Paul Winkler wrote at 2005-9-23 16:27 -0500:
Anybody know of any software that will aggregate logs in a variety of formats and allow me to correlate events in one log with another?
I'm getting really REALLY tired of eyeballing and grepping a multitude of logs on different servers, mentally translating incorrect timestamps, and trying to work out what the heck from one log corresponds to something in another. Anytime something goes wrong, i waste a huge amount of time on this.
Maybe, you log via "syslog" and send all syslog messages to a central server (then you get a single logfile (at least when you want) with all your log entries).
That's a fine idea for the future, but I'm looking more for something to help with already existing logs where this isn't the case. thanks, PW