syslogd question

[goldboyd]

I'm setting up a few servers, firewalls, and routers to log to one central logging(syslogd) server for ease of viewing/backing up the logs, but have a few questions. Is it possible to have the syslogd react to a certain syslog message and then do something such as send an email out? I'm asuming theres nothing in the default syslogd (on FreeBSD) that does it, but is there some kind of replacement that would do this? Or would my best bet just to be to write a shell/perl script to search for a certain string and react, and just run it as a cronjob?

thanks in advance

 

[bubba]

check out Logcheck @ http://www.psionic.com/abacus/logcheck

 

[n0cmonkey]

<< check out Logcheck @ http://www.psionic.com/abacus/logcheck >>



I prefer swatch, unfortunately swatch is a perl application :/

But just run it on the log server and it shouldnt be too bad.

 

[goldboyd]

Thanks for the comments so far. Anybody else have any suggestions?