log analysers

[parthibanp]

Hi

Can any one suggest me a linux (open source) based log analysers to accept logs from cisco 4215 ips. My network is based on opensource and I cannot have windows machine and hence need a log analyser on linux to analyse the IPS logs

Thanks in advance

[mhellman]

Most of the open source SIM-like products tend to support Snort. Of the three I have read about:

http://www.ossec.net/

http://www.ossim.net/

http://sguil.sourceforge.net/

Only ossec.net appears to say it supports logs from Cisco IDS/IPS.