[logs] Eventlog to syslog

[Mark Bagley]

On Mar 3, 2008, at 11:08 AM, Patrick Hull wrote:

> I agree Tina.  My background is UNIX, and I am currently building a  
> syslog-based
> logging/monitoring infrastructure for my company, and struggling  
> with the MS
> event log (and other MS logs) issue.  We are currently evaluating  
> Snare and
> Splunk to see what it can do for us.  We are also using a combination
> of syslog-ng,
> stunnel, SEC, and some other perl scripts.
>

Patrick -

Coincidentally, I was just about to let the list know that Splunk 3.2  
has been released with support for Windows today for the first time.   
Splunk is capable of capturing Windows Event Log streams natively,  
allowing you to access that data in the same way you would with any  
other data inside Splunk.

Given that this is our first Windows release, we're keen to get your  
feedback as well as the feedback of list-at-large. Questions and  
comments are greatly appreciated, especially surrounding Windows.

Best,
Mark
---
Mark Bagley | Senior Product Manager | Splunk> | +1 415 848 8480