Morning Guys/Gals,
Me has an urgent need of advice from your end. Hoping for some pointers.
For one of TCS's client we have configured Nagios and a host of other GPL'ed applns top aid him in Network Monitoring as part of a very large project. This last problem has me stumped.
In my network consisting of purely AIX/Gnu-Linux/HP-UX i have to provide a single console for monitoring all logs and trigger an alert/alarm as soon as a particular message comes up in the logs. These logs will be both system and application logs and hence the messages to be tracked has to be customisable.
Lemme know if someone has had this problem solved before or has any inkling of what appln we can make use of.
Trevor
===== |------|____________________________________|------| ( >- / Scaling FreeSoftware & OpenSource \ -< ) /~\ / In the Enterprise \ /~\ | ) \ | www.fsf.org | www.opensource.org | / (/ | |_|_ ____________________________________/ _|_|
__________________________________ Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com
Hi Trevor,
PLease can you provide more details.
Thanks Rajeev
On Wed, 3 Nov 2004 19:32:37 -0800 (PST), Trevor Warren trevorwarren@yahoo.com wrote:
Morning Guys/Gals,
Me has an urgent need of advice from your end. Hoping for some pointers.
For one of TCS's client we have configured Nagios and a host of other GPL'ed applns top aid him in Network Monitoring as part of a very large project. This last problem has me stumped.
In my network consisting of purely AIX/Gnu-Linux/HP-UX i have to provide a single console for monitoring all logs and trigger an alert/alarm as soon as a particular message comes up in the logs. These logs will be both system and application logs and hence the messages to be tracked has to be customisable.
Lemme know if someone has had this problem solved before or has any inkling of what appln we can make use of.
Trevor
===== |------|____________________________________|------| ( >- / Scaling FreeSoftware & OpenSource \ -< ) /~\ / In the Enterprise \ /~\ | ) \ | www.fsf.org | www.opensource.org | / (/ | |_|_ ____________________________________/ _|_|
Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com
Hi Trevor,
On Thu, 2004-11-04 at 09:02, Trevor Warren wrote:
In my network consisting of purely AIX/Gnu-Linux/HP-UX i have to provide a single console for monitoring all logs and trigger an alert/alarm as soon as a particular message comes up in the logs. These logs will be both system and application logs and hence the messages to be tracked has to be customisable.
Syslog on GNU/Linux support remote logging.
From syslogd man page
-r This option will enable the facility to receive message from the network using an internet domain socket with the syslog service (see services(5)). The default is to not receive any messages from the network.
So on your log (central) server, you can start syslogd with above option.
On the clients from where you want to collect logs, you would possibly give following entry in syslog.conf
From syslog.conf man page
*.* @finlandia
This rule would redirect all messages to a remote host called finlandia. This is useful especially in a cluster of machines where all syslog messages will be stored on only one machine.
Lemme know if someone has had this problem solved before or has any inkling of what appln we can make use of.
As for the an application which does not you syslog for logging, you have to consult that application's documentation.
I have no clue about other OS except GNU/Linux.
Trevor
HTH With regards,
On 03/11/04 19:32 -0800, Trevor Warren wrote: <snip>
In my network consisting of purely AIX/Gnu-Linux/HP-UX i have to provide a single console for monitoring all logs and trigger an alert/alarm as soon as a particular message comes up in the logs. These logs will be both system and application logs and hence the messages to be tracked has to be customisable.
Log to syslog, over TCP. Centralized syslog server. Have a Perl script watch for those error message patterns. Have the script send out a snmp trap. Trivial to implement.
Devdas Bhagat