topic Re: centralized logs in Windows Server 2003

centralized logs

mvr — Thu, 24 May 2007 10:02:11 GMT

We have a need for centralized logs for windows servers. If possible we would also like to collect logs form the Cisco equipment too. Is there an open source solution?

Thank you in advance,

Larry

Re: centralized logs

Ivan Ferreira — Thu, 24 May 2007 13:22:22 GMT

Check this open source project:

http://www.loglogic.com/logforge/

Re: centralized logs

Igor Karasik — Thu, 24 May 2007 13:34:03 GMT

Larry,
I know about two FREE tools for collect windows event logs:
Microsoft Log Parser 2.2
http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&DisplayLang=en
http://articles.techrepublic.com.com/5100-6329-5034923.html

and Event Sink Project
http://www.edu.uwo.ca/eventsink/
http://www.edu.uwo.ca/eventsink/submitted-source.html

I don't tried these tools (we use Microsoft MOM :-) ).....

Re: centralized logs

Jonas Back_2 — Fri, 25 May 2007 01:01:58 GMT

Next version of MOM (System Center) you will get the "formerly-called" ACS - Audit Collector Service that will be able to collect the event logs centrally.

If you want to dig deeper into Log Parser, check out this excellent book:
http://www.amazon.com/Microsoft-Parser-Toolkit-Gabriele-Giuseppini/dp/1932266526

I guess you could schedule a task to collect/send the logs to a SQL server but it involves smoe scripting.

ut I'm also looking for a "free" based too. Anyone?

Re: centralized logs

Paul Slijkhuis — Fri, 25 May 2007 01:48:59 GMT

You want to check out Nagios: http://www.nagios.org