TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Kris,
Check out the "ruledef_win_n4.policy" located in the RealSecure 5.5
folder. You should find your answers there. Thanks!
__________________________________
Regards,
Sal Salvino
Security Officer
Technology Risk & Protection
Merrill Lynch Japan Securities
Technology Infrastructure Services
Tel: 03-3213-6766
Fax: 03-3213-6992
[EMAIL PROTECTED]
___________________________________
-----Original Message-----
From: Kristopher Czachor [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 30, 2001 2:53 AM
To: [EMAIL PROTECTED]
Subject: RS: Server Sensor custom event question
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Hello,
In Server Sensor I'm trying to come up with some user defined events. In
particular, OS Events/NT/User Defined Events/NT EventLog Rules. When I
create a new rule, RS is looking for Type:, Category:, and ID: fields. I
know which fields they correspond to in NT's EventLog, but I'm not able to
figure out what the values relate to? The ID: field I figured out, but what
do RS values of Type and Category pair with in NT's EventLog? RS uses
integer values whereas NT values are reported as strings. Anyone know?
Thanks in advance,
Kris
