<div dir="ltr">It isn't too difficult so long as you ignore most of the official but outdated documentation.</div><div class="gmail_extra"><br clear="all"><div>- Mark Shields</div>
<br><br><div class="gmail_quote">On Mon, Nov 18, 2013 at 10:56 AM, Chuck Payne <span dir="ltr"><<a href="mailto:terrorpup@gmail.com" target="_blank">terrorpup@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Logstash looks good, but looks like it will take a bit work to get<br>
working, Thanks.<br>
<div><div class="h5"><br>
On Fri, Nov 15, 2013 at 4:22 PM, Mark Shields <<a href="mailto:laebshade@gmail.com">laebshade@gmail.com</a>> wrote:<br>
> Logstash is great for standardizing log formats, but Kibana, a web UI that<br>
> works with Logstash (and comes with the combined jar), leaves something left<br>
> to be desired. I recommend looking at using Logstash to standardize into<br>
> Graylog Extended Log Format (GELF) then sending the data to a Graylog2<br>
> installation.<br>
><br>
> - Mark Shields<br>
><br>
><br>
> On Fri, Nov 15, 2013 at 11:12 AM, Jim Kinney <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>> wrote:<br>
>><br>
>><br>
>><br>
>><br>
>> On Fri, Nov 15, 2013 at 9:57 AM, Jerald Sheets <<a href="mailto:questy@gmail.com">questy@gmail.com</a>> wrote:<br>
>>><br>
>>> +! Logstash<br>
>>><br>
>>> Essentially open source splunk. You can use Splunk for free if you're<br>
>>> only looking at a small amount of logs.<br>
>>><br>
>>> Honestly, anyone who is looking at Tomcat logs should probably be someone<br>
>>> who knows how to use vim and/or knows a very basic amount about java name<br>
>>> domains and such.<br>
>>><br>
>>><br>
>>> ---<br>
>>> Jerald M. Sheets jr.<br>
>>><br>
>>><br>
>>><br>
>>> On Thu, Nov 14, 2013 at 6:11 PM, Beddingfield, Allen <<a href="mailto:allen@ua.edu">allen@ua.edu</a>><br>
>>> wrote:<br>
>>>><br>
>>>> There is something called Logstash that our LDAP admin uses - from what<br>
>>>> they told me, it is a pain to set up. They are analyzing LDAP and switch<br>
>>>> logs, and they have it spread across 17 machines. I was not involved in the<br>
>>>> setup, so I don't know the specifics.<br>
>><br>
>><br>
>> Thanks for the tip to logstash. Look a bit large and possibly unwieldy but<br>
>> then so is the pile of systems I work with.<br>
>><br>
>> --<br>
>> --<br>
>> James P. Kinney III<br>
>><br>
>> Every time you stop a school, you will have to build a jail. What you gain<br>
>> at one end you lose at the other. It's like feeding a dog on his own tail.<br>
>> It won't fatten the dog.<br>
>> - Speech 11/23/1900 Mark Twain<br>
>><br>
>> <a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
>><br>
>> _______________________________________________<br>
>> Ale mailing list<br>
>> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
>> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
>> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
>><br>
><br>
><br>
> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
<br>
<br>
</div></div>--<br>
Terror PUP a.k.a<br>
Chuck "PUP" Payne<br>
<br>
<a href="tel:%28678%29%20636-9678" value="+16786369678">(678) 636-9678</a><br>
-----------------------------------------<br>
Discover it! Enjoy it! Share it! openSUSE Linux.<br>
-----------------------------------------<br>
openSUSE -- <a href="http://en.opensuse.org/User:Terrorpup" target="_blank">en.opensuse.org/User:Terrorpup</a><br>
openSUSE Ambassador/openSUSE Member<br>
Community Manager -- Southeast Linux Foundation (SELF)<br>
skype,twiiter,identica,friendfeed -- terrorpup<br>
freenode(irc) --terrorpup/lupinstein<br>
Register Linux Userid: 155363<br>
<br>
Have you tried SUSE Studio? Need to create a Live CD, an app you want<br>
to package and distribute , or create your own linux distro. Give SUSE<br>
Studio a try. <a href="http://www.susestudio.com" target="_blank">www.susestudio.com</a>.<br>
See you at Southeast Linux Fest, June 7-9, 2013 in Charlotte, NC.<br>
<a href="http://www.southeastlinuxfest.org" target="_blank">www.southeastlinuxfest.org</a><br>
<div class="HOEnZb"><div class="h5">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br></div>