Tools to analyze syslog logs

[Dennis Glatting]

On Fri, 2013-08-30 at 11:33 +0700, Olivier Nicole wrote:
> Hello,
> 
> What tool do you use to analyze syslog logs?
> 
> All tools I can see in the ports seems to rely heavily on some big
> configuration file, that had tons of regexp to filter the event messages.
> 
> I am wondering if some tool exists that would try to make a
> classification of the event messages; that one could use to say "this
> type of message" is close to "that type of message" hence thy should be
> treated the same way, etc.
> 

Something similar was recently discussed on NANOG:

http://seclists.org/nanog/2013/Aug/530