RE: Event Viewer Monitoring Tool
Thanks everyone who replied to this, all very useful stuff! I certainly plan to look at EventSentry and some of the other suggestions. Alastair. --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. ---
RE: Event Viewer Monitoring Tool
GFI Security Event Log Monitor seems reasonably priced, and looks like it will do what you want it to. www.languard.com -Original Message- From: Alastair Cook [mailto:[EMAIL PROTECTED] Sent: 11 August 2003 11:20 To: [EMAIL PROTECTED] Subject: Event Viewer Monitoring Tool Has anyone got any suggestion for a reasonably priced (very) Event Viewer GF I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. --- ---
RE: Event Viewer Monitoring Tool
Hello Alastair Im sure there are plenty of products out there that will perform what you request. On the other hand, if cost is a factor, then a vbs script will do exactly what you require. Fetches application, security and system eventlogs and can email it to you. Heres the link. http://www.secwiz.com/Default.aspx?tabid=39 (look to the bottom of the screen) or http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/default.asp Good luck Regards, Ezat '''''''''''''''''''''''' Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. - -- - --- Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Free, ultra-private instant messaging with Hush Messenger https://www.hushmail.com/services.php?subloc=messenger&l=434 Promote security and make money with the Hushmail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427 ---
RE: Event Viewer Monitoring Tool
Hi Alastair, there are different methodologies to do this, but the basic one would be to concentrate all of your logs (for example on a log server with ntsyslogd) and then configure your syslog server to alert on specific events. At work what we did is wrote an application that dumps the event logs from servers into a database which processes them to remove known uninteresting events (which cuts the log size by something like 95%) and then we manually review the rest. SO answer is: think about your methodology, how do you want to do it, then try to implement it - it can really be quite simple if you are willing to take a day or two and write a database or set up an intelligent log server. badenIT GmbH System Support Chris Meidinger Tullastrasse 70 79108 Freiburg -Original Message- From: Alastair Cook [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 1:20 PM To: [EMAIL PROTECTED] Subject: Event Viewer Monitoring Tool Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. --- ---
RE: Event Viewer Monitoring Tool
Al You might want to take a look at EventSentry (http://www.eventsentry.com) They also have a free version with limited functionality but good for testing Freddie "Perfection is achieved not when you have nothing more to add, but when you have nothing left to take away." > > -Original Message- > From: Alastair Cook [mailto:[EMAIL PROTECTED] > Sent: Montag, 11. August 2003 13:20 > To: [EMAIL PROTECTED] > > Has anyone got any suggestion for a reasonably priced (very) > Event Viewer monitoring tool. > > I need it to basically look at the Event Viewer on 30 - 50 > servers and mail me important or filtered events. > > I realise that one can spend thousands on this sort of > software with all the bells and whistles, but I need to keep > it simple and cheap. > > It's really to avoid the task of checking all individual > servers manually everyday! > > Many thanks, Al > > --- > This email is confidential and intended solely for the use of > the individual to whom it is addressed. Any views or opinions > presented are solely those of the author and do not > necessarily represent those of Alphameric Hospitality. > If you are not the intended recipient, be advised that you > received this email in error and that any use, dissemination, > forwarding, printing, or copying of this email is strictly > prohibited. If you have received this email in error please > notify the sender. > > > -- > - > -- > -- > > ---
RE: Event Viewer Monitoring Tool
I've had some good results with a couple of VB scripts run as nightly tasks to monitor event logs, Details can be found here: http://www.secwiz.com/Default.aspx?tabid=79 Did I mention they cost nothing, Cheers, Roland Security Wizards www.secwiz.com -Original Message- From: Alastair Cook [mailto:[EMAIL PROTECTED] Sent: Monday, 11 August 2003 11:20 p.m. To: [EMAIL PROTECTED] Subject: Event Viewer Monitoring Tool Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. --- ---
RE: Event Viewer Monitoring Tool
I use eventsentry, http://www.eventsentry.com/. Very cheap filtering solution. I have it set up to email certain events to me and one "daily summary" email from each server covering all events on that server. It has several notication options, such as smtp, syslog, odbc, xhtml, ascii printer, net send, process (as in starting/stoping a process based on the event), sound, etc. In your situation it'll cost about $999 for 41-50 servers (about 20 bux a server). It's small, non-intrusive, doesn't require a restart to install, has a remote update feature... They also have a quick and helpful support staff. I don't mean to sound like a salesman here, but this is a great (and cheap) product. Seth -Original Message- From: Alastair Cook [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2003 6:20 AM To: [EMAIL PROTECTED] Subject: Event Viewer Monitoring Tool Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al ---
RE: Event Viewer Monitoring Tool
A recent article on SANS covered how to do this using only native and freeware tools: http://www.sans.org/rr/win/event_logs3.php From : Alastair Cook <[EMAIL PROTECTED]> To : [EMAIL PROTECTED] Subject : Event Viewer Monitoring Tool Date : Mon, 11 Aug 2003 12:20:23 +0100 Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al _ ninemsn Extra Storage is now available. Get larger attachments - send/receive up to 3MB attachments (up to three times more per e-mail). Click here http://join.msn.com/ ---
Event Viewer Monitoring Tool
Has anyone got any suggestion for a reasonably priced (very) Event Viewer monitoring tool. I need it to basically look at the Event Viewer on 30 - 50 servers and mail me important or filtered events. I realise that one can spend thousands on this sort of software with all the bells and whistles, but I need to keep it simple and cheap. It's really to avoid the task of checking all individual servers manually everyday! Many thanks, Al --- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Alphameric Hospitality. If you are not the intended recipient, be advised that you received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. ---