now it's moved on to elasticsearch. Pretty cool!

1
  • This quote got me. "Manage your logs in the dark and have lasers going and make it look like you're from space."
    – David Xia
    Feb 23, 2012 at 19:56
1

You may be interested in Splunk also.

1
  • -1 Splunk is crazy expensive, and the basic version is very limited. Caution! Feb 24, 2012 at 1:15
0

Try the Simple Event Correlator (SEC). Pretty steep learning curve. But once you figure it out, you can easily build rules to watch your logs in real time.

0

You may be interested in using LogZilla. It is free for small networks and does everything you need very well. Full disclosure: I am the creator :-)

0

logwatch and logcheck run periodically, so these might not be the best choice if you need real-time alerting. There is also log2mail. Syslog-ng and nxlog can do real-time alerting based on patterns (disclaimer: I'm affiliated with the latter).

Not the answer you're looking for? Browse other questions tagged .