Re: Event Logs

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/29/05

  • Next message: Julian Dragut: "Re: Users should not shutdown or restart servers"
    Date: Sat, 29 Jan 2005 14:19:28 -0600
    
    

    I have not tried Ntlast myself but have used PdLogList, though I have never
    imported into a spread*** or such. I bet that Ntlast would work for
    W2K/W2003. I suggest you test each one out to see if they suit your needs or
    not. I wish I could give more advice but have not used it that
    extensively. --- Steve

    "K.V" <KV@discussions.microsoft.com> wrote in message
    news:B76D26B2-327F-49E0-B28E-70A9C5851617@microsoft.com...
    > Thanks Steven, i read about the tools. The first one from foundstone says
    > its
    > for windows NT and IIS. Will it work with Windows 2000 server logs and
    > Windows server 2003 logs ?
    >
    > Also, how can we know what data the event log contains ? Like for example
    > when i were to use dumpel to export the event logs to database, th enumber
    > of
    > columns coming were not consistent all the time.
    >
    > So i thought i should start at the root. First knowing what data the event
    > log contains? Like for example there might be a standard like for a any
    > give
    > event the event log contains "X" pieces of data!.
    >
    > Thanks
    > K.V
    >
    > "Steven L Umbach" wrote:
    >
    >> A couple come to mind. Ntlast from Foundstone and PsLogList from
    >> SysInternals as shown in the links below.. --- Steve
    >>
    >> http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/ntlast.htm
    >> http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml
    >>
    >> "K.V" <KV@discussions.microsoft.com> wrote in message
    >> news:F222B4CC-2186-48F7-8304-2DD0C4F26BAB@microsoft.com...
    >> > Can someone suggest a good tool i can use to dump event (especially
    >> > security)
    >> > log information from our DC (only one at this time) to a file (text,
    >> > csv,
    >> > etc..) so i can import that information in to a Database.
    >> >
    >> > Thanks
    >> > K.V
    >>
    >>
    >>


  • Next message: Julian Dragut: "Re: Users should not shutdown or restart servers"