Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have to setup some open source log monitoring on a centralized syslog server. A lot of machines (windows, linux) and some routers and switches sending their logs there.

Many years ago when I had to do similar setup I used logcheck which is the improved version of logsentry but I'm sure there are many free alternatives for this out there.

I do not need fancy stuff like storing events in database or displaying them on some web frontend. All I need is an easy to configure solution which regularly goes through all the machines logs, find suspicious events in them and send me an email about them. I need a tool which can be easily configured to ignore all the "noise". I don't want to receive hundreds of emails from this every day.

What I found so far:

logcheck, logtail, logsentry, Swatch, SEC, OSSEC


share|improve this question

closed as off-topic by Rex, Ward, TheCleaner, Tim Brigham, mdpc Feb 27 '14 at 1:10

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Rex, Ward, TheCleaner, Tim Brigham, mdpc
If this question can be reworded to fit the rules in the help center, please edit the question.

possible duplicate of Alternatives to Splunk? – user130370 Feb 26 '14 at 8:53
  • Logstash -> Kibana,
  • Logstash -> Greylog2
  • Logstash -> just about anything else

You may want to move this post to

share|improve this answer
came here to say Logstash. It can be a bear to get up and running, depending on size, but it works great. – Couradical Feb 24 '14 at 21:36

Not the answer you're looking for? Browse other questions tagged or ask your own question.