It is essential to have both active and passive monitoring capabilities in your network management tool. The active monitoring makes for a proactive approach to keeping networks healthy i.e. continuously scanning the network and trying to prevent or minimize the effects of a possible downtime⁄slowdown. With passive monitoring techniques you are also armed with a sound troubleshooting mechanism to analyze any network incidents after they have occurred, despite having tried to prevent them through the proactive approach.
Syslog monitoring is a good passive monitoring mechanism to compliment the continuous, active SNMP monitoring done throughout the network. OpManager provides a rule–based method of reading incoming syslogs and associates alerts to these syslogs to notify required network personnel or perform other tasks e.g. a server⁄port shutdown. OpManager’s Syslog daemon supports a wide number of devices across multiple platforms. It supports any syslog exporting device or applications viz. Servers (Linux, UNIX, AIX and Solaris), routers, switches & etc.. No more do you have to switch between a log monitoring tool and a network management tool - network management through OpManager now also includes syslog monitoring, all in one unified console.
A huge task before administrators is to maintain lengthy log messages which occupy enormous space. OpManager’s rule–based reading of syslogs allows the administrator to intelligently correlate incoming syslogs and thus do away with time–wasting syslog "noise". Logs help administrators to spot external attacks, analyze their patterns, recognize any breach in internal user access permissions, study system usage trends etc... Seasoned administrators monitor Syslogs and Event Logs to use these for
[If you are looking for Log archiving and compliance reporting, please visit ManageEngine EventLog Analyzer]