Tie my syslog down, Sport !! – Tie my syslog down …

Kiwi Syslog Daemon is a freeware Syslog Daemon for Windows. It receives, logs, displays and forwards Syslog messages from hosts such as routers, switches, Unix hosts and any other syslog enabled device.

I needed a simple logging solution for a client who has introduced a new Redhat based server and wants to be able to keep an eye on whats happening.

For those of you not familiar – syslog is pretty much the universally available logging service on *nix and other proprietary operating systems. Basically if something is noteworthy during the operation of the server – you can syslog it.

An simple example message in syslog format could be

<34>Oct 11 22:14:15 mymachine su: ‘su root’ failed for hacker on /dev/pts/7

Kiwi’s offering downloadable from here gives :-

GUI based syslog manager
Messages are displayed in real-time as they are received
10 virtual displays for organizing your messages
Message logging or forwarding of all messages, or based on priority or time of day.
Auto Split the log file by priority or time of day
Receives messages via UDP, TCP or SNMP
Forwards messages via UDP or TCP
Automatic log file archiving based on a custom schedule
Messages per hour alarm notification with audible sound or e-mail
Log file size alarm notification with audible sound or e-mail
Daily e-mailing of syslog traffic statistics
Minimizes to the system tray
Maintains source address when forwarding messages to other syslog hosts
Syslog statistics with graph of syslog trends (Last 24 hrs/Last 60 mins.)
Syslog message buffering ensuring messages are not missed under heavy load
DNS resolution of source host IP addresses with optional domain removal
DNS caching of up to 100 entries to ensure fast lookups and minimise DNS lookups
Pre-emptive DNS lookup using up to 10 threads
Comes with 5 cool skins to change the look of the program
Selectable display font, display color, and background wallpaper
Also available as an NT Service
RFC3164 send and receive options
Context based help
Free for use for as long as you want

Another article will cover setting up and testing the syslog application with the unix server.