Topic: Preferred method for centralizing logs

[5kKate]

Which method do you prefer for centralizing your logs: file monitoring or Pipe to Logger?

Pros/cons?

Thanks!

[James Blond]

I have a log analyser https://github.com/JBlond/apache_log_parser doing that job.

Pro: I find the issue that I need to find
Con: needs log rotation

[5kKate]

Thanks for the input James. I appreciate it!

[5kKate]

Thanks again, James. One other question.

What if i want to centralize my logs from several servers? This seems good for filtering out error messages. I would prefer to send all my logs to one central location so I can easily search for errors across all my servers. Currently I'm thinking about using rsyslog to send them to my log server. Is it better to have syslog read from the access log files themselves, or to skip the log files and write directly to syslog over logger?

[glsmith]

I have used http://www.apacheviewer.com/