Features of the Free version

• GUI-based real-time syslog manager
• View syslog messages in multiple windows simultaneously
• Message logging or forwarding of all messages, or based on priority or time of day
• Auto-split the log file by priority or time of day
• Receive and forward message via UDP, TCP, or SNMP
• Automatic log file archiving based on custom schedule
• Messages per hour alarm notification with audible sound or email
• Log file size alarm notification with audible sound or email
• Daily e-mailing of syslog traffic statistics
• Maintains source address when forwarding messages to other syslog hosts
• Syslog statistics with graph of syslog trends(Last 24hrs/ Last 60mins.)
• Syslog message buffering ensuring messages are not missed under heavy load
• DNS resolution of source host IP addresses with optional domain removal
• DNS cashing of up to 100 entries to ensure fast lookups and minimize DNS lookups
• Pre-emptive DNS lookup using up to 10 threads
• Five out-of-the-box skins to change the look of the program
• Selectable display font, display color, and background wallpaper
• Also available as an NT Service
• RFC3164 send and receive options

Additional Features in the Licensed Version:

Auto-split log file options:

• Host Name
• Host IP address
• Domain Name
• WELF format tags in message text

Advanced filtering options:

• Filter on IP address, hostname, or message text
• Filter unwanted host messages or take a different logging action depending on the hostname
• Filter based on several flags or counters including time interval, threshold and timeout

Actions:

• Powerful scripting engine for filtering, parsing, custom statistics and performing actions
• Run an external program of your choice when the filter conditions are met
• Log to on ODBC database(Access®/SQL/Oracle®/MySQL/Informix®)
• Write logs to the Windows®NT application Event Log
• Play the sound file of your choice when the filter conditions are met
• Forward the received syslog messages via e-mail
• Send a syslog message to another host when the filter conditons are met
• Send an SNMP trap(Version 1 or Version 2)
• Pass values from the received syslog message to an external program, e-mail message or syslog message, such as:
• Message text
• Time of message
• Date of message
• Hostname
• Facility
• Level
• Alarm threshold values
• Current syslog statistics

Buffering:

• A buffer for 20,000 syslog messages to ensure you don't miss messages under heavy load
• A buffer for 1,000 e-mail messages to ensure all e-mail gets through under heavy load or if the mail server is unavailable temporarily
• The DNS cache will hold up to 20,000 entries
• The DNS pre-emptive lookup can spawn up to 200 threads

Alarm options:

• Run an external program when an alarm condition is reached. This could be a pager or SMS program
• Play the sound file of your choice when an alarm condition is reached