1
vote
3answers
2k views

Query specific logs from event log using nxlog

Below is my nxlog configuration define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log ...
1
vote
3answers
2k views

Security Log in Event Viewer does not store IPs

I'd like to write a service that pulls Event Viewer records, specifically from the Security log. Of particular interest to me are things like event id 4625 (audit fail) messages. Ideally I'd like ...
0
votes
1answer
385 views

How to change logging details in W2008R2?

Is there a way to change what OS is logging in the Event Log? For example I see "The system time has changed" events in numbers but I dont want them (I have time sync every too often and it is ...
0
votes
2answers
246 views

How can I prevent cron from filling up my root partition?

I'm using cron tasks every 3 mins, the result is logged in my cron.log. Also after executing (wget) certain php file, it's name (with 0 bytes filesize) is copied to root, spaming it - see the figure ...
0
votes
1answer
312 views

Disable auditing of logon type 3 events

I have an older 2003 server that hosts an in house application running on IIS with windows authentication. Is there a ready way to disable auditing only for the logon type 3 (network logon)? This ...
0
votes
3answers
94 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
2
votes
2answers
452 views

Catch Windows system log events to a text file

I need to capture w32time events to a text file for a silly compliance requirement. Is there a way to that in Windows?
3
votes
2answers
1k views

Piping powershell messages to Write-EventLog

I have a powershell script that runs a custom cmdlet. It is run by Task Scheduler and I want to log what it does. This is my current crude version: Add-PsSnapIn MyCmdlets Write-EventLog -LogName ...
3
votes
2answers
351 views

Novell Netware 6.5 Server Logs

I have inherited a Novell Netware 6.5 server to manage. We had have some users move folders into other folders that they were not supposed to be able to do. Additionally, there have been cases were ...
1
vote
1answer
3k views

Does IIS have a log?

I have a secure web site but I did not configure permissions to let the IIS worker process access the respective machine certificate's private key. Naturally, navigation to the site does not work. I ...
0
votes
1answer
2k views

How am I able to figure out why apache/php crashes?

I have a problem which is driving me and a few clients on this server totally nuts. The problem is that PHP (or I guess Apache) seems to be crashing randomly and almost on a daily basis. The ...
2
votes
5answers
4k views

What is the best tool for to capturing Windows Event Logs centrally?

We have a collection of about 100 Windows 2003 and Windows 2008 R2 domain controllers that I would like to start capturing Event Log data from. Many of the servers are very busy and generate large ...
2
votes
2answers
905 views

How to control/check CheckPoint rules changes (and another System events)

I need to check/control all system events on many CheckPoint FW1 - don't misunderstand - not rules triggering, but events such admins log on, rules changes and etc. I found out that I can make an log ...
1
vote
2answers
58 views

Where can I find a list of the Windows EventCodes and their definitions?

It's fallen to me recently to sift through Windows logs and do some analysis on them. To start, I'm trying to get familiar with the EventCodes, but I've not had much success finding any comprehensive ...
3
votes
2answers
543 views

Open source scripting log analysis: tools for breaking stderr log messages into groups (normal bugs vs abnormal) or looking at trends (we're getting less of this message and more of that one)

Imagine some linux systems with scripts of various kinds (mostly PERL but it could be anything that writes to STDERR) which are run 100s of times by different users with slightly different needs. ...
1
vote
8answers
7k views

In windows XP, can i log user login/logoff and lock/unlock actions

Let me preface by saying I am extremely forgetful. I would like to have a log when I login, logout, lock and unlock my workstation. (in my case so i can track the nunmber of hours i spend at the PC) ...
2
votes
8answers
12k views

How to track down the cause of Windows Server 2008 crashing?

I have Windows Server 2008 running under VMware. Recently, its started to crash roughly every day, with continuous 100% CPU utilization, and no response in the GUI. Is there a step-by-step ...
4
votes
5answers
494 views

Logs worth to keep and analyze in a central repository

In the need to centralize logs we have selected syslog as the collector and Splunk (free for now) as the analysis tool, but there's always the question about which events should get to the central ...