how to check network logs

techgyan
techgyan used Ask the Experts™
on
Kindly tell me how to check network logs in Server like who is changing IP address, Who is adding routing, Interface Up / Down on server
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012
Commented:
For Windows 2008/08 R2 server, if the IP Helper services is started, when we change the IP address it will generate a log located in system logs.
 
Example:Event ID 4200
 Source:  iphlpsvc
 http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/3105c4ed-0f7c-409f-9a21-c30de00f9f2e/

Refer below link for network down events

http://www.eventid.net/display.asp?eventid=4

Apart from above there are some advance network monitoring software which you can use to get detailed reports

Netmon http://download.cnet.com/NetMon/3000-2218_4-10812315.html
Wireshark http://www.wireshark.org/download.html

Author

Commented:
I have to configure Email notification in particular Event ID, Is it possible?
Yes you can do that for server 2008 and vista by following this article
http://www.petri.co.il/assigning-custom-tasks-to-events.htm
Commented:
open the event viewer and click on Windows Log (left side).

Select the log type (Application, Security etc) and do right click.

Attach task to this log
A dialog box will appears and Give a name and click twice and Send a Email and next Type here yours details like from, to , subject and comments and smtp server address and finally finish this.

~ Edited by Modulus_Twelve to remove advertising. ~

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial