Solved

Centralized logging Linux/Windows/Services/Networking

Posted on 2012-04-01
10
226 Views
Last Modified: 2014-08-01
Looking to get opinions on different centralized logging systems, open-source to commercial. Would like to be able to log services(tomcat, apache, mysqld), applications java, grails, networking equipment, squid etc. Wondering what experience people have with different products.
0
Comment
Question by:syscrash
10 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37793818
I cannot comment on Linux and networking equipment, but Windows allows for event log forwarding for a centralized solution.
0
 
LVL 10

Accepted Solution

by:
Netty earned 125 total points
ID: 37794155
Look at Splunk http://www.splunk.com/
0
 
LVL 1

Author Comment

by:syscrash
ID: 37794194
Looked at splunk, it looks pretty good. Looking for opinions from people who have used it in an enterprise environment.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 21

Expert Comment

by:motnahp00
ID: 37794198
We have TripWire, but the admin never figured out how to get it running properly.
0
 
LVL 6

Assisted Solution

by:torakeshb
torakeshb earned 125 total points
ID: 37794351
0
 
LVL 17

Assisted Solution

by:pergr
pergr earned 125 total points
ID: 37794878
If you just want to collect logging, then syslog-ng and kiwi (mentioned above) are the obvious ones.

If you also want to actively monitor devces, software, functionality, etc, then also have a look at Nagios, Zenoss and OpenNMS.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 125 total points
ID: 37799019
I've used syslog-ng, kiwi, and splunk.

The advantage of splunk is it can do indexing so that searches can run real fast.  The dis-advantage is that if you log more than 500MB in a day, you have to pay in order for it to do the indexing.
0
 
LVL 1

Author Comment

by:syscrash
ID: 37799060
Any experiences with rsyslog + loganalyzer ?

Pros/cons?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Google Drive is extremely cheap offsite storage, and it's even possible to get extra storage for free for two years.  You can use the free account 15GB, and if you have an Android device..when you install Google Drive for the first time it will give…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question