• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 532
  • Last Modified:

Server security alerts monitoring

I am looking for a effiective way to monitor  server logs  and if a certain event occurs it will send an alert (security etc). I would preffer a none paid version soluction. I know that performance monitor can do some alerts.....
OS: server 2003
Any suggestions?
  • 3
3 Solutions
I would look into SysLog (http://www.syslog.org/).  Originally developed for the *NIX world, but supports Windows as well.  It's quite robust, and will allow you to aggregate logs from multiple servers/workstations/devices, and run reporting on them.  There are add-ons to SysLog to enhance it's capabilities (i.e. AlertManager - http://www.syslog.org/wiki/Main/AlertManager) that should provide you with the functionality you're looking for.
Fadi SODAH (aka madunix)Chief Information Security Officer, CISA, CISSP, CFR, ICATE, MCSE, CCNA, CCNP and CCIPCommented:
I prefer to work with Open-source... so my recommendation would be  nagios (I use it in my env.), awarded Platform ..winner of numerous awards and highly recognized, Nagios is the leader in Open Source IT infrastructure monitoring....but you can find other multiple monitoring tools:
http://www.groundworkopensource.com GroundWork Monitor Enterprise
http://www.hyperic.com Hyperic HQ
http://www.icinga.org Icinga
http://oss.oetiker.ch/mrtg/  mrtg
http://www.nagios.com Nagios
http://www.n-able.com N-central
http://www.op5.com op5 Monitor
http://www.open-itcockpit.com openITCockpit
http://www.opennms.org OpenNMS
http://www.hp.com/de/bto HP OpenView
http://www.bmc.com BMC PATROL ProactiveNet Performance Management
http://www.shinken-monitoring.org Shinken
http://www.ibm.com/software/de/tivoli IBM Tivoli
http://www.ca.com/de CA Unicenter
http://www.whatsupgold.com WhatsUp Gold
http://www.zabbix.com Zabbix
http://www.zenoss.com Zenoss Enterprise

My recommendation for a useful solution for syslog  and data correlation solutions:
Splunk http://www.splunk.com/ 
Cisco CS-MARS http://www.cisco.com/en/US/products/ps6241/index.html
Sawmill:  http://www.sawmill.net
Paglo:  http://paglo.com
Q1 Labs (offers free VM version):  http://www.q1labs.com/qradar-slim-fe
Manage Engine with OpManager:  http://www.manageengine.com

look @ http://www.linuxjournal.com/article/5476 and
Neal_876Author Commented:
Thank you both for responding... I am checking out the different soluctions

Is the Syslog software free from syslg.org? It does not seems that way..
Neal_876Author Commented:
Sorry for the delay in responding. My project was rescheduled so I did not get to try all of the solution but I think I will be using one of the open sources.
Neal_876Author Commented:
Thank you!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now