Re: [logs] Retrieving logs from Windows server

From: Daniele Muscetta (muscetta@private)
Date: Thu Jan 27 2005 - 12:17:38 PST


On Tue, 25 Jan 2005 20:03:53 -0800 (PST), Walter <walter_100@private> wrote:
> Another question, on the same lines any way to retrive
> Microsoft Exchange logs?

Exchange writes most events in the Application Event log as well - so
all the same suggestions you got earlier  for the Operating System
also apply to Exchange....

What is not in the event log but on files is *just* the message
tracking log. Which can be interesting for security analysis, but it
adds a lot of volume, as you can understand....
MOM collects information in the tracking.log by parsing it with a
VBScript and extracting the interesting (for its purposes) bits, for
example...

Best,

Daniele
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis



This archive was generated by hypermail 2.1.3 : Thu Jan 27 2005 - 14:12:50 PST