Scalable Architectural Pattern for Integrating Syslog Servers with Splunk
Creators
- 1. Assistant Professor, Department of Information Technology, Sasi Institute of Technology & Engineering, Tadepalligudem (Andhra Pradesh), India.
Contributors
- 1. Publisher
Description
An enterprise infrastructure consists of several devices. The devices emit event notifications representing their current state. The devices without storage such as printers and routers are configured to send the event notifications in the form of syslogs to one or more remote syslog servers over the network. Depending on the size and usage of the enterprise infrastructure, millions of syslogs may be emitted per second. These syslogs are used by the system administrators to detect and address the anomalies in the infrastructure. The system administrators often integrate the syslog servers with Log Analysis tools that offer aggregation, analytics, and visualisation capabilities. Splunk is one such popular tool that can be integrated with syslog servers. This paper proposes an architectural pattern for syslog servers that are to be integrated with Splunk for better performance, scalability and resilience.
Files
B63070710221.pdf
Files
(419.3 kB)
Name | Size | Download all |
---|---|---|
md5:b8e74423e4c6db60f7ad201f462bb900
|
419.3 kB | Preview Download |
Additional details
Related works
- Is cited by
- Journal article: 2277-3878 (ISSN)
Subjects
- ISSN
- 2277-3878
- Retrieval Number:
- 100.1/ijrte.B63070710221