Log Monitoring Tools?

[allan]

What tool/tools do you use to monitor your system logs? Not the Apache logs, but syslog data. I am interested in something that that will do some level of correlation.

Also, do you prefer to keep system logs on the server, or do you send them to another host and monitor them there?

[dynamicnet]

Greetings Allan:

We use logwatch; and it works out rather well.

For now, we don't have a centralized logging server; but I'm sure that will come in time.

What do you use?

Thank you.

[allan]

Originally posted by dynamicnet:
We use logwatch; and it works out rather well.

For now, we don't have a centralized logging server; but I'm sure that will come in time.

What do you use?


This logwatch: http://www.logwatch.org/ or the one that used to be put out by psionic?

I am trying to find something for my server (I don't have a company-related server so analyzing logs has not been that important) so I have not worried too much about it to this point, but I am very interested in more forensic analysis of the data I do collect.

[dynamicnet]

Greetings Allan:

http://www.logwatch.org/ is the one we use.

Thank you.