Yearly Archives: 2014

17Jan/14

LOG Analysis

[su_table]
Input . Unix syslog
. windows event -> syslog using snare
http://www.syslog.org/logged/logging-windows-events-to-syslog-using-snare/
. network syslog
Processing . syslog-ng on cygwin
http://www.syslog.org/logged/running-syslog-ng-on-windows/
. simple event correlator (SEC) http://simple-evcorr.sourceforge.net
Using perl on cygwin
.logstash for analysis
Output . SMTP to SMS gateway
Retention . 30days on processing server.
. 2 years on customer central syslog server.
[/su_table]