The logevent utility logs to one of the system eventlog files. the /f option is basically a free text field that will get logged to the event log, but it is normally used to contain the name of the policy that triggered the alert.
See the System Scanner Users Guide Page 53 Ross Wakelin Principal Technical Consultant Gen-i Limited A Level 1, Charles Luney House, 250 Oxford Terrace, Christchurch, New Zealand T +64 3 353 0800 F +64 3 379 5678 M +64 275 334 380 E [EMAIL PROTECTED] W www.gen-i.co.nz -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of dawne Sent: Friday, April 15, 2005 5:42 PM To: [email protected] Subject: [ISSForum] problem with system scanner log file hey there! using system scanner 4.2.5 console and 4.2 agents. When I do a scheduled scan, I want to log a message on a specified computer. this is the command i used : logevent /i I /d com1 /f "$file" /m "scheduled scan started" tried to change "$file" to a local directory "D:\...." because at first i assumed that the file will automatically be logged in the console log file, however it was not. Anyway, no log was logged in the D:\..... directory either! why so? thanks! Yahoo! Messenger - Log on with your mobile phone! _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. ############################################################################ ################################## This e-mail message has been scanned for Viruses and Content and cleared by NetIQ MailMarshal at Gen-i Limited ############################################################################ ################################## ############################################################################# This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank You. Please note that this communication does not designate an information system for the purposes of the NZ Electronic Transactions Act 2002. This email was scanned and cleared by NetIQ MailMarshal at Gen-i Limited. ############################################################################# _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
