[TriLUG] syslog and related projects

[Brian McCullough]

On Sun, Dec 23, 2007 at 02:57:18PM -0500, Shawn Hood wrote:
> Hey all,
> 
> I have seen some traffic on the list in the past regarding syslog,
> syslog-ng, and related applications like splunk, epylog,
> php-syslog-ng, etc.  The threads never seemed to get much traffic, and
> I'm a veritable fan of peer opinion.  That said, what is going on in
> the syslog realm?  It seems like most projects that are in this niche
> are abandoned or immature.  What are the strategies used by trilug
> members to reliably aggregate, parse, and understand your log data?


Of course you understand that syslog and friends, and splunk and friends
are very different and barely related, in that the former collect
logging data from various sources and record it, and the latter extract
information from that data, summarizing and presenting it to those
hooomaaans that work with computers.


I suspect from your question, although I could be wrong, that you are
looking for the latter type of application.



> Shawn

Brian