|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
RE: log analyser |  |
- To: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
- Subject: RE: log analyser
- From: "John Lightfoot" <[EMAIL PROTECTED]>
- Date: Mon, 1 Jun 2009 15:30:12 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:references :in-reply-to:subject:date:message-id:mime-version:content-type :content-transfer-encoding:x-mailer:thread-index:content-language; bh=ySi/Pz1Nz0Ijf4gD5lLlF2voTbOYsUf3w3M2mMexKJs=; b=A80Tjxqh+YX0MHnmG1JWS0OR5DsbbMY5QpoMvrXU/uBWdvWOe47h4kBsV/byzzLwkr w3fl8Xmi0WRqNikC3T0O7gODDqFHxTl0QYRoB+F2gJf5a1+eCDYJlVIYVwkAGW+uyTJs Di2/Ap/Y/FHuMzU2v8JMmWtFHitn9sFZiE1fo=
- In-reply-to: <[EMAIL PROTECTED]>
- References: <[EMAIL PROTECTED]>
- Thread-index: Acni1ClDCo73bTNRSWS4rJ76ECTu2QAGvBEQ
 |
| |
For Windows, log parser is a great analysis tool, although it's not really
designed for real-time monitoring.
http://www.microsoft.com/DownLoads/details.aspx?FamilyID=890cd06b-abf8-4c25-
91b2-f8d975cf8c07&displaylang=en
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of [EMAIL PROTECTED]
Sent: Thursday, May 28, 2009 7:26 PM
To: [EMAIL PROTECTED]
Subject: log analyser
Hi,
can someone of you recommend a good enterprise log analyser solution? i have
to collect, corrolate and analyse about 1200 windows machines and 200 linux
boxes. i want to do this in real-time, trigger actions (like email
notification), make sense out of e.g. ten failed login attempts following
the one successful etc.
any hint would be helpful
thanks
andy
------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute
Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both
Instructor-Led and Online formats is the most concentrated exam prep
available. Comprehensive course materials and an expert instructor means you
pass the exam. Gain a laser like insight into what is covered on the exam,
with zero fluff!
http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute
Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff!
http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------
| |