Re: Analyzing tons of logs

James Turnbull <[email protected]>
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]> 
On Fri, 30 Mar 2007 08:57:33 +0530, "Chetan Gupta" <[email protected]> wrote:

> How about sguil? Thats an NSM tool I guess. Has any one tried it?

I am a fan of sguil - it's powerful and well designed (IMHO) but I am not sure it will scale to meet your requirements.  It's also primarily focussed on IDS (principally Snort) data.  You'd need to customize it to deal with some other kinds of data.

Regards

James Turnbull
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.