Re: Eventlog to syslog

Andrew Hay wrote:

> 6) Its an MS-standard
> 
> Honestly, is that a bad thing? So what if it's a Microsoft standard, a Cisco
> standard, or a some other standard as long as it's implemented correctly.

Honestly, that's a really bad thing.  If you don't have cross-vendor
event management you don't have visibility into your whole network.
Remember, someone you work with gets the cal at 3AM when the Cisco
switches take out the Win2008 Server farm, doesn't matter who's logo
is on the front of the box that was too proud/arrogant/close-minded
to send an event to the NOC...  This doesn't even require standards
or open source.  If it was "Microsoft Windows Server 2008 with
demonstrated Cisco logging" or some such combination, that would
address, in some sense, the requirement for cross-vendor event
management.  Insert your fav vendor names, doesn't have to be MS
and Cisco.