9. Syslog

• 9.1. Overview
• 9.2. Grok
• 9.3. Configuration
• 9.4. Syslog message
• 9.5. Syslog analysis
• 9.6. Syslog alerts
• 9.7. Grok expressions

NetSpyGlass has a built-in framework that can collect, store, process, and react to the information extracted from Syslog messages. For example, NetSpyGlass cluster configured to collect and process Syslog messages from network devices can detect interface flapping, device restarts, fabric channel errors or brute force attacks and other events registered in device logs. The system can send notifications in a near real-time manner to log, email, Slack, Pager Duty, or ServiceNow when these events happen.