On 5/12/2014 2:30 PM, Shane Ginnane wrote:
Yeah, but how do you get it there ?. Sysadmins want everything*now*. Not tomorrow after syslog has been archived off. Takes us back to the "tail syslog" thread last month. Surely the Netview (or whatever) developers must be able to knock up code to push it down UDP port 514 - hipersockets across to zLinux running rsyslog ..
Plenty of options there. I went to a session on zAware at SHARE which is a PCI-e card that processes syslog data. Nice that it's offloaded to a device. Logstash is open source but IBM have commercial offerings like SCA-LA and BigInsights. For that kind
of stuff I would probably stick it on cheap commodity hardware. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
