Log Server

[sdabreo]

Hi All

As per our company policy we need to store all the logs likes in Application, system logs in win2k3 server, my cisco firewall logs etc on periodical basis.

Is there any mechanism, to collect all the logs from various sources and storing in a readable format.

Can anyone tell me what is the best possible method to store all these logs, and how corporates managing it.

Regards
Sakthi

 

[geirendre]

You might considder syslog-ng

http://www.balabit.com/network-security/syslog-ng/

http://freshmeat.net/projects/syslog-ng/

You can store log entries to text files or if you
want, to a SQL database.

If you want searchable and web-accesable logs
you can use a LAMP-server with syslog-ng and php-syslog-ng.
Here's a demo site.

http://php-syslog-ng.gdd.net/

Username: demo
Password: demo