LogScanner reads messages from syslog or any other logging program via a pipe, analyzes the messages with the PCRE library, and sends email to the administrator about any errors or violations.
Yet Another File Integrity Checker saves information about the state of a filesystem to a database, which later can be used to compare against the current state of the filesystem, letting you know of any changed, added, or removed files.
Swatch był oryginalnie napisany aby monitorować wpisy z logów tworzonych przez syslog. Posiada wiele metod alarmujących, zarówno wizualnie jak i wywołujących tzw. triggery.