Avatar of hypercube
hypercube
Flag for United States of America asked on

Syslog > email

I have a very modest "requirement".  I would like to see messages, etc. that are received by my syslog server.
Currently I'm using the free Kiwi Syslog Server and all I get is a 24-hour summary/statistics by email.
I'd like to get emails that show me the information beyond statistics, such as the actual messages.

Since I view this as a "nice to have" capability, I don't want to spend much, if anything, in implementing it.

How would you recommend approaching this?
Everything is Windows.... no Server OSs
Windows NetworkingNetwork ManagementNetworking

Avatar of undefined
Last Comment
hypercube

8/22/2022 - Mon
giltjr

Need to clarify what you want.  

1) Receive an single e-mail that contains all the messages received in the last "x" minutes.
2) Receive an e-mail with each message received as it receives it?
3) Something else?

Number 2 could be a LOT of e-mails.
hypercube

ASKER
#1
giltjr

How often do you have Kiwi rotate the logs?

If you have Kiwi do daily logs you could write a script to do the e-mail.

How much log data do you have?  Splunk is free for up to 500 MB daily, I will have to check but it may be able to do this without you writing a script.

However, even though it is only a single e-mail a day, depending on your logs that could be a large e-mail.  I would think logging on to the Kiwi server and just looking at the logs would be easier.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
hypercube

ASKER
I surely can log into the Kiwi server and look. But, I don't want to do that - rather, I'd like the emails to show up in one place for review.  Not too unusual I should think.

Are you sure that the free Kiwi server will do this?

While the *summaries* come daily, I'd be happy to receive emails of the messages x-hourly.  Things are set up so that the message volume is low - so that's not a worry.
giltjr

-->  Not too unusual I should think.

Yes it is.  If your an environment that does not have a lot of data, you would typically just access the files either through RDP or a file share.   If your an environment that gets logs of messages, you would not want that traffic in your inbox.  We have GB's of syslog data every day.

--> Are you sure that the free Kiwi server will do this?

Kiwi can send an e-mail for  any/all syslog messages it receives as it receives it, but I doubt you want that.  If it get 10 messages, you get 10 e-mails, if it gets 1 million messages, you get 1 million messages.

The script I mentioned would be a Windows batch file or VBScript that could do this and Kiwi will allow you to schedule it.
hypercube

ASKER
Using RDP or a file share requires overt action.  That can be a disadvantage.  Just a perspective.

The free version of Kiwi doesn't support scripting......
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
giltjr

Then I would suggest you have Kiwi rotate logs on a daily  basis and then have Task Scheduler run a VBScript or Windows batch file to e-mail you the file.

I have not had time to check Splunk, but I know it can do a lot more  than Kiwi.
ASKER CERTIFIED SOLUTION
Kamran Arshad

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
hypercube

ASKER
I ended up using PRTG as it is already in use here.