Re: [gentoo-user] Sysloggers

[Alan McKinnon <alan.mckinnon@gmail.com>]

On Wednesday 17 June 2009 16:33:39 Mark Shields wrote:
> On Tue, Jun 16, 2009 at 4:49 PM, Alan McKinnon 
<alan.mckinnon@gmail.com>wrote:
> > Hi,
> >
> > Does anyone have decent experience with sysloggers other than syslog-ng,
> > and
> > be willing to share experiences?
> >
> > I'm especially interested in some of the advanced features of syslog-ng
> > Premium from Balabit.com (based on and extending their open source
> > version):
> >
> > SSL-encrypted traffic over the network
> > Disk-based buffering on the client
> > Windows agents
> > Timezone aware (which syslog doesn't do and syslog-ng only partially)
> > Encrypted disk files
> > Filter, parse and rewrite incoming logs (vital if you need the auth log
> > over
> > here and the password field stored over there, without jumping through
> > hoops
> > first)
> > High scalability - 2000 Cisco devices and 200+ servers to start,
> > distributed
> > country wide
> >
> > --
> > alan dot mckinnon at gmail dot com
>
> syslog-ng is the de facto standard.  Metalog is fine for desktops, but I
> use syslog-ng on all my servers.  Nearly all programs that can process log
> files are compatible with it.

I can't argue with that. I just get a little paranoid about auth logs being 
sent (with credentials) over partially-open networks, hence the attraction of 
encrypted traffic


-- 
alan dot mckinnon at gmail dot com