<div dir="ltr">Hi, <div><br></div><div>CzP wrote a summary of some syslog web guis a while back: <a href="https://www.balabit.com/blog/web-interfaces-for-your-syslog-server-an-overview/">https://www.balabit.com/blog/web-interfaces-for-your-syslog-server-an-overview/</a></div><div>It's a bit dated, but might be useful for you. Regarding ELK (which might be your best bet, even though you mention you had problems with it), syslog-ng can directly send messages to Elastic, so you might avoid using Logstash altogether.</div><div><br></div><div>HTH, </div><div><br></div><div>Robert</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 22, 2017 at 4:35 PM, Smith, Paul (Sr. Admin-InfoSec) <span dir="ltr"><<a href="mailto:Paul.C.Smith@snapon.com" target="_blank">Paul.C.Smith@snapon.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_5310296563069560147WordSection1">
<p class="MsoNormal">Does anyone have a simple, easy to use, visualizer for syslogs that allows me to make new graphs quickly?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am in need of getting dashboards from syslog events to our executive teams.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">They don’t know what information they want from these dashboards so I am trying to come up with some pretty graphs they can look at, and create new ones if they don’t want that ones I do create. This way I can sketch things up quickly so
they can see what can be graphed.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">We are a small team in a really big shop and I have many other responsibilities. I don’t have the time to spend mucking about with this stuff all day.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’m trying to find a simple, easy to use visualizer that does not take me days to set up and configure.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’ve tried so many articles about setting up things like ELK and others, and have had a problem getting most of them to work. I spend half a day on each one and something is just not quite right because the build instructions are a month
or more out of date and there is something that has changed in a dependency. <u></u>
<u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Also, when trying to deal with creating logstash config files, I don’t want to have to learn yet another config file syntax that I only need to touch 2-3 times per year. If I touch it at this frequency, I have to spend a day trying to remember
what is what in the config file so I can make a new graph.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Paul Smith<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:9.0pt">InfoSec<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt">Those who don't study history are doomed to repeat it.<br>
Those who do study history are doomed to stand by helplessly while everyone else repeats it.<br>
Tom Toro<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>