This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
computing:linux:syslog [2021/07/27 11:53] gcooper |
computing:linux:syslog [2021/07/28 14:05] (current) gcooper old revision restored (2015/03/16 14:25) |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Syslog | + | ====== |
- | FIXME Unfinished | + | FIXME Unfinished - Need modify for newer CentOS |
- | + | ||
- | **Excellent Documentation**: | + | |
- | + | ||
- | **Installation**: | + | |
- | + | ||
- | **Install Graylog OSS on Ubuntu**: https:// | + | |
- | + | ||
- | **Getting Started**: http:// | + | |
- | + | ||
- | **Getting Started Docs**: https:// | + | |
- | + | ||
- | {{ : | + | |
- | + | ||
- | Graylog is a web interface to your syslog server, and much more. It is available in a free open source edition as well as commercial editions with more features. | + | |
- | + | ||
- | **To scale well**, Graylog depends on: | + | |
- | + | ||
- | * **Fast CPUs** | + | |
- | * **Lots of RAM** (Elasticsearch) | + | |
- | * **Fast storage** (Elasticsearch) | + | |
- | + | ||
- | **Active, searchable data is in memory** | + | |
- | + | ||
- | **Archived data is stored in a compressed format on the Graylog server** or network file share. It is searchable via GREP, but must be reconstituted in Graylog in order to be searchable through the GUI again. | + | |
- | + | ||
- | ===== Configuration ===== | + | |
- | + | ||
- | The Graylog configuration file is ''/ | + | |
- | + | ||
- | The Elasticsearch config file is: ''/ | + | |
- | + | ||
- | ====== Older Syslog Info ====== | + | |
Assumptions: | Assumptions: |