Re: Log management

[Isaac Straley <straley () UCI EDU>]

There have already been some good solutions mentioned.

I'd like to add that if you are more into rolling your own solution,
there are some good open source solutions, namely OSSEC.  You'll need a
little more than OSSEC to create a good log management solution, but
it's a great foundation.

http://www.ossec.net

Isaac

--

Isaac Straley
Manager, IT Security
Network & Academic Computing Services
University of California, Irvine
straley () uci edu
(949) 824-1471

Charles L. Bombard wrote:
> Hey everyone,
>
>         What would you all recommend for central log management? We are
> currently looking at GFI eventmanager. The ideal solution will combine
> the monitoring of both windows and linux logs, and have the ability to
> generate alerts based on our settings.
>
>         Recommendations of things to look at as well as things to avoid
> is appreciated.
>
> -Charlie
>
> ==========================================
>
> Charles Bombard, GSEC
> LAN/Systems Administrator
> Community College of Vermont
> 119 Pearl Street
> Burlington, VT 05401
> 802.657.4234
> bombardc () ccv edu
>
> PRIVACY & CONFIDENTIALITY NOTICE: This message is for the designated
> recipient only and may contain privileged, confidential, or otherwise
> private information. If you have received it in error, please notify the
> sender immediately and delete the original. Any other use of an email
> received in error is prohibited.