Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are using swatch installation to sort through 3-5 gig worth of networking syslog and alert us on patterns , we are using splunk to index and search the data but splunk alerting capabilities are seriously lacking.

I wondering what are folks using for similar alerting requirements.

share|improve this question
To avoid getting your question closed as a "shopping question", you should really flesh out your requirements and how splunk doesn't seem to be meeting them. From the FAQ : " Thus, when it comes to shopping questions, don’t ask us what you should buy — ask us what you need to learn to tell what you should buy." – mfinni Jun 22 '12 at 14:53

I have been using logsurfer for pattern alerting with very good success.

It is written in C, and munches through logs very quickly. This is a small Introduction to logsurfer

share|improve this answer

You can also try LogZilla out, it scales to hundred of millions of events and will do email alerts and snmp trap forwarding based on regex pattern matches.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.