[logs] "Temperproof" logfiles?

Previous message: Nathan K: "Re: [logs] RE: Windows Event Log Attack Signatures"
Next in thread: Chris Lonvick: "Re: [logs] &quot;Temperproof&quot; logfiles?"
Reply: Chris Lonvick: "Re: [logs] &quot;Temperproof&quot; logfiles?"
Reply: Blaise St-Laurent: "Re: [logs] &quot;Temperproof&quot; logfiles?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

michael.bomanat_private

Hi all,

I am looking for a syslog (the old, udp one) software that makes sure that
the integrity of the logs has not been modified since they was recived. I
have looked at mSyslog, but the problem with that one is that I find it
unstable and it totally locks up if one of the output modules doesn't
work (we  want the logs in a database for ease of searching as well as
normal file for long-time storage). Syslog-ng seems to do what we want
for the database part, but how about making sure that the logfiles was
not subsequently changed after they were recived?

Does anyone know any software that does this?

Best regards
 Michael Boman

-- 
Michael Boman
Security Architect, SecureCiRT Pte Ltd
http://www.securecirt.com