Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Network Appliance Syslog Collection & Reporting

Posted on 2006-05-30
Medium Priority
Last Modified: 2013-11-15
I'm looking for a free or cheap utility that will collect syslogs from a few appliances scattered about our network.  The software in question has to collect the logs, and then be able to either display them in categories (eg., top ten falied authentication), email them when certain threholds are met, or if nothing else, be able to generate nice reports that I could e-mail to important people.  

Though my lack of expertise would limit the platform to Windows, there are others here who could help to implement a good package on a *nix box if necessary.  However, Windows is preferred.  The only way I'd go for a Unix/Linux variant is if it were REALLY good.  

I've looked at Kiwi and Snare.  Though they both collect syslogs, they don't have much in the way of reporting.  The bit about e-mailing daily reports of top ten whatevers is highly desirable.  Something with a web-based management/reporting console would be perfect.

Again, free is best, but I think we could spend about $200 tops on something like this.  These are enterprise class proxy appliances so the software can't be joe blow software company's latest turd.  It's gotta be reliable.
Question by:zamoti

Accepted Solution

gkumaran earned 1000 total points
ID: 16795271
The licensed version of KiwiSyslog Daemon should do most of these.

They will not sort or form a reports, however they can upload the data to Database Server like SQL or MySQL (Opensource), hence you can run some SQL Scripts to generate reports and can then be integrated with an Webserver to have an Web-based management options. You just need to spend little time on it or you can give this work to a Computer intern, who can do this in a day or two.

Of course, there are the big guys like IBM Tivoli and HP Openview which have syslog modules which does everything without much work however they have huge license fee. Hence I feel that the above mentioned solution would be worth trying.

Author Comment

ID: 16804031
Thanks for the suggestions.  I was hoping that there was something that doesn't involve a 20 step process as I am the grunt in this situation and my experience does not extend to developing such an interface.  Shame on me.  
It seems that syslog reports are an all or nothing proposition where you're either paying nothing or breaking the bank.  Sigh.

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
In this article I will be showing you how to subnet the easiest way possible for IPv4 (Internet Protocol version 4). This article does not cover IPv6. Keep in mind that subnetting requires lots of practice and time.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question