On Aug 29, 2013, at 8:03 PM, Kasper Adel wrote: > I am sure there are many tools that can do parsing of syslog and acting upon > it but i wonder if there is something more flexible out there that I can just > re-use to do the above ?
<http://simple-evcorr.sourceforge.net/> <http://www.splunk.com/> If network traffic is of interest, don't forget about flow telemetry like NetFlow and/or IPFIX. ----------------------------------------------------------------------- Roland Dobbins <rdobb...@arbor.net> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton