Syslog - syslog.org - Logged
General Information:
Latest News:
What is lurking in your log files? 16 Mar 2013 | 01:03 am
I found an interesting article on the importance of proactively monitoring your logs here: http://www.esecurityplanet.com/network-security/what-is-lurking-in-log-files.html
Case Study In Not Managing Logs: DigiNotar 9 Dec 2012 | 01:14 am
I started a new security podcast recently and in the first episode, I covered the security breech at DigiNotar, the Dutch certificate authority. One of the prominent findings in the forensic report t...
The Importance Of Remote Logging 1 Nov 2012 | 11:58 pm
Many people will recall the downfall of the Dutch Certificate Authority DigiNotar last year after it was discovered that attackers had compromised the CA’s servers and generated illicit certificates f...
SEC – Simple Event Correlator 5 Jul 2012 | 06:03 am
SEC is a tool for accomplishing event correlation tasks in the domains of log analysis, system monitoring, network and security management, etc. Event correlation is a procedure where a stream of even...
LogSurf 5 Jul 2012 | 06:02 am
Logsurfer is a program for monitoring system logs in real-time, and reporting on the occurrence of events. It is similar to the well-known swatchprogram on which it is based, but offers a number of ad...
Lire 5 Jul 2012 | 05:46 am
Lire is an open source application for monitoring the logs of numerous applications. Lire can output reports in multiple formats.
Swatch 5 Jul 2012 | 05:40 am
Swatch is a perl tool for monitoring log files.
Logcheck 5 Jul 2012 | 05:37 am
Logcheck is an open source software package that is designed to automatically run and check system log files for security violations and unusual activity. Logcheck utilizes a program called logtail th...
Instructions For Tunnelling Syslog Over SSH Using Syslog-NG 5 Jul 2012 | 05:23 am
Here’s an interesting article on establishing an ssh tunnel between a client and syslog server for the purpose of securely transmitting syslog messages.
Good Writeup On Implementing A Log Analysis System With Open Source Tools 18 Jun 2012 | 10:54 am
This post introduces an end to end solution for analyzing logs using: Rsyslog Graylog2 (though the post points out that Graylog2 hasspoke shortcomings) Logstash graphite Kibana
