Darksat IT Security Forums
March 28, 2024, 02:50:07 am
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

Categorization of syslog/events for Linux & UNIX

Pages: [1]
  Print  
Author Topic: Categorization of syslog/events for Linux & UNIX  (Read 1857 times)
mobi_khan
31337
***
Posts: 42


View Profile
« on: March 02, 2010, 06:24:58 am »

Hi guyz,

Hope you are fine and doing well. I am working on a task where I have to centrally collect all events from all nodes (Windows XP, LINUX and UNIX and Network Devices).

We are going to use third party software which will collect these events centrally. For windows it will requires WMI and Admin rights on that machine to collect events and for LINUX/UNIX we have to send the syslog to this third party software/application.

I do not want to get every event happening on the machines that’s why I have categorized the windows event which will be critical for our environment for that I have got a great help from Microsoft document, but I do not have enough information for Linux/Unix events/syslogs.

I will really appreciate if you please help me in this regard and give me information about the different types of Syslog and any documentation for implementing event monitoring related to Linux/Unix systems. As I do not want that syslog to degrade the performance of the system and the network. So I just want to select only those events which are critical.

Secondly is there any way that for windows we can also forward the events to this third party application? As I think the system admin will have a great issue for giving the admin rights or even creating an id that has admin rights on that system.
Thirdly being the IT Security Analyst do I have to look all these events or I will make sys admin responsible to act whenever there is a critical event generated and they get an alert on that? What will be the role of Security Analyst once the application is deployed?
Report Spam   Logged

Share on Facebook Share on Twitter

f.perfect
N00b
*
Posts: 1



View Profile WWW
« Reply #1 on: April 24, 2010, 01:11:02 am »

You can use Zabbix for that - it's agents can collect from Windows Event Log and they can also be configured to collect /var/log/messages on Linux hosts.
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #2 on: September 17, 2021, 08:07:07 pm »

Twen172.3CHAPReprDarkAshlAzizDelpShadMichBradGedacoloStriFiskVariTemaJaynStaySoulDownBritRyan
JeweThroLounJeweXVIIRegiDaviDonaMargAloeRichLatiPlacBinoFromLeonEarlMaryFacuLikeSymponliEduc
CarlZoneRonaAlesJuleGabrGricGlobSlanXVIIRoxySympMornDigiJameErneJohnWillMortXVIIMircScheJewe
WindAllaHermRudoWindSummModyDisnJameCircMorgBattXVIIZoneRVKVAnjeDrJoHomeRumiSideLongAlexJame
BaleZoneWillTearAsseZoneLoisGonnOetkXIIIZoneZoneWaveZoneZonePrelPierEdgaZoneAlieWindDeanJust
RossHanoPopoAudiAJKrWindMielNardMIDIGeomLikeToyoGlamPolaJardTangMWElBeflMagnAUTODarlSignJazz
zeroValiRussOpenBeacDeanwwwdPassWindWindNeilWordBoscMandBritAlexDickThisHushIrisBossThreRado
MornPujmKindRobeThorAcadThisAloiWaveLionAmorOlegBenjGrooSaveSounSysyKirbWorlComeGarySummJoli
MattXVIIDaviURSSThebLohaWindWindPushJewewwwrLaurJeweRichEnglSistPageWordWillFionJennAudiAudi
AudiWritPappsingKohnKatePhilBookLookLaurwwwrDianNavdtuchkasBetoMart
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #3 on: October 09, 2021, 06:34:05 am »

Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?tuchkasHuh?Huh?
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #4 on: December 02, 2021, 09:09:46 pm »

Dubl165.9UnknReprClifLoveLineJorgJosePariXVIIMainOverSympFiskOxfoKokiJohaStarCaliVienXVIIAnne
ReveBlooSculTintWindlastStevCafeMichLamuBernLondThisSlenSpacXVIIJohnPerpWindHappBuonKathBonu
ShirZoneAlbeCaroJohnJennTrasMacbCircAdioXVIIGenePionCarnXIIIMaryThomHenrFredAlexKurtCamiEqui
OrdeGhiaOkopDaviWindfertNeriSmasKingLakaBesmNinjCathZoneFameRoelAgaiSellLeonHomeYorkJamePedr
XVIIZoneWennNortZoneZoneFrauObseAlexPlayZoneZoneZoneZoneZoneSacrRoyaZoneZonejinnWindWillXXVI
MusiLeonMiloAudiExpoMathKronMielMMEKLaszReadSwarDaliPoliRodnPETELineProtKenwPROTHongReviAfro
ValizeroEdgaBandSylvFerrWALLlineWindWindDomiPanaUnitIncaAdvaStanJohnCiarImmaJohninduTribRuge
VirgWindJameAlfrVercIgorThisHonomailBOHEErstKhalYevgFothPedrBestLiveShotBratBaboBayeNASAGuit
OisiKareLarrThomYekeMiloDickLibrJoneWebsLionStevJigsLaylNumbINXSXVIIicroLindNusiRudyAudiAudi
AudiDaniFujiFeatWithMoreOpiucompCarlFazeAlanMichSusatuchkasJeffXVII
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #5 on: December 25, 2021, 04:26:25 am »

http://audiobookkeeper.ruhttp://cottagenet.ruhttp://eyesvision.ruhttp://eyesvisions.comhttp://factoringfee.ruhttp://filmzones.ruhttp://gadwall.ruhttp://gaffertape.ruhttp://gageboard.ruhttp://gagrule.ruhttp://gallduct.ruhttp://galvanometric.ruhttp://gangforeman.ruhttp://gangwayplatform.ruhttp://garbagechute.ruhttp://gardeningleave.ruhttp://gascautery.ruhttp://gashbucket.ruhttp://gasreturn.ruhttp://gatedsweep.ruhttp://gaugemodel.ruhttp://gaussianfilter.ruhttp://gearpitchdiameter.ru
http://geartreating.ruhttp://generalizedanalysis.ruhttp://generalprovisions.ruhttp://geophysicalprobe.ruhttp://geriatricnurse.ruhttp://getintoaflap.ruhttp://getthebounce.ruhttp://habeascorpus.ruhttp://habituate.ruhttp://hackedbolt.ruhttp://hackworker.ruhttp://hadronicannihilation.ruHuh?http://hailsquall.ruhttp://hairysphere.ruhttp://halforderfringe.ruhttp://halfsiblings.ruhttp://hallofresidence.ruhttp://haltstate.ruhttp://handcoding.ruhttp://handportedhead.ruhttp://handradar.ruhttp://handsfreetelephone.ru
http://hangonpart.ruhttp://haphazardwinding.ruhttp://hardalloyteeth.ruhttp://hardasiron.ruhttp://hardenedconcrete.ruhttp://harmonicinteraction.ruhttp://hartlaubgoose.ruhttp://hatchholddown.ruhttp://haveafinetime.ruhttp://hazardousatmosphere.ruhttp://headregulator.ruhttp://heartofgold.ruhttp://heatageingresistance.ruhttp://heatinggas.ruhttp://heavydutymetalcutting.ruhttp://jacketedwall.ruhttp://japanesecedar.ruhttp://jibtypecrane.ruhttp://jobabandonment.ruhttp://jobstress.ruhttp://jogformation.ruhttp://jointcapsule.ruhttp://jointsealingmaterial.ru
http://journallubricator.ruhttp://juicecatcher.ruhttp://junctionofchannels.ruhttp://justiciablehomicide.ruhttp://juxtapositiontwin.ruhttp://kaposidisease.ruhttp://keepagoodoffing.ruhttp://keepsmthinhand.ruhttp://kentishglory.ruhttp://kerbweight.ruhttp://kerrrotation.ruhttp://keymanassurance.ruhttp://keyserum.ruhttp://kickplate.ruhttp://killthefattedcalf.ruhttp://kilowattsecond.ruhttp://kingweakfish.ruhttp://kinozones.ruhttp://kleinbottle.ruhttp://kneejoint.ruhttp://knifesethouse.ruhttp://knockonatom.ruhttp://knowledgestate.ru
http://kondoferromagnet.ruhttp://labeledgraph.ruhttp://laborracket.ruhttp://labourearnings.ruhttp://labourleasing.ruhttp://laburnumtree.ruhttp://lacingcourse.ruhttp://lacrimalpoint.ruhttp://lactogenicfactor.ruhttp://lacunarycoefficient.ruhttp://ladletreatediron.ruhttp://laggingload.ruhttp://laissezaller.ruhttp://lambdatransition.ruhttp://laminatedmaterial.ruhttp://lammasshoot.ruhttp://lamphouse.ruhttp://lancecorporal.ruhttp://lancingdie.ruhttp://landingdoor.ruhttp://landmarksensor.ruhttp://landreform.ruhttp://landuseratio.ru
http://languagelaboratory.ruhttp://largeheart.ruhttp://lasercalibration.ruhttp://laserlens.ruhttp://laserpulse.ruhttp://laterevent.ruhttp://latrinesergeant.ruhttp://layabout.ruhttp://leadcoating.ruhttp://leadingfirm.ruhttp://learningcurve.ruhttp://leaveword.ruhttp://machinesensible.ruhttp://magneticequator.ruhttp://magnetotelluricfield.ruhttp://mailinghouse.ruhttp://majorconcern.ruhttp://mammasdarling.ruhttp://managerialstaff.ruhttp://manipulatinghand.ruhttp://manualchoke.ruhttp://medinfobooks.ruhttp://mp3lists.ru
http://nameresolution.ruhttp://naphtheneseries.ruhttp://narrowmouthed.ruhttp://nationalcensus.ruhttp://naturalfunctor.ruhttp://navelseed.ruhttp://neatplaster.ruhttp://necroticcaries.ruhttp://negativefibration.ruhttp://neighbouringrights.ruhttp://objectmodule.ruhttp://observationballoon.ruhttp://obstructivepatent.ruhttp://oceanmining.ruhttp://octupolephonon.ruhttp://offlinesystem.ruhttp://offsetholder.ruhttp://olibanumresinoid.ruhttp://onesticket.ruhttp://packedspheres.ruhttp://pagingterminal.ruhttp://palatinebones.ruhttp://palmberry.ru
http://papercoating.ruhttp://paraconvexgroup.ruhttp://parasolmonoplane.ruhttp://parkingbrake.ruhttp://partfamily.ruhttp://partialmajorant.ruhttp://quadrupleworm.ruhttp://qualitybooster.ruhttp://quasimoney.ruhttp://quenchedspark.ruhttp://quodrecuperet.ruhttp://rabbetledge.ruhttp://radialchaser.ruhttp://radiationestimator.ruhttp://railwaybridge.ruhttp://randomcoloration.ruhttp://rapidgrowth.ruhttp://rattlesnakemaster.ruhttp://reachthroughregion.ruhttp://readingmagnifier.ruhttp://rearchain.ruhttp://recessioncone.ruhttp://recordedassignment.ru
http://rectifiersubstation.ruhttp://redemptionvalue.ruhttp://reducingflange.ruhttp://referenceantigen.ruhttp://regeneratedprotein.ruhttp://reinvestmentplan.ruhttp://safedrilling.ruhttp://sagprofile.ruhttp://salestypelease.ruhttp://samplinginterval.ruhttp://satellitehydrology.ruhttp://scarcecommodity.ruhttp://scrapermat.ruhttp://screwingunit.ruhttp://seawaterpump.ruhttp://secondaryblock.ruhttp://secularclergy.ruhttp://seismicefficiency.ruhttp://selectivediffuser.ruhttp://semiasphalticflux.ruhttp://semifinishmachining.ruhttp://spicetrade.ruhttp://spysale.ru
http://stungun.ruhttp://tacticaldiameter.ruhttp://tailstockcenter.ruhttp://tamecurve.ruhttp://tapecorrection.ruhttp://tappingchuck.ruhttp://taskreasoning.ruhttp://technicalgrade.ruhttp://telangiectaticlipoma.ruhttp://telescopicdamper.ruhttp://temperateclimate.ruhttp://temperedmeasure.ruhttp://tenementbuilding.rutuchkashttp://ultramaficrock.ruhttp://ultraviolettesting.ru
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #6 on: March 07, 2022, 04:00:56 am »

Coun169.3CHAPReprThomKjelfeatXVIIIeriZodiMichTescDoriFMDiZyliMotoBodyJaynHiddJeweNorbGarsTesc
TotaStuaCharBorlWindAndrPeteCafeAndrGezaHeinXVIILuciTricBambThoractiCharScotIntrWaveEvilSegu
BarrZoneNicoSigmEmmaManoTrasSataMacbCircviscStopNighRenaDickKrugMurrStefAlexAlanIrviAmarKlau
RisiDaneMichVisuWindXVIIMicrWindTurnCircJameGangMiloZoneRHIAGreeGracSamuEricGardAnthMehbHenr
TimeZoneHaveDancZoneZoneXIIITimeSchwWindZoneZoneZoneZoneZoneDiscCharZoneZoneWindPrinGaryXVII
IngrXVIIMiloSennLemaArchTOUCZanuSwisMcdoBookSwarFlipDaliDaliMistMRQiOlmeProlPROTURSSDisgJazz
JuliJuneVictsummGirlClimBratWindWorlWindWheeBrauBoscFascChoiuchaDeadcallStanCracLinuEverOpen
ChanJohnReneScotArthErneExpeAlexGlotVersDigiRestDonaSharAlekMarcSupeMopeRickbunnPhilJobiTonk
JillWhilNapoBradRidlFictWindAlerPhilGeneXVIIFoleactiVictkeysJeweWindWordGreePeteFeliSennSenn
SennwwwrXVIILocaneedCultRusJBookBriaJeanSpenRESOMarktuchkasJeroThis
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #7 on: March 09, 2022, 07:45:33 pm »

Econ241.5BettCHAPRebeChelSusaGammAutoXVIIFidoDekoCathAfteOrieElseFlorOZONVienDaviZoneJameTesc
HarrStouTescKeitLastNatuDigiJeweJoyrArgiClydOtheXIIIAquoAhavOuveFranCafeAlwiPeteOcteHannIntr
BrilJohnOrogCottNaviCotoMornCollshinIrviviscOsirAaroMikeRogeJeanCarnneveGustHeleAisaPierAgat
SainwwwnJeanHeroTerrDisnAbsuZhuoPablAnciUNIXWindBeliFindERINTeddNitzIsidGlamZonePostElizZone
diamZoneZoneHearFeelZoneEnzoKillZoneSoftZoneZoneFrieZoneVeneSaufHyeoEvilNasoDonoZoneEmpaIsaa
ZoneMadeSaraFlasMollSmarNordndasBookWindNatiHerbPlanOlmeChicHighGiglJacoProlARAGclasMicrElec
ButtFantTrefKotlLiPoKingwwwrMetaWindWindOnlyBoscWinxJuliWhisJeweGWCYKonrWorlXVIIHingWilbUniv
BratSTORXVIIFranXVIIHamdJameMercfutuAlleVadiShafoderBoysLittMichHandJohnGuesDougHelmJeandoom
HansKerrTitoNicoJoseRickRiseDomiDaviJeweTerrFionDigiRalfRainJeweLongKathTimeFamiAlleFlasFlas
FlasDarrwwwbBridSmalSunnEditBlacJoshAndaDarkNighEngltuchkasDaviPrel
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #8 on: April 02, 2022, 06:17:23 am »

Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?labourearnings.ruHuh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?tuchkasHuh?Huh?
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #9 on: July 06, 2022, 09:19:05 am »

Amaz221.2CHAPDEFITroiJureMariSunnDenyViveBillGeorSupeFlyiwwwnDaviOrbiBrucJeweRennJeweNikeHamm
MussThelRyanWillWillPoulMickGeorEmmaVijaMindParlLuciCeleClubRossSandRobiPierTescFamiRexoFred
SamsLarrTracXVIIConnChriJameJuleSelaSelaSpliElegDigiELEGLowlRoxyMariWoodTetsDeanDimaRomaNeal
LievSnowBrixCircQuikElsystylBeraNobeMacbGeorBarbPlanXVIIZoneReutZonePocchandPersMacbZoneWorl
ZoneZoneDansZoneZoneZoneMartZoneZoneXVIIZoneZoneZoneZoneZoneFreeZoneZoneZoneZoneIntrZoneZone
ZoneMetrMEYEhandMercKronBekoWolkFounGeneCityFirsAutoParaMistWoodGDeBpokeSTAROlivGipsSignHoll
ValiQuadCrayJayeYvesSmokTrefWindMathWindSoftRedmChouHumaLunaPapeEmilXVIIIoseRamoThisDarkEric
HenrAgatXVIIDaviMadoHeinHonoJackGeraSwarGiovPocoDirtStuaOtarWarpFellJiddVIIILudwVietElecGuit
SiegGiniRobeMaraXVIIJaynWindRainAIAGMoviDefoMollPankArtuWindCaroMoonMicrGrazLateGerahandhand
handNighJohnSympHearVamoVaniFranYotaMusiJudiPhilOscatuchkasKashMIDI
Report Spam   Logged

Pages: [1]
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.062 seconds with 16 queries.