RE: Event log monitoring

["Osvaldo Casagrande" <ocasagrande () diviserv com>]

You could try.

Eventquery.vbs (from Microsoft) and schedule yours queries. Or you could try EventCombMT (gui and not for schedule)


Osvaldo Casagrande
Asuncion - Paraguay 

-----Mensaje original-----
De: David Nardoni [mailto:dnardoni () sbcglobal net] 
Enviado el: Miércoles, 13 de Octubre de 2004 05:26 p.m.
Para: 'Stephane Auger'; security-basics () securityfocus com
Asunto: RE: Event log monitoring

 
Try syslogng

http://www.balabit.com/products/syslog_ng/

Dave Nardoni CISSP
First Response Consulting Services, Inc.
dnardoni () firstresponseconsulting com


-----Original Message-----
From: Stephane Auger [mailto:stephaneauger () pre2post com]
Sent: Tuesday, October 12, 2004 1:26 PM
To: security-basics () securityfocus com
Subject: Event log monitoring

Hey everyone,

  I'm looking for a practical way to monitor event logs on multiple servers.  There are multiple subnets at multiple 
sites, and I have one main LAN to monitor everything.  Is there some kind of software/batch file that could be 
installed on the servers so that the events be sent on my monitoring lan (a little bit like SNMP sending to a listening 
server)?  Thanks!!

Stephane Auger, MCP