
Yearly Archives: 2014
LOG Analysis
[su_table]
[/su_table]
| Input | . Unix syslog . windows event -> syslog using snare http://www.syslog.org/logged/logging-windows-events-to-syslog-using-snare/ . network syslog |
| Processing | . syslog-ng on cygwin http://www.syslog.org/logged/running-syslog-ng-on-windows/ . simple event correlator (SEC) http://simple-evcorr.sourceforge.net Using perl on cygwin .logstash for analysis |
| Output | . SMTP to SMS gateway |
| Retention | . 30days on processing server. . 2 years on customer central syslog server. |
