|
Question : Syslog server options
|
|
Hi I'm looking to find a way to have a centralized server that collects all the logs from all other servers and organizes it. Does anyone have any suggestions?
-Jeff
|
Answer : Syslog server options
|
|
I recommend setting up a linux server as your central Syslog server. I would install syslog-ng (http://www.balabit.com/products/syslog_ng/) which will give complete flexibilty over the organization of the incoming messages that are being logged.
By editing the syslog.conf file on any UNIX/LINUX machines you can have all local logging messages copied to the central server.
As far as redirecting event viewer logs from Windows to a syslog server... I would use SNARE (http://www.intersectalliance.com/projects/SnareWindows/index.html)
This solution won't cost you anything but your time to setup and it will work very well.
|
|
|