Re: Parsing Syslog and Acting on it, using other input too

["Dobbins, Roland" <rdobbins () arbor net>]

On Aug 29, 2013, at 8:03 PM, Kasper Adel wrote:

> I am sure there are many tools that can do parsing of syslog and acting upon it but i wonder if there is something 
> more flexible out there that I can just re-use to do the above ?

<http://simple-evcorr.sourceforge.net/>

<http://www.splunk.com/>

If network traffic is of interest, don't forget about flow telemetry like NetFlow and/or IPFIX.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton