[asterisk-users] OT - best policy for logs

[Jay R. Ashworth]

On Thu, Nov 15, 2007 at 07:29:29PM +0100, Olivier wrote:
>    Which is the best way to manage logs ?
>    Would you centralize and "mix" logs from Linux, Asterisk, syslog and others
>    or keep them separate ?

In my experience, it's easier to combine them all into one syslog
server, and then utilize tools to filter them apart when necessary,
since there are more tools to do that than to *combine* them when that
is necessary, which it often is.

It probably makes it easier to leverage things like splunk, too.

Cheers,
-- jra
-- 
Jay R. Ashworth                   Baylink                      jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com                     '87 e24
St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274