Avatar of mhmservices
mhmservicesFlag for United States of America asked on

Linux Syslog Daemon and Crystal Reports

My company is exploring change/config management options and so far the only solution we have found to be good is Tripwire. Of course this software costs an arm and a leg. I've been asked to explore the option of using syslog in linux, grepping to a txt or db file, and then using Crystal Reports to extract data. Things we will be logging are permissions changes, ad account creations, folder access, etc. Can this be done?
LinuxCrystal Reports

Avatar of undefined
Last Comment

8/22/2022 - Mon

Can be done easily with a small script. Just write something the parses the crontab daily and extract the information you need to a database or a CSV file. This can be done using perl.
You can also use a commercial solution like splunk:
Splunk monitors the syslog and creates customized reports according to your needs.
Regarding configuration management, you can use the highly customizable "puppet":
However this requires quite a stiff learning curve.
Maciej S

Consider using AIDE (http://www.cs.tut.fi/~rammer/aide.html) which is free replacement for Tripwire.

The caveat is neither me or my SA partner are scripters or programmers. I know enough about linux to make it work but that's about it. We need to generate reports that upper level management will be able to understand easily.

I checked out splunk but to centralize your logs you need to buy an enterprise license and the lowest cost is 12,000. Not only that but a significant amount of man hours will be required building custom reports and indexes. I'll check out this aide software.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

Depending on how much management decides to log we may exceed 500mb per day but good to know.

More of the latter.