Log Consolidator and Alerter
Log Consolidator and Alerter
Step 4 – Setting up the Linux Clients We still need to implement the Linux clients into our logging network. This could be Linux workstations or servers. Currently, rsyslog is already shipped with many Linux Distributions as the default syslog daemon already. Though, often a rather old version is installed (mostly v3), this will be […]
How To Schedule Reports with MonitorWare Console Article created 2003-11-20 by Wajih-ur-Rehman. Reports in MonitorWare Console can be scheduled using Job Manager. With Job Manager you can not only schedule the reports such that they are saved on the hard disk but also you can schedule the reports such that they are sent via email […]
How To setup Windows centralized Monitoring Article created 2003-11-24 by Wajih-ur Rehman. Article updated 2004-04-22 by Tamsila-Q-Siddique. Monitoring Windows NT/2000/XP/2003 is important even for small environments. This article is strictly task focused. It does not describe why the systems should be monitored nor does it provide any further background. Please see the respective backgrounders or […]
Common uses Article created 2003-05-14 by Rainer Gerhards. Relaying Events In all but the easiest scenarios event data needs to be relayed between different machines. Please note that relaying is also often referred to as “forwarding” – both terms have the same meaning in the context of this documentation. A typical relay scenario might look […]
Common uses Article created 2003-05-14 by Rainer Gerhards. Solving Problems Solving problems is closely related to alerting. As with alerting, actions are to be executed if a trigger condition exists. With problem-solving, these are actual corrective actions. Samples are deleting temporary files when disk space goes low or blocking an external IP address in a […]
Common uses Article created 2003-05-14 by Rainer Gerhards. Alerting In this scenario, the primary concern is to receive alerts if specific events happen. Of course, alerting is often used together with other scenarios as alerting alone does not provide in-depth analysis or storage of the captured events. Alerts can be generated by every running instance […]
Common uses Article created 2003-05-14 by Rainer Gerhards. Event archival If you have to create an archive of past events, this scenario is for you. The main focus here is storage of event data. Potentially, data is stored for a long time and eventually never being overwritten. It is also highly likely that data will […]
Automatically archiving logfiles written by MonitorWare Agent. Article created 2008-11-27 by Andre Lorbach. This article was written by using the MonitorWare Agent, but it can also be applied to EventReporter and WinSyslog. By default the log files generated by MonitorWare Agent using the WriteFile Action are written on a daily basis, so you have one […]
Filtering Logon, failed Logon and Lockout Events Created 2008-10-16 by Florian Riedl Please Note: This article is valid for EventReporter 9.x / MWAgent 5.x and lower and describes, how to set the filters to get only logon, failed logon and lockout events. The scenario is, that we need to monitor the behavior of users logging […]
Install phpLogCon with IIS6.0 Article created 2008-10-14 by Tom Bergfeld. In this paper, I describe how to install phpLogCon with IIS6.0. It is intentionally a brief step-by-step guide, targeted to those who want to quickly get it up and running. For more elaborate information about phpLogCon, please consult the phpLogCon manual set. Installing IIS If […]