Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Gerhard Lausser
Hi,

> Is it possible to use Nagios to capture Switch/Router
Syslogs/eventlogs/error logs.
If you collect the messages in logfiles, you can use
http://www.consol.com/opensource/nagios/check-logfiles
to scan these files for critical or warning patterns. It was written to
replace the Tivoli logfile adapter.

Gerhard


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Russell Adams
This is such a common topic!

I just gave a presentation to the local LUG a week or two back
regarding using Syslog-ng and Logmuncher for log monitoring.

http://www.adamsinfoserv.com/AISTWiki/bin/view/AIS/Presentations

Perhaps you will find it useful.

On Tue, Aug 21, 2007 at 10:55:41AM -0400, Syd Alsobrook wrote:
> On Tuesday 21 August 2007 10:43, Manoj Velayudhannair wrote:
> > But as Tivoli is taken care by a separate team, can u suggest me an open
> > source which can analyze the logs, preferably having a web interface.
> 
> There are many. Go to www.freshmeat.net.
> 
> http://freshmeat.net/browse/148/
> http://freshmeat.net/browse/245/
> http://freshmeat.net/search/?q=log+file+monitoring&trove_cat_id=862§ion=projects&Go.x=0&Go.y=0
> http://freshmeat.net/browse/862/
> 
> 
> Syd
> 
> -- 
> Syd Alsobrook
> IT Tag Team, Inc.
> 518-598-6025
> http://www.ittagteam.com
> 
> -
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting 
> any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
--
Russell Adams[EMAIL PROTECTED]

PGP Key ID: 0x1160DCB3   http://www.adamsinfoserv.com/

Fingerprint:1723 D8CA 4280 1EC9 557F  66E8 1154 E018 1160 DCB3

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Syd Alsobrook
On Tuesday 21 August 2007 10:43, Manoj Velayudhannair wrote:
> But as Tivoli is taken care by a separate team, can u suggest me an open
> source which can analyze the logs, preferably having a web interface.

There are many. Go to www.freshmeat.net.

http://freshmeat.net/browse/148/
http://freshmeat.net/browse/245/
http://freshmeat.net/search/?q=log+file+monitoring&trove_cat_id=862§ion=projects&Go.x=0&Go.y=0
http://freshmeat.net/browse/862/


Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Manoj Velayudhannair
Thanks syd,

But as Tivoli is taken care by a separate team, can u suggest me an open
source which can analyze the logs, preferably having a web interface.

Manoj.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Syd
Alsobrook
Sent: Tuesday, August 21, 2007 8:09 PM
To: nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] Syslog Event Log

On Tuesday 21 August 2007 10:34, Manoj Velayudhannair wrote:
> But my case is little different. I got my Tivoli doing my Monitoring
> (NMS) job. I am in search for a Syslog server, for my Cisco devices,
> which can send alerts on critical error and warnings.

Use syslog-ng to collect your logs in a central location. Have Tivoli
parse 
the logs.

Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Syd Alsobrook
On Tuesday 21 August 2007 10:34, Manoj Velayudhannair wrote:
> But my case is little different. I got my Tivoli doing my Monitoring
> (NMS) job. I am in search for a Syslog server, for my Cisco devices,
> which can send alerts on critical error and warnings.

Use syslog-ng to collect your logs in a central location. Have Tivoli parse 
the logs.

Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Manoj Velayudhannair
Hi Syd,

But my case is little different. I got my Tivoli doing my Monitoring
(NMS) job. I am in search for a Syslog server, for my Cisco devices,
which can send alerts on critical error and warnings.

So would like to have your advise on the same.

Thanks and Regards.

Manoj

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Syd
Alsobrook
Sent: Tuesday, August 21, 2007 7:29 PM
To: nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] Syslog Event Log

On Tuesday 21 August 2007 09:26, Manoj Velayudhannair wrote:
> Thank you Syd, could you please detail your view.

I have a central management server. It runs Nagios, Munin, Cacti, and 
Syslog-ng. I have Syslog-ng configured with these lines.

# Begin
source remote { udp(); tcp(port(514) keep-alive(no)); };
destination remote_hosts 
{ file("/var/log/remote_hosts/$HOST/$FACILITY.log"); };
log { source(remote); destination(remote_hosts); };
# End

These lines configure Syslog-ng to accept connections from remote
systems and 
place the logs in to a host specific directory. I run syslog-ng on all
my 
linux servers.

I have not setup the monitoring yet, it is on my todo list. There are a
number 
of log checks in the Nagios Exchange.

Enjoy,
Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Syd Alsobrook
On Tuesday 21 August 2007 09:26, Manoj Velayudhannair wrote:
> Thank you Syd, could you please detail your view.

I have a central management server. It runs Nagios, Munin, Cacti, and 
Syslog-ng. I have Syslog-ng configured with these lines.

# Begin
source remote { udp(); tcp(port(514) keep-alive(no)); };
destination remote_hosts 
{ file("/var/log/remote_hosts/$HOST/$FACILITY.log"); };
log { source(remote); destination(remote_hosts); };
# End

These lines configure Syslog-ng to accept connections from remote systems and 
place the logs in to a host specific directory. I run syslog-ng on all my 
linux servers.

I have not setup the monitoring yet, it is on my todo list. There are a number 
of log checks in the Nagios Exchange.

Enjoy,
Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Manoj Velayudhannair
Thank you Syd, could you please detail your view. 

Manoj.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Syd
Alsobrook
Sent: Tuesday, August 21, 2007 6:48 PM
To: nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] Syslog Event Log

On Tuesday 21 August 2007 08:14, Manoj Velayudhannair wrote:
> Is it possible to use Nagios to capture Switch/Router
> Syslogs/eventlogs/error logs.

It would be better to use syslog-ng and have all your servers, routers,
and 
switches send there logs to your Nagios server. Then you can check the
logs 
centrally.

Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com


-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Syslog Event Log

2007-08-21 Thread Syd Alsobrook
On Tuesday 21 August 2007 08:14, Manoj Velayudhannair wrote:
> Is it possible to use Nagios to capture Switch/Router
> Syslogs/eventlogs/error logs.

It would be better to use syslog-ng and have all your servers, routers, and 
switches send there logs to your Nagios server. Then you can check the logs 
centrally.

Syd

-- 
Syd Alsobrook
IT Tag Team, Inc.
518-598-6025
http://www.ittagteam.com

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


[Nagios-users] Syslog Event Log

2007-08-21 Thread Manoj Velayudhannair
All,

 

Is it possible to use Nagios to capture Switch/Router
Syslogs/eventlogs/error logs.

 

Thanks in advance.

 

Regards,

 

Manoj

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null