Matej Markelj (2015) A modular syslog server with input filter. EngD thesis.
Abstract
Network device monitoring traditionally depends on ICMP, SNMP and syslog. The latter is, due to its simplicity, used in environments where network devices are monitored by IT personnel that do not necessarily work in networking field. In this thesis, network monitoring protocols have been assessed in detail, and typical usage explained. Also, development, testing and implementation of a modular syslog server is presented. Four modules have been developed to save messages to SQL server or text file, or to forward them using e-mail or SMS. Key component of this system is the input filter which lets only relevant messages through. The solution was designed to consume little resources and has been tested on a large number and different types of network devices.
Actions (login required)