simple app for monitoring server log?

[robok]

Hello,

At the moment I browse my logs from the server manually. I'm thinking about a dedicated open-source app for it, like Logwatch.
I want access to a panel or email report with basic information, such as who is trying to connect to my server on which port, attempts to DDOS, etc.
Which app is best for it, or maybe it would be better to write a bash script for it?

I want a simple solution configuration, like Grafana plus Prometheus, which is too complicated for me at the moment.

 

[Dunuin]

I use graylog and it isn't hard to set up, but I also wouldn't call it simple. And eats a lot of RAM/CPU (Java...) + all logs are written with a lot of metadata to a OpwnSearch DB, so massive SSD wear (300GB/day for ~40 OSs).

Was looking at Wuzah some days ago for some open source SIEM but that looks even more complex and demanding. Is someone maybe using Wuzah to monitor the PVE nodes and guests and can tell how well that works? Suricata on my OPNsense VMs is doing the IPS/IDS but there is no plugin for Wuzah yet and I don't know if it would be a good idea to manually install the wuzah agent.