Re: Windows Event Logs

From: Steve (steve@frij.com.au)
Date: 03/06/02


From: "Steve" <steve@frij.com.au>
To: <security-basics@securityfocus.com>
Date: Wed, 6 Mar 2002 10:29:02 +1100

I guess this doesnt answer your question,

but it is definitely possible to look at the logs from another machine,
provided you have access, but you probably already know that so I won't
bother.

The other way is to use a security management tool such as Huntsman (Tier-3)
so you can collect all sorts of logs into one central database.
regards

Karma

----- Original Message -----
From: "Dave Mee" <davemee@hotmail.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, March 06, 2002 3:09 AM
Subject: Windows Event Logs

> Can anyone tell me if it's possible to have the event logs in either
Windows
> NT or Windows 2000 log to another machine. What I'm looking at is setting
> up some machines and when someone logs on or accesses a file I want the
> event to not log on that paticular machine, but to another one that is
> locked up.
>
> Thanks in advance for your help.
>
> dave
>
>
>
> _________________________________________________________________
> Send and receive Hotmail on your mobile device: http://mobile.msn.com
>
>
>



Relevant Pages

  • Re: Error 0x8000ffff occurred during full-text index population
    ... Do the SQL logs report any more information, or the Windows Event Logs? ... and I have noticed that the following error message ...
    (microsoft.public.sqlserver.fulltext)
  • Re: what would be other reasons not to audit success account logon?
    ... you're right that if you do log most successful login and file ... > accesses, your logs will get so large and bulky that it may be difficult ... > detect intrusions and preserve and work with the logs. ... > you would never see the final successful login if you were not logging it. ...
    (microsoft.public.win2000.security)
  • Re: what would be other reasons not to audit success account logon?
    ... you're right that if you do log most successful login and file ... accesses, your logs will get so large and bulky that it may be difficult to ... detect intrusions and preserve and work with the logs. ... you would never see the final successful login if you were not logging it. ...
    (microsoft.public.win2000.security)
  • Re: What is causing event message "Firewall has stopped responding
    ... There are no log entries within 5 mins of the message in any of the logs. ... Damn infuriating that MS doesnt even bother to provide the most basic info ... I tripped across a KB that indicated it MIGHT be due to high CPU causing ... The article doesnt have any keywords matching the event message or error. ...
    (microsoft.public.isaserver)
  • Re: question about security logs
    ... >I check auth.log daily, and the accesses for some programs, but I read ... >some articles that say that there are logs that must be checked ... - Richard Bach ...
    (Security-Basics)