Log Viewer Help

  • Thread starter Thread starter Dave
  • Start date Start date
D

Dave

Hi,

Lately I'm trying to go through all my log events and see who logged in and
what they did on our terminal server.

This is very tedious and usually I end up giving up and convincing myself
that nothing malicious happened.

Is there a third party log viewer that organizes all the events in groups
and show events for each login?

Thanks!!!
Dave
 
I think you may be able to get a similar function out of GFI's Security
Event Log Monitor (SELM). I haven't used it a ton, but the guys I work
with swear by it.

(j)
James
 
Thanks James,

Doesn't look like what I want, but I'll investigate it more and see if can
help.
 
Oops,

I meant the earlier message for HG's post. Actually your link looks like
it's close to what I want. I'm not sure if what I want can even be done.
I"ll check out the trial version and see if I like it.

Thanks!!!
 
Thanks HG,

Doesn't look like what I want, but I'll investigate it more and see if can
help.

Dave
 
Just give me a shout if you have any questions on it. I may not know
the answer, but I'm pretty sure I have a friend who will.

(j)
James
 
True Guys,

GFI SELM is a pretty good tool. I've use with another product from CA called
eTrust Audit, SELM is a little bit easier to work with and you can actually
use it free for 1 server and 3 workstations (I think that's the latest
version)

It will give you reports based on native event ID's and you don;t need an
agent for it...you can call different machines and assign the audit policy
right from SELM however, one thing that I didnt see with SELM was the
ability to create different audit groups, I mean that you don;t want to
audit the same stuff on a member server, a domain controller and
workstations...
 
Back
Top