Log Consolidator and Alerter
Log Consolidator and Alerter
How To setup PIX centralized Monitoring Article created 2005-05-17 by Hamid Ali Raja Last Updated 2006-06-19 by Timm Herget. Adiscon Products can be used to efficiently analyze PIX traffic as well. This article is strictly task focused. It does not describe why the systems should be monitored nor does it provide any further background. Please […]
Forwarding filtered IIS Logfiles Created 2006-04-19 by Timm Herget Please note: In order to forward the IIS logs you need MWAgent. Step 1 First, create a new RuleSet, in our sample we named it ForwardSyslog, and bind an ForwardSyslog ,or any other action you want to use for forwarding (e.g. SendEmail), to it. In our […]
How to store custom properties of a log message in a database Created 2006-03-27 by Timm Herget This step-by-step guide describes a scenario where WinSyslog receives syslog data from a Fortigate firewall, parses the messages via post processing action and writes the custom parsed properties into a database. Step 1 – Creating the Syslog Server […]
How To setup a Failover Syslog Server Article created 2006-02-01 by Timm Herget. You want to have an alternative syslog server for forwarding your e.g. PIX-syslog-messages, which automatically detects if the primary server is alive or not and if not he takes it’s roll until he is back? Here we go: At first please make […]
How To setup a Failover Syslog Server Article created 2006-02-01 by Timm Herget. You want to have an alternative syslog server for forwarding your e.g. PIX-syslog-messages, which automatically detects if the primary server is alive or not and if not he takes it’s roll until he is back? Here we go: At first please make […]
Interactive Logon/Logoff Filter Created 2005-10-05 by Timm Herget Please Note: This article is valid for EventReporter 8.x / MWAgent 4.x and lower and describes, how to set the filters to get only interactive logon’s/logoff’s. Click on your “Filter Conditions”. Here we have a little problem, because it depends on your operating system. If you work […]
How To setup EventLogMonitor Service Article created 2003-02-24 by Rainer Gerhards. Last Updated 2011-05-25 by Tom Bergfeld. Please note: Starting with EventReporter 8.3 and MonitorWare Agent 4.3 two different event log monitor services are provided. They are called “Event Log Monitor” (V1) and “Event Log Monitor V2”. In short, the V2 version is recommended for […]
Step-By-Step Guides Article created 2003-04-30 by Rainer Gerhards. Last Updated 2005-08-16 by Timm Herget. Forwarding NT Event Logs to a Syslog Server In this scenario, an event log monitor is used to forward all events written to the NT Event Log to a syslog server. This can either be another instance of MonitorWare or any […]
Step-By-Step Guides Article created 2003-04-30 by Rainer Gerhards. Last Updated 2005-08-16 by Timm Herget. Forwarding NT Event Logs to a Syslog Server In this scenario, an event log monitor is used to forward all events written to the NT Event Log to a syslog server. This can either be another instance of MonitorWare or any […]
Step-By-Step Guides Article created 2005-05-17 by Hamid Ali Raja. Creating a simple Syslog Server In this scenario, a simple Syslog server will be created. No other services are configured. The Syslog server will operate as a standard Syslog server on the default port of 514/UDP. All incoming data will be written to a single text […]