https://github.com/rsyslog
https://github.com/beave/sagan
http://www.securitywarriorconsulting.com/logtools/
https://isc.sans.edu/diary/SAGAN%3A+An+open-source+event+correlation+system+-+Part+1%3A+Installation/9184
原文：http://www.cnblogs.com/diyunpeng/p/4147545.html