RE: Event log monitoring

[s b <skullrockz () yahoo com>]

You may also check out the following document for a
detailed step-by-step guide on implementing a central
syslog server.

http://www.cert.org.in/knowledgebase/guidelines/cisg-2004-03.htm

Thanks

skullrockz

--- Kurt <kurtbuff () spro net> wrote:

> http://ntsyslog.sourceforge.net or
> http://intersectalliance.com/snare -
> will send your eventlogs to a syslog server in
> realtime
>
> http://kiwisyslog.com - a very good syslog server
> for Windows, and if
> you pay for it (it's very inexpensive for the
> impressive quality), it'll
> even log to an ODBC DSN
>
> http://mysql.com - A free SQL database server, with
> an ODBC interface,
> both Windows and *nix.
>
> Pretty much all you need.
>
> | -----Original Message-----
> | From: Stephane Auger
> [mailto:stephaneauger () pre2post com]
> | Sent: Tuesday, October 12, 2004 13:26
> | To: security-basics () securityfocus com
> | Subject: Event log monitoring
> | 
> | 
> | Hey everyone,
> | 
> |   I'm looking for a practical way to monitor event
> logs on multiple
> | servers.  There are multiple subnets at multiple
> sites, and I have one
> | main LAN to monitor everything.  Is there some
> kind of software/batch
> | file that could be installed on the servers so
> that the events be sent
> | on my monitoring lan (a little bit like SNMP
> sending to a listening
> | server)?  Thanks!!
> | 
> | Stephane Auger, MCP



                
_______________________________
Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now. 
http://messenger.yahoo.com