[logs] Syslog and Windows

[Bill Scherr IV]

All...

   What do you suggest for sending windows logs to syslog

B.

On 18 Jun 2007, a message purporting to be from Chris Brenton appeared:

Subject:        	Re: [logs] Facility 101 (was: Syslog and facilities)
From:           	Chris Brenton <cbrenton at chrisbrenton.org>
To:             	loganalysis <loganalysis at loganalysis.org>
Date sent:      	Mon, 18 Jun 2007 09:04:41 -0400

> The other problem is some of the facilities are a bit dated. For example
> there is a facility for FTP (11) but not HTTP. UUCP even has its own
> facility (8) but of course no one uses it anymore (I use it for my Windows
> stuff. Keeps it from getting mixed in with other log entries ;-)
> 

Bill Scherr IV, GSEC, GCIA
Principal Security Engineer
EWA Information and Infrastructure Technologies
bscherr at iit-tek.com
bscherr at ewa.com
703-478-7608