[logs] Eventlog to syslog

tbird at precision-guesswork.com tbird at precision-guesswork.com
Fri Feb 29 11:27:23 PST 2008


Quoting Marcelo de Souza <marcelo at marcelosouza.com>:

>   Which tool do you really recommend for windows eventlog to unix
> syslog translation?
>
>   I've been thinking about Snare, but I'd like to hear your opinion.
>
>   Thanks in advance.

okay vendors and developers, here's your chance ;-) please be sure to  
include technical details about your offerings. i may relax my  
vendor-moderation-bar a bit, but the most helpful posts will be the  
ones that give useful technical info about your architecture, the  
kinds of rules processing you allow (if you have that functionality),  
and any other bells and whistles that make your gizmo the best way to  
simplify monitoring windows systems.

pure marketing hype will be rejected, as per normal.

marcelo, giving us more information about the types of windows systems  
you want to monitor would be helpful for us to figure out which kinds  
of tools are best. servers? desktops? the applications you depend on?  
many windows applications -- even those included in the operating  
system itself -- log to text files, not to the event log, so you may  
have more to work with than you expect. more detail is always a good  
thing.

cheers -- tbird



More information about the LogAnalysis mailing list