how to send linux log files to central server and look at them through web interface?
Question
I have a couple of linux servers and logrotate
and rsyslog
are taking care of all log files. Now I was wondering whether the following is possible:
- keep log files locally (present)
- send log events to a centralized server (should be possible with logrotate, right?)
- make log events on centralized server browse & searchable
So here are my questions:
- How do I have setup logrotate and rsyslog (on 'client' and 'server) to accomplish this configuration?
- does someone know of a good (opensource) web interface that would work with this setup?
EDIT:
seems like what I want to accomplish exists for sysnlog-ng
. http://www.debianhelp.co.uk/syslog-ng.htm
Solution
there are tons of log analysers with web interface for example
etc.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow