asterisk users - Nov 2007 - OT - best policy for logs

Hi,

Which is the best way to manage logs ?
Would you centralize and "mix" logs from Linux, Asterisk, syslog and
others
or keep them separate ?

Cheers
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20071115/bec739bd/attachment.htm

On Thu, Nov 15, 2007 at 07:29:29PM +0100, Olivier wrote:
>    Which is the best way to manage logs ?
>    Would you centralize and "mix" logs from Linux, Asterisk,
syslog and others
>    or keep them separate ?
In my experience, it's easier to combine them all into one syslog
server, and then utilize tools to filter them apart when necessary,
since there are more tools to do that than to *combine* them when that
is necessary, which it often is.

It probably makes it easier to leverage things like splunk, too.

Cheers,
-- jra
-- 
Jay R. Ashworth                   Baylink                      jra at
baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com                    
'87 e24
St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274