syslog "reader" needed! =>

[linuxtricks]

Hi all,

I am setting up a syslog server on a Windows NT system to be my one central location for [red]syslogs[/red].

I will be setting up multiple devices to direct the outputs of syslog to the new NT syslog server.

I understand the syslog server will output a single text file while will contain entries from all of the devices I will have point to it... and from that point I will need to sift through the 'single' text syslog file to trace down the logs of one particular device.

My question is: Is there a 'syslog reader' application somewhere that will help me to better sift through the single 'text file' that syslog will generate? Something like the equivalent to doing the following on a *nix machine:

tail -f /var/log/messages | grep 123.4.5.6

Does a syslog application exist out there somewhere that can separate lines in the text file based on / 'grep'ping certain words, etc???

Many Thanks! ---
Try not. Do. Or do not. There is no try.

 

[PAXE]

Try KIWI syslogd server. You can specify many different filter criteria + You should be able to make filtered mesages be written to any file specified by you. I am not sure whether you can log any device, but I think most.

 

[jnicks]

As you are dealing with an ASCII log, the River (sort of streams) is a group of close to 200 programs that fit end to end to slice and dice log files, any ASCII.

http://www.roninsg.com/rivnetba.htm

is an example of reducing Net Barrier logs from data to information.

Email the developer (me) at the bottom if you want us to try some samples.