Log file consolidation. 1

[irbk]

My network has started to approach the point where it's starting to get really time consuming to check the logs on each individual server. Right now what I do is to connect to each of my 22 servers and check the log files on them individually. Rather time consuming. Ideally what I'd really like is some kind of 1 stop console where I could read and archive/clear the System/Security/Application logs for regular servers as well as the Directory Service, DNS, File rep, etc logs for the DC's. I like the look of the systernals one, but frankly my company isn't going to cough up $4,500+ for any kind of software like this. I've looked at the EvenCombMT however that tool looks like it's more for tracking down a specific error on servers, not just consolidating logs into 1 location. Curious to know what others use and like (and how much it costs).

Thanks in advance.

 

[itsp1965]

What you need is a syslog server. Although predominantly found in the Unix world there are a few implementations that are free like Splunk's syslog server

http://www.splunk.com/syslog

 

[irbk]

I've got Kiwi Sys log running for my routers. Didn't know it was possible to offload event logs to it though.

 

[itsp1965]

Take a look at this

http://www.kiwisyslog.com/help/syslog/index.html?configuringsnaretocapturew.htm

 

[irbk]

Well, it's something. Not really what I'd want and it would only accomplish part of my objective, but that's usually what you get with free stuff.