Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Log messages - can I put them in a text file?

I'm trying to transition from using syslogd to solarwinds syslog, and we have been using grep to find information in log files, but since solarwinds puts all syslog messages in an sql database, this is not possible. Has anyone come up with a way to automatically copy syslog information to a text file as it comes in? I tried using the built-in search feature, and it works fine, but from how slow it is to look through 2 weeks of data, I'm assuming that trying to look through 6 months of data (which is what we normally need), that it will not handle it. The system is getting about 20,000 messages per hour. Thanks in advance.

Find more posts tagged with

Accepted answers

bobmarley

Look at getting a copy of Kiwi Syslog Server and letting that product do it for you. It's fairly inexpensive and is available at SolarWinds main site.

All comments

cnorborg

Well, the first thing to know is that the Solarwinds Syslog server typically has not been designed for a large number of Syslog messages, and from past experience I'd say 20,000 is well within that classification. It can usually take quite a few, but when the database grows larger, the whole system gets slower.

That being said, the newest version of Solarwinds replaces that Syslog server with an abbreviated version of the new Log Analyzer, which is set up to use a different database than the Orion database, and could potentially grow to much higher capacity. But, I believe in order to get there you would first probably need to upgrade to the full Log Analyzer AND make sure you have it on a different database server, not just a separate database than Orion. If you're needs are more security oriented, they also have the old LEM (Log and Event Manager) which has been rebranded as Security Event Manager.

If you do that, I doubt you'll need to export them into a text file, but if you still feel the need, I think the easiest way would not be through Solarwinds. That's because to export it through Solarwinds you're still talking doing queries to the same database, so its just as inefficient. The best way I think would be to use SQL Server Management Studio and dump it to CSV. If you really want to do it through Solarwinds, offhand I'd think writing a report in the web-based report writer and choosing the export to Excel or CSV option could work. I think you have to schedule the report to be emailed though, which could be an issue...

bobmarley

Look at getting a copy of Kiwi Syslog Server and letting that product do it for you. It's fairly inexpensive and is available at SolarWinds main site.

superfly

I only keep syslogs for 7 days. As mentioned Solarwinds is not designed for huge syslog stashing. You'll need to use another product for that function.

Timcredible

Interestingly, we already have syslogd, and were trying to replace it (and 5 other tools) with SW. We've decided to just keep syslogd running.