+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: Small Talk (/forum-20.html)
+--- Thread: Log centralisation / mining (/thread-2197.html)
Log centralisation / mining - rbtux - 01-21-2008 06:55 PM
Does anybody know a log centralisation / log mining solution comparable to splunk but opensource?
What do other users use?
RE: Log centralisation / mining - BeNe - 01-21-2008 07:14 PM
Maybe you can use syslog-ng that comes with must Distris.
But long not so nice and rich on features like splunk.
Greez BeNe
RE: Log centralisation / mining - rbtux - 01-21-2008 11:17 PM
i really like the search engine of splunk... I think I'll use splunk as it's free until 500m/day... that should be enough for the moment...
RE: Log centralisation / mining - ephigenie - 01-22-2008 12:15 AM
eventually you can try to use mod_log_spread
or use mod_log_sql ...
but sql loggin should be on a dedicated server for big environments as databases can grow quick to several gb.
Impact on performance is around 1-2% . Modlogan is able to generate stats directly out of the db. Otherwise you can use a pipe with mysql client to feed awstats via stdin...
mod_log_spread is best for cluster environments.
RE: Log centralisation / mining - rbtux - 01-22-2008 12:59 AM
thanks malte
i'll check this one out...