improving signal to noise ratio from centralized network syslogs

Tue Feb 6 12:03:45 UTC 2018

On Mon, Feb 5, 2018 at 9:27 PM, James Bensley <jwbensley at gmail.com> wrote:

> On 5 February 2018 at 18:57,  <valdis.kletnieks at vt.edu> wrote:
> > On Mon, 05 Feb 2018 10:49:42 -0800, "Scott Weeks" said:
> >> I have no knowledge of syslog-ng.  Does it do the
> >> real time scrolling like I mention?
> >
> > Use 'tail -f' or similar.
>
> The only problem is that with BASH based solutions is that they are
> slow. They don't scale well.
>
> Some years ago I wrote a script that would periodically (every 5
> minutes by default) grep for interesting events / filter uninteresting
> events from the syslog file and email you the results. It's here if
> anyone is interested: https://null.53bits.co.uk/index.php?page=sysgrep
>
>
>

Last year I found the time to code something similar in perl using
File::Tail ,  here is the outcome in case anyone is interested:
https://github.com/jkougoulos/9to5tail

Regards,
John