RE: Log reader

If you're looking for particular strings to be alerted on, SWATCH is
nice. If you're looking to have the logs indexed and searchable, check
out Splunk. Splunk Pro will also do the alerting piece.

--
Ian Hayes
Systems Engineer
Nevada Cancer Institute
office: (702) 822-5156
email: ihayes@xxxxxxxxxxxx

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of amatachick@xxxxxxxxx
Sent: Thursday, July 24, 2008 2:02 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Log reader

Our firewall puts out these massive text files which I have to peruse on
a daily basis. I was hoping if someone might know of a good, free tool
which can help filter a large log file like this. Your input is
appreciated.

Thanks,

Amy


--------------------------------------------------------------------------
CONFIDENTIALITY NOTICE: This e-mail message, including any
attachments, is for the sole use of the intended
recipient(s) and may contain confidential, proprietary,
and/or privileged information protected by law. If you are
not the intended recipient, you may not use, copy, or
distribute this e-mail message or its attachments. If you
believe you have received this e-mail message in error,
please contact the sender by reply e-mail and destroy all
copies of the original message

Relevant Pages

  • How do i regularly update my free bsd
    ... African Palliative Care Association ... This e-mail message, including any attachments, is for the sole use of the ... If you are not the intended recipient, ...
    (freebsd-questions)
  • Re: Debian on OS/390
    ... CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, ... If you are not the intended recipient, ...
    (Debian-User)
  • Fresh install of Fedora 10 on an IBM 9123-710 & having problems with X11
    ... The information transmitted in this e-mail message, including any attachments, ... review, retransmission, use, disclosure, dissemination or other use of,or taking any ... If you are not the intended recipient, ...
    (Fedora)
  • Re: [PATCH] USB: ftdi_sio: add product_id for Marvell OpenRD Base, Client
    ... Disclaimer: This e-mail message and all attachments transmitted with it ... delivering this message to the intended recipient, ...
    (Linux-Kernel)
  • how to test a ruby class
    ... I would like to run my class from the IDE. ... The contents of this e-mail message and any attachments are intended solely ... the sender by reply e-mail and then delete this message and any attachments. ... If you are not the intended recipient, you are notified that any use, ...
    (comp.lang.ruby)