Honeypots mailing list archives
Re: centralizing logs
From: "SecurIT Informatique Inc." <securit () iquebec com>
Date: Thu, 11 Mar 2004 13:47:57 -0500
You don't mention which OS you use, so if you're using some flavor of Windows, you could take a look at LogAgent/LogIDS at http://securit.iquebec.com.
LogAgent Open Source is exactly a log centralisation agent, while LogIDS can be used to analyze and display them. I am currently working on a new console design that should also be available in a couple of weeks from now.
It won't put your logs into a database, but it can be used to streamline your logs together (ie, make sure they are all comma-delimited), it will convert them in ASCII in the case of the Event Viewer, and from there it can easily be imported in any DB software or into a spreadsheet.
Hope this helps. Adam Richard SécurIT Informatique Inc. At 07:44 AM 11/03/2004, dcneting wrote:
is there any tool(open source/commercial) that can be use to centralized every log into 1 database? Im using a lot of tools here like ethereal, tcpdump,snort..bla bla bla...so, it is hard for me to see the log one by one... _____________________________________________________________________ Un mot doux à envoyer? Une sortie ciné à organiser? Faites le en temps réel avec MSN Messenger! C'est gratuit! http://ifrance.com/_reloc/m
Current thread:
- centralizing logs dcneting (Mar 11)
- [Spam Quarantined]Re: centralizing logs Roger A. Grimes (Mar 11)
- Re: centralizing logs SecurIT Informatique Inc. (Mar 11)
- RE: centralizing logs Aditya, ALD [Aditya Lalit Deshmukh] (Mar 12)
- Re: centralizing logs Michael Boman (Mar 13)
- <Possible follow-ups>
- RE: centralizing logs Polazzo Justin (Mar 15)