Question

I have a couple of linux servers and logrotate and rsyslog are taking care of all log files. Now I was wondering whether the following is possible:

  • keep log files locally (present)
  • send log events to a centralized server (should be possible with logrotate, right?)
  • make log events on centralized server browse & searchable

So here are my questions:

  1. How do I have setup logrotate and rsyslog (on 'client' and 'server) to accomplish this configuration?
  2. does someone know of a good (opensource) web interface that would work with this setup?

EDIT: seems like what I want to accomplish exists for sysnlog-ng. http://www.debianhelp.co.uk/syslog-ng.htm

Was it helpful?

Solution

there are tons of log analysers with web interface for example

etc.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top