Monitoring/Logging/Parsing/Notifying

• Various monitors generate data:
      Syslog is built-in and always generates a rumble
          Almost always coming from the remote machines
      pingem, gettemp, steamd are local customizations
          Are often run on the monitoring host
  
  
• LOTS of events - Swatch "engine" parses and logs `em appropriately
      This is a non-trivial process in a LARGE environment
  
  
• Notification process is handled two days:
      Either periodic Emails of all events (via crontab entry)
      Direct notification via the notify-list tool
          Can be generated via cron entries
          Sometimes called directly by the monitoring tool
      Determine who (and who NOT) to notify is non-trivial problem