Re: [logs] To integrate Windows 2003 servers with our central sysloginfrastructure

From: Adrian Grigorof (adrian@private)
Date: Thu Jan 06 2005 - 11:20:17 PST

I would say that you looked at the right product. I've been using the
EventReporter syslog agent for years without any problems. Personally, I
wouldn't mix the web servers logs with the syslog ones, especially if the
web log file are large. You can configure some scripts to ftp the web logs
to the central logging server. However, if your really want to, I guess you
can push them to the syslog server using the MonitorWare agent or by
scripting some syslog forwarder utilities. How do you plan to analyze the
centralized logs?


Adrian Grigorof

----- Original Message ----- 
From: "Joe Singe" <managingrisk@private>
To: <loganalysis@private>
Sent: Thursday, January 06, 2005 11:25 AM
Subject: [logs] To integrate Windows 2003 servers with our central

> Hello,
> We have been running a central logging server that gets logs from all
> our servers in the infrastructure. It's all syslog based and we were a
> purely UNIX environment. Till now, that is. Now we are adding Windows
> 2003 servers that will host some of our new apps.
> Since Windows 2003 does not have syslog, I wanted to get your opinion
> on what would be the best way to integrate these servers and apps with
> a UNIX-based central logging server.
> I have looked at the products that Monitorware
> has to offer.
> Basically what I want to do is get the following logs over to the
> central logging server:
> Windows 2003 logs
> Web server logs (Apache for Windows)
> Application specific logs (written in text format)
> Thanks in advance for your time.
> Joe.
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis@private

LogAnalysis mailing list

This archive was generated by hypermail 2.1.3 : Thu Jan 06 2005 - 11:33:22 PST