RE: about a syslog server

From: Tucker, Jason (JTucker@libertymgt.com)
Date: 02/01/02


From: "Tucker, Jason" <JTucker@libertymgt.com>
To: "'outohere00@yahoo.com'" <outohere00@yahoo.com>, security-basics@securityfocus.com
Date: Fri, 1 Feb 2002 13:38:14 -0500 

Check out the Kiwi syslog at http://www.kiwi-enterprises.com

I run it here on a Win2K system and it works great. It has a customizable
set of filters, you should be able to get it to log just about any
combination of levels that you want.

I don't know of any type of rulesets for determining how much space your log
files will take up, but I can tell you I have 10 fairly chatty systems
dumping events into it, and my log files average about 500KB a day.

-----Original Message-----
From: outohere00@yahoo.com [mailto:outohere00@yahoo.com]
Sent: Thursday, January 31, 2002 3:53 PM
To: security-basics@securityfocus.com
Subject: about a syslog server

Hello all. I am researching the creation of a syslog
server on a WinNT or Win2k platform. My goal is to
enable 24/7 logging of 25+ Cisco routers (no
servers). There is a mix of Internet and Intranet
routers involved. I have 3 questions about this. First,
is there a solid 3rd party syslog program that anyone
can recommend for this? Second, is it true that by
choosing to log level 4 (warning) issues that I will also
automatically log levels 0 thru 3? Finally, is there a
any documented baseline rule for determining how
much disk space usage I can expect to accumulate
per day? I have to find out what size drive I would
need. This last question has been a tough one; I
haven't been able to locate any documented formula
for this. Thanks in advance for your help.