Hello All,

I need to implement central logging for our Linux/Solaris environment and was wondering if anyone had some suggestions on software/architecture. The ability to view live/search old logs via a gui and DB support is a must. Preferably an Oracle DB...

Thanks.

You mean supporting logs generated by Oracle or storing logs in an Oracle DB? (If the second, why?)

the logs stored in a external database... I'm thinking there may be a need in the future (SOX, etc...) to have them centrally stored in DB and we are an Oracle shop.

Thoughts?

Is this still an active question?

My main thoughts were that your choices are to either make it partially relational, fully relational, or do no relations. Partially relational would have relations for:

• hostname
• log facility
• log level
• date/time

and the text of each log message is stored. Fully relational would have all messages stored in a unique table.

Doing this in perl would be easy, but probably a better way would be to take the syslog code and just modify it to interact directly with Oracle.

A great OSF project would be to do this and for max flexibility, allow the configuration to specify the SQL statements for all the inserts.