It's really quite easy to run a little powershell or vbscript on each server and have it forward those on a daily basis to a consolidation server.
If you need'em realtime, you'll need to use a C or C# program running as a service. I've done that too, it's less than a 100 lines of C# to do. Regards, Michael B. Smith MCITP:EM/MCSE/Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: Buchenauer Christian [mailto:[EMAIL PROTECTED] Sent: Thursday, July 10, 2008 8:13 AM To: NT System Admin Issues Subject: SAS70: how to collect EventLog entries Hi List We need to get our network SAS70 compliant and are looking for a solution to collect our EventLog entries. There are two data centers with about 50 W2K3 Servers in each location. A Google Search returns mostly PR stuff about Event log monitoring tools so I would like to ask you guys and girls about how you did it. We have no MOM/SCE yet but use Nagios and SysLog to collect/display some information. Any pointers to some guides or do's and dont's would be much appreciated. Thanks Chris ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
