I have a machine (I don't care whether to run Windows or Linux on it), which has many (eight) NIC in it. I want to relay communications coming in from NIC, to go out thru two other NICs. Specifically, I'm interested in HTTP traffic, but I'd rather be general to all IP traffic.
The result should look like a port-mirror done in software.
Is this possible? If so, how?
Currently, my organization is using Splunk to store logs from various places (DBs, Apache, systems we write, etc.). We don't really use most of its abilities (pull logs automatically, etc.), but we do require the search it provides - showing the event and some of its surroundings.
Recently the free version of Splunk started giving us hard time, so we would like to replace it with some other tool, even with less features, as long as it could index and search over large amount of logs.
Could you please offer such alternatives?
EDIT: while the suggestions given are great, none offer the searching and indexing capability I need. Can you offer something else?
The obvious difference I'm aware of, is the ability to interface to certain MS products, such as Exchange. But for one not having to administer such products, what are the advantages of Powershell? What are the reasons to learn Powershell at all (assuming I'm fluent with bash and cygwin)?