Exporting or Searching Server Events

[BKGarry]

Has anyone every found a way of linking the event logs on a 2003 server to say an excel spreadsheets for an access database for ease of viewing and records of logon and logoff times. As our eventlogs have a stupid amount of records in them which takes ages to search through and even longer if you want to arange them in a different order.

 

Gaz

[ChrisH]

You can use syslog and have them all exported to a database so you can search them that way. I dont know specifics but I think Cybernerd has this kind of system running.

[plexer]

How about setting up a syslog server and installing a syslog daemon on the windows servers so that all your logs are in one place?

 

Several free syslog clients for windows available.

 

Ben

[SpuffMonkey]

I'm using EventComb - but desperately seeking something better - please let us know if you find something

[OutToLunch]

I had a play with Snare MicroServer / Snare Agent but the whole thing was a bit of a hammer to crack a nut effort when there's only me and 3 servers here! All free though if you want to give it a whirl...

 

http://www.intersectalliance.com/projects/SnareMicroServer/index.html

 

If you only want to manage/view the event logs on one server, Event Log Explorer provides a much better interface with more powerful filters than the standard windows viewer.

 

http://www.eventlogxp.com/

 

Again, free.

 

HTH