I used to use nxlog to collect Windows AD logs to a Linux server. Often, it would end up deadlocking (2-3/week) on the Windows Side and would stop shipping the logs. It was very useful to have the logs but I'm very glad we were able to replace it.
Re:Logstash joins Elasticsearch
by kossmoboleat on Tuesday August 27, 2013 @12:22PM
(#6284388)
Do I have to buy the commercial version to get a web interface or GUI to analyze or browse the logs?
Re:Logstash joins Elasticsearch
by quicksilver03 on Tuesday August 27, 2013 @04:31PM
(#6286086)
Only if you want.
On my servers I use the open source version of nxlog to collect various logs and forward them to a central nxlog server, which in turn feeds logstash. Behind logstash I have configured elasticsearch as storage and I use kibana as a GUI to search and browse.
http://nxlog-ce.sourceforge.net/