Re: Log analysis and reporting

[infolookup () gmail com]

If you are planning on collecting a lot of data, spunk free version has a cap. Also how would you do log rotation? You 
can easily fill you hard disk space.
------Original Message------
From: paul () paulhalmos com
Sender: listbounce () securityfocus com
To: listbounce () securityfocus com
To: security-basics () securityfocus com
ReplyTo: paul () paulhalmos com
Sent: Jan 28, 2009 1:53 PM
Subject: Re: Log analysis and reporting

I agree with Jon, Splunk is great. Nice web based interface with alerts and powerful searching.
------Original Message------
From: Jon Hart
Sender: listbounce () securityfocus com
To: security-basics () securityfocus com
Subject: Re: Log analysis and reporting
Sent: Jan 28, 2009 9:24 AM

Depending on your log volume (500M/day), you can get Splunk
(http://www.splunk.com) for free.  You will not be disappointed.

-jon




Sent from my Verizon Wireless BlackBerry