Security Basics mailing list archives

RE: Print Server Log Analyzer


From: Murda Mcloud <murdamcloud () bigpond com>
Date: Tue, 19 Dec 2006 15:28:03 +1000

Would saving the event log as a csv then opening with excel be any good?
You'd have to do a little re-formatting and filtering but it might look
better than the event log.
Check the Action option at the top of event log.


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of AdamCivic () gmail com
Sent: Tuesday, December 19, 2006 12:15 AM
To: security-basics () securityfocus com
Subject: Print Server Log Analyzer

Good Afternoon,

A long time fan of this list. First question.

I have a windows 2003 sp1 printer server. I want to audit printing events,
get a persons logon id, amount of pages printed etc.

The events are currently being audited in the system portion of the event
log. Which is fine and dandy, but my manager wants a pretty report not event
logs. I tried to google the solution, but there are tons of print monitoring
software out there, that is not what I need.


Does anyone know of any software or script where I decrypt the print log
into a nice excel spreadsheet where I can manipulate the data and hand it
off to my manager. I just need software to &quot;decrypt&quot; the logs. I
do not want to install some 3rd party monitoring software, which most of
them include their own services, etc. (especially if it is already being
logged by window)



Much thanks guys in advance,
Adam

ps- sorry if this is the wrong place to post. But auditing is security. :)


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------




Current thread: