Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are using swatch installation to sort through 3-5 gig worth of networking syslog and alert us on patterns , we are using splunk to index and search the data but splunk alerting capabilities are seriously lacking.

I wondering what are folks using for similar alerting requirements.

share|improve this question
3  
To avoid getting your question closed as a "shopping question", you should really flesh out your requirements and how splunk doesn't seem to be meeting them. From the FAQ : blog.stackoverflow.com/2010/11/qa-is-hard-lets-go-shopping " Thus, when it comes to shopping questions, don’t ask us what you should buy — ask us what you need to learn to tell what you should buy." –  mfinni Jun 22 '12 at 14:53

2 Answers 2

You can also try LogZilla out, it scales to hundred of millions of events and will do email alerts and snmp trap forwarding based on regex pattern matches.

share|improve this answer

I have been using logsurfer for pattern alerting with very good success.

It is written in C, and munches through logs very quickly. This is a small Introduction to logsurfer

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.