In order to learn more about what is logged by my desktop machine, I'd like to set up something better than a casual
grep command to see what's going on. A typical use case would be to send an email with a warning if more than X SSH login attempts failed within Y minutes for user username.
To be clear, this is not for web server logs, which most *nix log analysis tools seem to be focusing on. Also, I would like this system to be live, not just a
cron, in order to be able to catch events like
shutdown now before the machine goes down.
LogSurfer might be the right thing for me, but I'd like to know of other, similar tools if there are any.
Of course, I'm only interested in FLOSS.