Re: Eventlog to syslog

"Daniel Cid" <[email protected]> Fri, 29 Feb 2008 16:33:19 -0400
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
Hi Marcelo,

I would also add OSSEC ( http://www.ossec.net ). You can use it to
forward your Windows eventlog (plus IIS, anti virus and many other log
files) to any Unix system
running ossec. It does not uses syslog, since it encrypts/compresses
the logs while in transit, but you get them in clear-text on the other
end...

Hope it helps.

*oh, I am the author of ossec, so my opinion is always biased :)


--
Daniel B. Cid
dcid ( at ) ossec.net


On 2/29/08, Anton Chuvakin <[email protected]> wrote:
> Snare, Project LASSO (http://sourceforge.net/projects/lassolog), DAD
>  (http://sourceforge.net/projects/lassie), ntsyslog (whereve), what
>  else is out there?
>
>
>  On Fri, Feb 29, 2008 at 4:59 AM, Marcelo de Souza
>  <[email protected]> wrote:
>  > Loganalysis folks,
>  >
>  >   Which tool do you really recommend for windows eventlog to unix
>  >  syslog translation?
>  >
>  >   I've been thinking about Snare, but I'd like to hear your opinion.
>  >
>  >   Thanks in advance.
>  >
>  >  --
>  >  Marcelo de Souza
>  >  _______________________________________________
>  >  LogAnalysis mailing list
>  >  [email protected]
>  >  http://www.loganalysis.org/mailman/listinfo/loganalysis
>  >
>
>
>
>
> --
>  Anton Chuvakin, Ph.D., GCIA, GCIH, GCFA
>       http://www.chuvakin.org
>   http://chuvakin.blogspot.com
>     http://www.info-secure.org
>
> _______________________________________________
>  LogAnalysis mailing list
>  [email protected]
>  http://www.loganalysis.org/mailman/listinfo/loganalysis
>