I will use this page to collect logging / syslog tips and resources. If there is a good resource on the net which is not here, :

• Appliance:
  • NIE Logging Appliance : Performance test
    
  • Network Intelligence Engine
    
• Log Analysis Resources
  
• To subscribe to the LogAnalysis mailing list, send an empty e-mail message to from the account you want to add. You'll be asked to confirm the subscription request, and sent a list of administrative commands for your subscription. To subscribe to the digest version, send a message to .
  
• fwanalog : shell script that parses and summarizes firewall logfiles
  understands logs from ipf (tested with OpenBSD 2.8's and 2.9's ipf, also FreeBSD, NetBSD and Solaris 8 with ipf), OpenBSD 3.x pf, Linux 2.2 ipchains, Linux 2.4 iptables, some ZyXEL/NetGear routers and (experimentally) Cisco PIX, Watchguard Firebox and Firewall-One firewalls.
• fwlogsum : generic, all purpose, flexible summarizer for Checkpoint's Firewall-1 logs
  implemented using standard Perl 5 and is freely available under GPL. The generated output is HTML including most of the graphics.
• fwlogwatch
  produces Linux ipchains, Linux netfilter/iptables, Solaris/BSD/Irix/HP-UX ipfilter, Cisco IOS, Cisco PIX, NetScreen, Windows XP firewall, Elsa Lancom router and snort IDS log summary reports
• Identify and enable Web-server-specific logging mechanisms
  cert.org
• Identify data that characterize systems and aid in detecting signs of suspicious behavior
  cert.org
• Logsurfer
  monitor any text-based logfiles on your system in realtime
• Manage logging and other data collection mechanisms
  cert.org
• SANS : Practical Implementation of Syslog in Mixed Windows Environments for Secure Centralized Audit Logging
  
• Swatch : Watching Your Logs
  perl module
• syslog:
  • Attack Signatures, Tina Bird's syslog Attack Signatures course
    
  • Centralized Syslog Loghost Project
    
  • Configuring and using syslogd to collect logging messages on systems running Solaris 2.x
    cert.org
  • Log Consolidation with syslog
    sans.org
  • logreport : transform raw data in network/computer system log files into valuable information for you
    
  • modular syslog
    
  • mtsyslogd - Multi Threaded Modular Syslogd Replacement
    
  • Using newsyslog to rotate files containing logging messages on systems running Solaris 2.x
    cert.org
  • Robust event logging with Syslog
    integrate the Syslog package into your Java programs
  • syslog mail archive
    
  • Syslog-ng : syslog-ng adds the possibility to filter based on message contents using regular expressions
    Linux, Solaris and FreeBSD
  • Syslog-Sign Protocol
    IETF draft
• What audit logs can tell you about your network