Chris J. Magnuson schrieb:
> >Thank you. Do you have more information, how to scan a large
> >/var/log/messages (up to 50 MBytes) every minute? Or is there a way
> >via syslog to react on specific messages?
> >
>
> I'm in the same place as you right now, trying to figure out how to scan
> the log for GDT HA messages periodically. SNMP traps would be so much
> nicer....
I'm trying currently logsurfer. This programm reads every minute the
end of /var/log/messages and reacts on predefined rules. You can find
more about logsurfer at
http://www.cert.dfn.de/eng/team/wl/logsurf/home.html
More later
Stefan
