Logs are metrics waiting to happen.

How to use syslog(3) to emit metrics and rsyslog for transport.

Etsy's log-to-Graphite broker.

A LogStash-like log aggregation tool that compares itself favorably to Scribe and Flume.

Alternative frontend to Logstash.

Alternative frontend to Logstash.

More hate-driven-development from Jordan.

"fail-by-committee"

Event grapher that performs not just predetermined mathematical transforms on input but arbitrary Ruby functions.

Design documentation of LinkedIn's Kafka queue broker. It's distributed but relies on Zookeeper for orchestration. The section on the log file's implementation is particularly interesting.

For to tcpdump MySQL. Remember to connect via TCP, not Unix-domain.

Good rsyslog sense from UrbanAirship. Filed for when we have more servers.

Jordan Sissel's log processing tools.

Rack logging middleware.

Hammer's talk about data at Facebook. 320 nodes for Hive, 120 nodes for Cassandra. Large data size and a (relatively) low write rate.

Tastes great with supervise