Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have to setup some open source log monitoring on a centralized syslog server. A lot of machines (windows, linux) and some routers and switches sending their logs there.

Many years ago when I had to do similar setup I used logcheck which is the improved version of logsentry but I'm sure there are many free alternatives for this out there.

I do not need fancy stuff like storing events in database or displaying them on some web frontend. All I need is an easy to configure solution which regularly goes through all the machines logs, find suspicious events in them and send me an email about them. I need a tool which can be easily configured to ignore all the "noise". I don't want to receive hundreds of emails from this every day.

What I found so far:

logcheck, logtail, logsentry, Swatch, SEC, OSSEC

Thanks

share|improve this question

closed as off-topic by Rex, Ward, TheCleaner, Tim Brigham, mdpc Feb 27 at 1:10

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Rex, Ward, TheCleaner, Tim Brigham, mdpc
If this question can be reworded to fit the rules in the help center, please edit the question.

    
possible duplicate of Alternatives to Splunk? –  coincoin Feb 26 at 8:53

1 Answer 1

  • Logstash -> Kibana,
  • Logstash -> Greylog2
  • Logstash -> just about anything else

http://edgeofsanity.net/article/2012/06/17/central-logging-with-open-source-software.html

You may want to move this post to http://softwarerecs.stackexchange.com/

share|improve this answer
    
came here to say Logstash. It can be a bear to get up and running, depending on size, but it works great. –  Couradical Feb 24 at 21:36

Not the answer you're looking for? Browse other questions tagged or ask your own question.