Re: [logs] msyslog, mysql and real time alerts

From: Nate Campi (nateat_private)
Date: Fri Apr 19 2002 - 16:45:11 PDT

  • Next message: Steve Wray: "[logs] XP logon/logoff failure audit" 

    On Fri, Apr 19, 2002 at 07:16:49PM -0400, Jason Lewis wrote:
> > My page at www.campin.net/newlogcheck.html shows how I did all this
> > stuff, using open source tools. Well, one part I ended up having to
> > write myself, and haven't released the code. Nobody else should need
> > that code, though (unless they're running shitty Vignette Storyserver
> > on Solaris).
> >
> I should have mentioned I checked that out.  I set things up and had it
> running.  The design works, but I wanted more and things didn't seem to
> mesh with what I was trying to do. I am attempting to not use programs like
> swatch or logcheck.  The other things that turn me off are patching syslogd
> and rewriting log files.

Thanks for the feedback.

No need to patch syslogd, that patch was for sqlsyslogd - a mysql
client. The log rewriting was just for logs coming from Storyserver, and
most people won't need such a beast, as they have the good sense not to
run Storyserver at all. I should just remove any mention of that.

Nothing on my page is groundbreaking, it's just there to save a little 
time for people with similar needs. Hope it helps.
-- 
If at first you don't succeed, destroy all evidence that you tried.


---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

    This archive was generated by hypermail 2b30 : Fri Apr 19 2002 - 21:26:31 PDT