Syslog > email

I have a very modest "requirement".  I would like to see messages, etc. that are received by my syslog server.
Currently I'm using the free Kiwi Syslog Server and all I get is a 24-hour summary/statistics by email.
I'd like to get emails that show me the information beyond statistics, such as the actual messages.

Since I view this as a "nice to have" capability, I don't want to spend much, if anything, in implementing it.

How would you recommend approaching this?
Everything is Windows.... no Server OSs
LVL 27
Fred MarshallPrincipalAsked:
Who is Participating?
Kamran ArshadConnect With a Mentor IT AssociateCommented:
some of the options are;

SolarWinds NetFlow Analyzer      NetFlow/SFlow
Scrutinizer NetFlow/Sflow Analyzer      NetFlow/SFlow
Caligare Flow Inspector      NetFlow/SFlow
PRTG      NetFlow/RRDTool
Adventnet Netflow Analyzer      NetFlow
NFSen      NetFlow
StealthWatch® Xe      SFlow
Traffic Sentinel      SFlow
Splunk      Propriety
Need to clarify what you want.  

1) Receive an single e-mail that contains all the messages received in the last "x" minutes.
2) Receive an e-mail with each message received as it receives it?
3) Something else?

Number 2 could be a LOT of e-mails.
Fred MarshallPrincipalAuthor Commented:
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

How often do you have Kiwi rotate the logs?

If you have Kiwi do daily logs you could write a script to do the e-mail.

How much log data do you have?  Splunk is free for up to 500 MB daily, I will have to check but it may be able to do this without you writing a script.

However, even though it is only a single e-mail a day, depending on your logs that could be a large e-mail.  I would think logging on to the Kiwi server and just looking at the logs would be easier.
Fred MarshallPrincipalAuthor Commented:
I surely can log into the Kiwi server and look. But, I don't want to do that - rather, I'd like the emails to show up in one place for review.  Not too unusual I should think.

Are you sure that the free Kiwi server will do this?

While the *summaries* come daily, I'd be happy to receive emails of the messages x-hourly.  Things are set up so that the message volume is low - so that's not a worry.
-->  Not too unusual I should think.

Yes it is.  If your an environment that does not have a lot of data, you would typically just access the files either through RDP or a file share.   If your an environment that gets logs of messages, you would not want that traffic in your inbox.  We have GB's of syslog data every day.

--> Are you sure that the free Kiwi server will do this?

Kiwi can send an e-mail for  any/all syslog messages it receives as it receives it, but I doubt you want that.  If it get 10 messages, you get 10 e-mails, if it gets 1 million messages, you get 1 million messages.

The script I mentioned would be a Windows batch file or VBScript that could do this and Kiwi will allow you to schedule it.
Fred MarshallPrincipalAuthor Commented:
Using RDP or a file share requires overt action.  That can be a disadvantage.  Just a perspective.

The free version of Kiwi doesn't support scripting......
Then I would suggest you have Kiwi rotate logs on a daily  basis and then have Task Scheduler run a VBScript or Windows batch file to e-mail you the file.

I have not had time to check Splunk, but I know it can do a lot more  than Kiwi.
Fred MarshallPrincipalAuthor Commented:
I ended up using PRTG as it is already in use here.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.