Log monitoring and analysis with rsyslog and Splunk

Each computer system, regardless of the Operating System (OS), has a mechanism that records (almost) all the performed activities. Such information, commonly called log in information technology, is not normally related to the average end user, but it plays a fundamental role in the life of the system administrator when problems arise, because the included occurred errors are the starting point of the resolution process. Therefore, one of the key aspect in the management of an IT infrastructure is the logging and the conservation, as in the logbook of a ship or in a book where to write down daily activities, of everything happening in the system (system logs, application logs, database logs, security logs, and so on), that is information about the health status and performance of the system and the running applications.