Free or pay for solutions? You have products like splunk and greybar that do a good job.
Managengine also has a log viewer that works OK. You will just need to pass audit logs to
syslog to use most products.
-
Ray Pittigher
--Exelis Inc, Clifton NJ
--phone 973-284-2275
--email raymond.pittigher(a)exelisinc.com
________________________________________
From: linux-audit-bounces(a)redhat.com [linux-audit-bounces(a)redhat.com] on behalf of Xeniya
Muratova [muratova(a)itsirius.su]
Sent: Wednesday, March 04, 2015 8:42 AM
To: mitr(a)redhat.com; linux-audit(a)redhat.com
Subject: log rendering in real time in audit-viewer
Hello Miloslav, and all the guys!
We use audit-viewer for events monitoring.
Unfortunately, if some log is rather big it takes to much time for audit-viewer to parse
and render it.
Besides, we need to render log updates in real time, i.e. when a new line appears in a
log, it should appear in a viewer too.
Can you suggest the better way to extend audit-viewer to meet these requirements?
Thanks in advance.
Kseniya Muratova,
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
________________________________
This e-mail and any files transmitted with it may be proprietary and are intended solely
for the use of the individual or entity to whom they are addressed. If you have received
this e-mail in error please notify the sender. Please note that any views or opinions
presented in this e-mail are solely those of the author and do not necessarily represent
those of Exelis Inc. The recipient should check this e-mail and any attachments for the
presence of viruses. Exelis Inc. accepts no liability for any damage caused by any virus
transmitted by this e-mail.