Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I have two linux servers. I'm an administrator, and part of my daily routine is to check all the logs for errors or strange messages. So, every morning I check:

On server #1:

...and so on

On server #2:


Opening each file through terminal is very boring and unproductive. Is there some tool, that can collect logs from all servers and display them in one place?

share|improve this question

marked as duplicate by sysadmin1138 Feb 11 '13 at 0:38

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

splunk? – wim Feb 11 '13 at 0:16
up vote 5 down vote accepted

One solution thats really popular these days is Logstash.

Open source, and scalable.

share|improve this answer
This. And make sure to use Kibana as the web frontend instead of the one included with Logstash. (Kibana is likely to become the official frontend in the not-too-distant future.) – jgoldschrafe Feb 10 '13 at 21:18

There is the quite simple logcheck that sends you emails and allows filtering good stuff by own regex rules.

OSSEC has also an quite good log monitoring tool.

LogAnalyzer looks like a nice gui and appears to be connected somehow to rsyslog.

Edit: Logstash looks really great. Did not knew about it.

There are probably other tools such as scribe from facebook or for more sophisticated and different purposes.

I think just spend some minutes googling for log monitoring should give you a rather long list of solutions.

But it's hard to decide what fits your needs and what not. It's also not always very straightforward to come up with a configuration that not spams you with unimportant stuff and is also reliable if something goes wrong. I found logcheck to be too verbose by default and OSSEC quite nice.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.