How do I Add filters for MonitorWare Agent, WinSyslog and EventReporter? Article created 2004-07-15 by Tamsila-Q-Siddique. Article updated 2006-06-19 by Timm Herget. 1. You would at least need the Basic Edition of MonitorWare Agent / WinSyslog / EventReporter for this scenario. Please Note: We are using MonitorWare Agent in this guide whereas MonitorWare Agent is...

How do I apply filters in MonitorWare Agent, WinSyslog and EventReporter? Article created 2004-07-12 by Tamsila-Q-Siddique. MonitorWare Agent, WinSyslog and EventReporter enables you to apply filters to achieve your desired results. This step-by-step guide will help you through creating these filters. You can: Add a filter Update a filter Delete a filter Please note: WinSyslog...

Article created 2003-05-12 by Rainer Gerhards. Configuring Windows for the Event Log Monitor The event log monitor service pulls events from the Windows event logs. In Windows’ default setup, the information contained in the logs is sparse and far from sufficient for security monitoring. If you are solely interested in checking system health, the default...

Step-By-Step Guides Article created 2003-05-12 by Rainer Gerhards. Creating a hardened log host A hardened log host is a system that is especially configured to prevent malicious users from modifying any log data stored inside it. A hardened log host is especially useful if tampering with log data is to be avoided. Setting up a...

Step-By-Step Guides Article created 2003-05-09 by Tamsila-Q-Siddique. Reporting Log Truncation This step-by-step guide was inspired by a customer question. The customer had a need to record all events seen in the event logs. But due to the overall setup, a lot of event log truncated messages occured. These, too, should be forwarded, but only one...