RE: Event Viewer Monitoring Tool

2003-08-14 Thread Alastair Cook
Thanks everyone who replied to this, all very useful stuff!

I certainly plan to look at EventSentry and some of the other suggestions.

Alastair.

--- 
This email is confidential and intended solely for the use of the individual
to whom it is addressed. Any views or opinions presented are solely those of
the author and do not necessarily represent those of Alphameric Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you have received this
email in error please notify the sender.


---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread jm
GFI Security Event Log Monitor seems reasonably priced, and looks like
it will do what you want it to.

www.languard.com

-Original Message-
From: Alastair Cook [mailto:[EMAIL PROTECTED] 
Sent: 11 August 2003 11:20
To: [EMAIL PROTECTED]
Subject: Event Viewer Monitoring Tool

Has anyone got any suggestion for a reasonably priced (very) Event
Viewer
GF

I need it to basically look at the Event Viewer on 30 - 50 servers and
mail
me important or filtered events.

I realise that one can spend thousands on this sort of software with all
the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers
manually
everyday!

Many thanks, Al

--- 
This email is confidential and intended solely for the use of the
individual
to whom it is addressed. Any views or opinions presented are solely
those of
the author and do not necessarily represent those of Alphameric
Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you have received this
email in error please notify the sender.



---





---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread ezat

Hello Alastair

Im sure there are plenty of products out there that will perform what
you request.  On the other hand, if cost is a factor, then a vbs script
will do exactly what you require. Fetches application, security and system
eventlogs and can email it to you.

Heres the link.
http://www.secwiz.com/Default.aspx?tabid=39
(look to the bottom of the screen)

or
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/default.asp


Good luck

Regards,

Ezat




''''''''''''''''''''''''
Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.

I need it to basically look at the Event Viewer on 30 - 50 servers and
mail me important or filtered events.

I realise that one can spend thousands on this sort of software with
all the bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!

Many thanks, Al

--- 
This email is confidential and intended solely for the use of the individual
to whom it is addressed. Any views or opinions presented are solely those
of the author and do not necessarily represent those of Alphameric Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing,
 or copying of this email is strictly prohibited. If you have received
this email in error please notify the sender.


-
--
-
---




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427

---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread Meidinger Chris
Hi Alastair,

there are different methodologies to do this, but the basic one would be to
concentrate all of your logs (for example on a log server with ntsyslogd)
and then configure your syslog server to alert on specific events. 

At work what we did is wrote an application that dumps the event logs from
servers into a database which processes them to remove known uninteresting
events  (which cuts the log size by something like 95%) and then we manually
review the rest. 

SO answer is: think about your methodology, how do you want to do it, then
try to implement it - it can really be quite simple if you are willing to
take a day or two and write a database or set up an intelligent log server.

badenIT GmbH
System Support
 
Chris Meidinger
Tullastrasse 70
79108 Freiburg


-Original Message-
From: Alastair Cook [mailto:[EMAIL PROTECTED]
Sent: Monday, August 11, 2003 1:20 PM
To: [EMAIL PROTECTED]
Subject: Event Viewer Monitoring Tool


Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.

I need it to basically look at the Event Viewer on 30 - 50 servers and mail
me important or filtered events.

I realise that one can spend thousands on this sort of software with all the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!

Many thanks, Al

--- 
This email is confidential and intended solely for the use of the individual
to whom it is addressed. Any views or opinions presented are solely those of
the author and do not necessarily represent those of Alphameric Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you have received this
email in error please notify the sender.


---


---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread Freddie Soerensen
Al

You might want to take a look at EventSentry
(http://www.eventsentry.com)

They also have a free version with limited functionality but good for
testing

Freddie

"Perfection is achieved not when you have nothing more to add, but when
you have nothing left to take away."
 

> 
> -Original Message-
> From: Alastair Cook [mailto:[EMAIL PROTECTED] 
> Sent: Montag, 11. August 2003 13:20
> To: [EMAIL PROTECTED]
> 
> Has anyone got any suggestion for a reasonably priced (very) 
> Event Viewer monitoring tool.
> 
> I need it to basically look at the Event Viewer on 30 - 50 
> servers and mail me important or filtered events.
> 
> I realise that one can spend thousands on this sort of 
> software with all the bells and whistles, but I need to keep 
> it simple and cheap.
> 
> It's really to avoid the task of checking all individual 
> servers manually everyday!
> 
> Many thanks, Al
> 
> ---
> This email is confidential and intended solely for the use of 
> the individual to whom it is addressed. Any views or opinions 
> presented are solely those of the author and do not 
> necessarily represent those of Alphameric Hospitality.
> If you are not the intended recipient, be advised that you 
> received this email in error and that any use, dissemination, 
> forwarding, printing, or copying of this email is strictly 
> prohibited. If you have received this email in error please 
> notify the sender.
> 
> 
> --
> -
> --
> --
> 
> 

---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread Roland Venter
I've had some good results with a couple of VB scripts run as nightly tasks
to monitor event logs,
Details can be found here:
http://www.secwiz.com/Default.aspx?tabid=79

Did I mention they cost nothing,

Cheers,
Roland


  Security Wizards
  www.secwiz.com




-Original Message-
From: Alastair Cook [mailto:[EMAIL PROTECTED]
Sent: Monday, 11 August 2003 11:20 p.m.
To: [EMAIL PROTECTED]
Subject: Event Viewer Monitoring Tool


Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.

I need it to basically look at the Event Viewer on 30 - 50 servers and mail
me important or filtered events.

I realise that one can spend thousands on this sort of software with all the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!

Many thanks, Al

---
This email is confidential and intended solely for the use of the individual
to whom it is addressed. Any views or opinions presented are solely those of
the author and do not necessarily represent those of Alphameric Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you have received this
email in error please notify the sender.


---



---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread Seth Connolly
I use eventsentry, http://www.eventsentry.com/.  Very cheap filtering
solution.  I have it set up to email certain events to me and one "daily
summary" email from each server covering all events on that server.  It has
several notication options, such as smtp, syslog, odbc, xhtml, ascii
printer, net send, process (as in starting/stoping a process based on the
event), sound, etc.  In your situation it'll cost about $999 for 41-50
servers (about 20 bux a server).  It's small, non-intrusive, doesn't require
a restart to install, has a remote update feature...  They also have a quick
and helpful support staff.

I don't mean to sound like a salesman here, but this is a great (and cheap)
product.

Seth

-Original Message-
From: Alastair Cook [mailto:[EMAIL PROTECTED]
Sent: Monday, August 11, 2003 6:20 AM
To: [EMAIL PROTECTED]
Subject: Event Viewer Monitoring Tool


Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.

I need it to basically look at the Event Viewer on 30 - 50 servers and mail
me important or filtered events.

I realise that one can spend thousands on this sort of software with all the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!

Many thanks, Al





---




RE: Event Viewer Monitoring Tool

2003-08-14 Thread Damon McMahon
A recent article on SANS covered how to do this using only native and 
freeware tools:

http://www.sans.org/rr/win/event_logs3.php

From :  Alastair Cook <[EMAIL PROTECTED]>
To :  [EMAIL PROTECTED]
Subject :  Event Viewer Monitoring Tool
Date :  Mon, 11 Aug 2003 12:20:23 +0100
Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.
I need it to basically look at the Event Viewer on 30 - 50 servers and mail
me important or filtered events.
I realise that one can spend thousands on this sort of software with all 
the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!
Many thanks, Al
_
ninemsn Extra Storage is now available. Get larger attachments - 
send/receive up to 3MB attachments (up to three times more per e-mail). 
Click here  http://join.msn.com/

---



Event Viewer Monitoring Tool

2003-08-11 Thread Alastair Cook
Has anyone got any suggestion for a reasonably priced (very) Event Viewer
monitoring tool.

I need it to basically look at the Event Viewer on 30 - 50 servers and mail
me important or filtered events.

I realise that one can spend thousands on this sort of software with all the
bells and whistles, but I need to keep it simple and cheap.

It's really to avoid the task of checking all individual servers manually
everyday!

Many thanks, Al

--- 
This email is confidential and intended solely for the use of the individual
to whom it is addressed. Any views or opinions presented are solely those of
the author and do not necessarily represent those of Alphameric Hospitality.
If you are not the intended recipient, be advised that you received this
email in error and that any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited. If you have received this
email in error please notify the sender.


---