Centralized data for post mortem to detect the next calamity before it happens
Use Cases and Deployment Scope
Pros
- syslog digest
- alerts based on syslog contents
- sanity check on number of daily log events
- post mortem on outages
Cons
- the interface could be more intuitive
- repetitive syslog dialog could either be highlighted or ignored by user choice
- when a source spikes it's name could be included in the volume alert email
Return on Investment
- decrease diagnosis time
- increase security
- aids with preemptive alerts
- forensics at the finger tip
- exposes syslog to the entire team







