You don't mention which OS you use, so if you're using some flavor of
Windows, you could take a look at LogAgent/LogIDS at
http://securit.iquebec.com.
LogAgent Open Source is exactly a log centralisation agent, while LogIDS
can be used to analyze and display them. I am currently working on a new
console design that should also be available in a couple of weeks from now.
It won't put your logs into a database, but it can be used to streamline
your logs together (ie, make sure they are all comma-delimited), it will
convert them in ASCII in the case of the Event Viewer, and from there it
can easily be imported in any DB software or into a spreadsheet.
Hope this helps.
Adam Richard
SécurIT Informatique Inc.
At 07:44 AM 11/03/2004, dcneting wrote:
>is there any tool(open source/commercial) that can be use to centralized
>every log into 1 database? Im using a lot of tools here like ethereal,
>tcpdump,snort..bla bla bla...so, it is hard for me to see the log one by
>one...
>
>
>
>
>_____________________________________________________________________
>Un mot doux à envoyer? Une sortie ciné à organiser? Faites le en temps
>réel avec MSN Messenger! C'est gratuit! http://ifrance.com/_reloc/m
Received on Mar 11 2004