Parsing Syslog and Acting on it, using other input too

[rdobbins at arbor.net (Dobbins, Roland)]

On Aug 29, 2013, at 8:03 PM, Kasper Adel wrote:

> I am sure there are many tools that can do parsing of syslog and acting upon it but i wonder if there is something more flexible out there that I can just re-use to do the above ?

<http://simple-evcorr.sourceforge.net/>

<http://www.splunk.com/>

If network traffic is of interest, don't forget about flow telemetry like NetFlow and/or IPFIX.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton