RE: [logs] sending flatfiles to the event log in windows.

From: Eric Fitzgerald (ericfat_private)
Date: Mon Apr 28 2003 - 17:09:32 PDT

  • Next message: Marcus J. Ranum: "RE: [logs] Severity classification and Snort events."

    For the application or system logs, you could write an application that
    requests change notification on the flat files, finds the delta, and
    then calls ReportEvent() to log the records to the event log.
    
    For Windows Server 2003, we have added functionality to write events to
    the security log.  Look up AuthzReportSecurityEvent() in MSDN.  The same
    change notification strategy applies.
    
    Eric
    
    
    -----Original Message-----
    From: Blaise St-Laurent [mailto:bstlaurentat_private] 
    Sent: Monday, April 28, 2003 10:18 AM
    To: loganalysisat_private
    
    
    I know this has already been asked once on the list, but i have a bit of
    a twist.
    
    i have a couple of applications that write flatfile logs whose name is
    the date they are written (for example 20030405.log) I need an
    application that can monitor the log directory for these files, and in
    real time, add them to one of the event logs OR send them to a syslog
    host. Either or, i don't really care, the idea being to get them to the
    syslog host eventually.
    
    I know i could write a perl script to do this, but these systems are
    fairly sensitive, and i'd rather not have perl installed on the
    machines.
    
    Any ideas?
    
    Thanks in advance,
    Blaise St-Laurent
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Mon Apr 28 2003 - 17:31:02 PDT