Better Syslog server

Matt Harris <[email protected]>
Newsgroups gmane.comp.security.sun
Organization Smithsonian Institution - UNIX Engineering
Message-ID <[email protected]>
I've been looking a bit on google/sourceforge/etc to try and find a more
configurable and extensible syslog server, to no avail.  Does anyone
know of such a thing?  If nothing is out there already, I'll probably
embark on a project to do it myself.  I'm thinking of a config format
somewhat like this:

# commands for syslog facility "XXX"
Facility XXX {
  # Send message to stdin of a script which can send alerts, etc
  Severity emerg ACTION /usr/local/libexec/parse-emerg.sh
  # 192.168.47.9 - sample dhcp server
  Host "192.168.47.9" {
    # log stuff from the dhcp server to a seperate file
    Severity warn FILE /var/adm/dhcp.log
  }
  # send other stuff to a default file
  Severity DEFAULT FILE /var/adm/xxx.log
}

Of course, this is just an example off the top of my head of some of the
functionality I'd like - for example, piping out to a smart script,
sending to different files based on host that sent the message, etc
etc.  I look forward to your input.  Thanks, Matt.  

-- 
/*
 * Matt Harris - Senior UNIX Systems Engineer
 * Smithsonian Institution, OCIO
 */
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.