Logcheck

5.8easy start · #95 of 107
in Log Management Software

Runs on Linux, self-hosted.

Logcheck is ranked #95 of 107 in log management software on The Geeks Club. It runs on Linux, Self-hosted.

Compared on log management software

ELK Stack 0 of 4 in the starter kit Lesson 19.5 Google Cloud Logging 0 of 4 in the starter kit Lesson 29.2 Oracle Cloud Infrastructure Logging 0 of 4 in the starter kit Lesson 39.2 Oracle Log Analytics 0 of 4 in the starter kit Lesson 49.1 Sumo Logic 0 of 4 in the starter kit Lesson 58.9 Elastic Observability 0 of 4 in the starter kit Lesson 68.7

Purpose: Logcheck analyzes system logs for unexpected entries that could indicate problems or security issues.
How it works: It checks log entries against a customizable database of regular expressions and reports entries not identified as routine to the system administrator.
Supported log sources: The package description names logs produced by systemd-journald, rsyslog, or another system log daemon.
Rules database: The related logcheck-database package provides regular expressions for matching system log entries and might also be used by other log checkers.
Email reporting: Debian lists a default mail transport agent as a dependency and tags Logcheck as working with email.
Scheduling: The Debian package file list includes a cron configuration and a systemd service and timer.
Security use: Debian tags Logcheck as a security log analyzer and a monitoring utility.
Package availability: The stable Debian package is version 1.4.5+deb13u1 and is available for architecture all.
Package size: The Debian package page lists a package size of 28.9 kB and an installed size of 120.0 kB.
Related utility: The source package also builds logtail, which identifies new lines added to the end of log files.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.