Log Consolidator and Alerter
Log Consolidator and Alerter
Step-By-Step Guides Article created 2003-05-09 by Tamsila-Q-Siddique. Reporting Log Truncation This step-by-step guide was inspired by a customer question. The customer had a need to record all events seen in the event logs. But due to the overall setup, a lot of event log truncated messages occured. These, too, should be forwarded, but only one […]
Step-By-Step Guides Article created 2003-05-09 by Rainer Gerhards. Firewall setup for MonitorWare Agent MonitorWare Agent can be used with standard firewalling. The product itself does not require any specific access privileges to network services like RPC or the like. The Windows networking support required is fully dependant on the needs of the network or security […]
Step-By-Step Guides Article created 2003-05-09 by Rainer Gerhards. Intrusion Detection via the Windows Event Log The Windows event log provides multiple evidence of potential intrusions. We will discuss what to look for when checking the event log. We have used Windows 2000 Server while creating this text. There may be differences for other versions, so […]
Step-By-Step Guides Article created 2003-05-09 by Rainer Gerhards. Sample Syslog Device Configurations MonitorWare Agent can receive vital network status information from a variety of devices. As these devices are from many different vendors and have many different applications, it is impossible to provide detailed configuration information for all of them. We provide configuration information for […]
Step-By-Step Guides Article created 2003-04-30 by Rainer Gerhards. Creating a simple Syslog Server In this scenario, a simple syslog server will be created. No other services are configured. The syslog server will operate as a standard syslog server on the default port of 514/UDP. All incoming data will be written to a single text file. […]
How To setup EventLogMonitor Service Article created 2003-02-24 by Rainer Gerhards. Last Updated 2005-08-16 by Timm Herget. Note: This guide was initially written for MW Agent, but the steps are the same in EventReporter. 1. First, right click on “Services”, then select “Add Service” and then “Event Log Monitor”: 2. Once you have done so, […]