[SAGE] Log collection and analysis solutions

[Sean Kelly <smkelly@creighton.edu>]

Greetings.

One of the things we've begun to explore is collecting logs from our
servers and network gear in a centralized location with proper archiving,
analytics, and so forth. In doing so, we've begun to look at products like
Splunk for searching and data mining and mechanisms such as syslog for
pushing the logs around the network.

What have other people used and had success with for doing this sort of
thing? Further, what good tools exist out there for doing real-time
monitoring of these logs to monitor for ongoing events such as attacks,
system problems, and so forth.

Thanks for any information anyone can provide us.

-- 
Sean M. Kelly
Systems Architect
Division of Information Technology
Creighton University
(402) 280-2264
AIM: smkellyg5