Syslogging & Windows

[sebbs]

I know I can probably google it...But anyone setup sending windows event logs to a linux syslog server?


thanks for the help.

[kevrok]

yes. i've used a couple of different programs, but the one i am settling on is NTSyslog. it works well on both windows 200 server and windows 2003.

[sebbs]

i will have to check that out.

thanks.

[warnesj]

I'm using winlogd, but I might want to check out NTSyslog because every once in a while winlogd just stops sending certain events. Don't ask me why, especially when other events come through.

[crackrocksteady]

I have used both and NTsyslog has winlogd pretty beat.

I like the fact you can filter out success audits and other common messages.


Fletch

[cigamit]

I currently use NTSyslog. Its simple to install as a service (-install) and you can even say push the "what to log" settings out via Group Policy if you like (I just use a reg file currently). I have created a Auto-script type installer that uses psexec, and it works quite well for remotely pushing it out. Maybe I will create the GPO and the MSI for it later.