Re: Event Log Monitor Program

[p1g <killfactory () gmail com>]

Opensource - OSSIM
KIWI can be used to centrally collect events from WIN32 via
snare(opensource syslog client) then you can forward those events to
Aanval (free for 1 syslog source and 1 snort ids source)

Aanval may provide the insight you are looking for.


Commercial- LTAuditor, Q1-labs(Enterasys) <-- real nice!!
and Tenable Log Coorelation <--supernice!!

On 9/20/07, Adam Savage <Adam_Savage () skillsoft com> wrote:
>  I'm looking for a good event log program that can consolidate all my event logs from my servers into one location. 
> Then I can report on them and such. We purchased GFI Security Event Log Monitor but we find the program cumbersome at 
> best and doesn't give you any insight on some of the event messages that are produced. I'd like to know if there is a 
> freeware/opensource solution. I know GFI has recently come out with the Successor to SELM called EventsManager but 
> we'd like to look into some other products that are out there first.
>
> Any replies would be greatly appreciated.
>
> Thank you,
>
> Adam


-- 
-p1g
SnortCP
  ,,__
o"     )~  oink oink
   ' ' ' '

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke