On Wednesday 17 June 2009 16:33:39 Mark Shields wrote: > On Tue, Jun 16, 2009 at 4:49 PM, Alan McKinnon <alan.mckin...@gmail.com>wrote: > > Hi, > > > > Does anyone have decent experience with sysloggers other than syslog-ng, > > and > > be willing to share experiences? > > > > I'm especially interested in some of the advanced features of syslog-ng > > Premium from Balabit.com (based on and extending their open source > > version): > > > > SSL-encrypted traffic over the network > > Disk-based buffering on the client > > Windows agents > > Timezone aware (which syslog doesn't do and syslog-ng only partially) > > Encrypted disk files > > Filter, parse and rewrite incoming logs (vital if you need the auth log > > over > > here and the password field stored over there, without jumping through > > hoops > > first) > > High scalability - 2000 Cisco devices and 200+ servers to start, > > distributed > > country wide > > > > -- > > alan dot mckinnon at gmail dot com > > syslog-ng is the de facto standard. Metalog is fine for desktops, but I > use syslog-ng on all my servers. Nearly all programs that can process log > files are compatible with it.
I can't argue with that. I just get a little paranoid about auth logs being sent (with credentials) over partially-open networks, hence the attraction of encrypted traffic -- alan dot mckinnon at gmail dot com
