Re: Syslog and Windows
"David Corlette" <[email protected]>
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
Hi Bill, There's a product called Intersect Alliance - Snare which does this. We've had pretty good success with it. >>> On Fri, Jun 22, 2007 at 12:35 AM, in message <[email protected]>, "Bill Scherr IV" <[email protected]> wrote: > All... > > What do you suggest for sending windows logs to syslog > > B. > > On 18 Jun 2007, a message purporting to be from Chris Brenton appeared: > > Subject: Re: [logs] Facility 101 (was: Syslog and facilities) > From: Chris Brenton <[email protected]> > To: loganalysis <[email protected]> > Date sent: Mon, 18 Jun 2007 09:04:41 -0400 > >> The other problem is some of the facilities are a bit dated. For example >> there is a facility for FTP (11) but not HTTP. UUCP even has its own >> facility (8) but of course no one uses it anymore (I use it for my Windows >> stuff. Keeps it from getting mixed in with other log entries ;-) >> > > Bill Scherr IV, GSEC, GCIA > Principal Security Engineer > EWA Information and Infrastructure Technologies > [email protected] > [email protected] > 703-478-7608 > > _______________________________________________ > LogAnalysis mailing list > [email protected] > http://www.loganalysis.org/mailman/listinfo/loganalysis