gnangia has asked for the wisdom of the Perl Monks concerning the following question:

Hello Monks,
I was wondering if somebody could give me some ideas on how to securely do log file monitoring remotely using perl?
Regards,
Gaurav

Replies are listed 'Best First'.
Re: Remote Log File Monitoring
by Marza (Vicar) on Feb 07, 2003 at 22:53 UTC

    A little more info would be good. Platforms?

    If you are talking the PC, you might try out one of Dave Roths modules for the eventlog. www.roth.net

      Detailed info - Writing the script in Perl running on Linux and connecting to both Windows and Unix based servers for remote log file monitoring. I am proceeding with the assumption that windows will have a ssh server that would allow to connect.

      Sorry for not mentioning the details. I will check out Dave Roths page, but I am looking for a more generic solution.
      Thanks.
Re: Remote Log File Monitoring
by zengargoyle (Deacon) on Feb 07, 2003 at 23:05 UTC

    on *NIX i do this... write a daemon that uses File::Tail to get lines from the log, then if it's something that can be handled locally (update filters, nice a process,...) i handle it then and there. if it's something that needs action at a distance i send the info into a database (mysql with SSL authentication) and have another process somewhere that checks the db entries and takes appropriate action.

    OT: now if Juniper would fix their routers memory problems i would be quite happy. i'm watching logs on various machines and blocking evil-doers at the border pronto.

      Detailed info - Writing the script in Perl running on Linux and connecting to both Windows and Unix based servers for remote log file monitoring. I am proceeding with the assumption that windows will have a ssh server that would allow to connect.

      Sorry for not mentioning the details. I will check out Dave Roths page, but I am looking for a more generic solution.
      Thanks.
Re: Remote Log File Monitoring
by data64 (Chaplain) on Feb 07, 2003 at 22:53 UTC

    What log file are you trying to monitor? What OSes are involved ?

    More background information might get you better answers.


    Just a tongue-tied, twisted, earth-bound misfit. -- Pink Floyd