[SLL] [Fwd: Syslog Web Interface]

[Troy Davis]

> We have a new firewall that supports sending logs to a Syslog Server.  I'd
> like to be able to setup this server to allow me to review my firewall
> logs via a web interface.  A quick search resulted in a project called
> phpLogCon.  I thought I'd ask for some feedback or suggestions of other
> projects out there that can accomplish my goals.

We ran into a similar problem and created Open Syslog
<http://www.opensyslog.com/>, which is basically GMail for any text
data plus a bunch of ways to easily get data in and out (including
syslog), delivered over the net so it's live in ~45 seconds.

It's in beta test.  If you (or anyone else) want to try it, sign up on
opensyslog.com or email me questions offlist.


It's meant to solve 4 problems with text data:
1. It sits on filesystems where nobody sees it, and is not easily consumable.

2. Related data is split across multiple systems, apps, directories;
can't deal with events by content instead of source

3. Need to know what to look for.  No easy way to see "everything new
or strange", which is what's most useful.

4. The single datacenter is dead, and everyone distributes
datacenters/servers/slices now.


Cheers,

Troy