<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Syslog analysis]]></title><description><![CDATA[<p dir="auto">Hi,</p>
<p dir="auto">i have configured my firewall to send syslog to netxms server.<br />
in the syslog monitor i see all the entries from the firewall and there are a lot.<br />
i have been thinking, how can i learn something from all of those messages ? is there a way to see statistics ? should i use grafana for this ?</p>
<p dir="auto">there are products like Elastic search and kibana to analyze all this data but this way i don't use NetXMS.</p>
<p dir="auto">Regards,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/topic/5570/syslog-analysis</link><generator>RSS for Node</generator><lastBuildDate>Fri, 13 Nov 2026 10:37:00 GMT</lastBuildDate><atom:link href="https://forum.netxms.org/topic/5570.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 11 May 2018 07:28:42 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Syslog analysis on Tue, 15 May 2018 09:03:25 GMT]]></title><description><![CDATA[<p dir="auto">hi Tursiops,</p>
<p dir="auto">thank you for the replay.</p>
<p dir="auto">Regards,<br />
Lindeamon</p>
]]></description><link>https://forum.netxms.org/post/24267</link><guid isPermaLink="true">https://forum.netxms.org/post/24267</guid><dc:creator><![CDATA[lindeamon]]></dc:creator><pubDate>Tue, 15 May 2018 09:03:25 GMT</pubDate></item><item><title><![CDATA[Reply to Syslog analysis on Mon, 14 May 2018 01:48:02 GMT]]></title><description><![CDATA[<p dir="auto">Hi,</p>
<p dir="auto">We're using syslog mostly to trigger alerts on specific events rather than for statistics, so not sure if there's an easier way or if the below will even do what you're looking for:</p>
<ol>
<li>Create syslog rules and events for the log entries you want statistics on</li>
<li>Add the generated events to Event Processing Policies and have a script that sends data to a Push DCI. The data from the event could be used inside the script to determine which node and Push DCI to update.</li>
</ol>
<p dir="auto">Cheers</p>
]]></description><link>https://forum.netxms.org/post/24243</link><guid isPermaLink="true">https://forum.netxms.org/post/24243</guid><dc:creator><![CDATA[Tursiops]]></dc:creator><pubDate>Mon, 14 May 2018 01:48:02 GMT</pubDate></item></channel></rss>