Improve company productivity with a Business Account.Sign Up

x
?
Solved

Centralizing Windows Logs

Posted on 2016-07-28
2
Medium Priority
?
120 Views
Last Modified: 2016-08-17
Hello,

I am running Windows 2008 R2 Servers that I need to keep track of the Window event logs and the Windows System logs. Is there a way to setup an automated process that allows me to centralize my logging to one location?
0
Comment
Question by:ahmad1467
2 Comments
 
LVL 44

Expert Comment

by:Adam Brown
ID: 41733463
The 2008 R2 event viewer allows you to collect logs from remote servers automatically to a single server using Event Log Subscriptions. https://technet.microsoft.com/en-us/library/cc748890(v=ws.11).aspx has info.
0
 
LVL 18

Accepted Solution

by:
Emmanuel Adebayo earned 2000 total points
ID: 41733465
Hi,

Yes, you can configure Windows Event Subscription by which Windows server forward its events to a “subscribing” server call a collector to become a central repository for Windows logs from other servers in the network.

Setting up and Configure Centralized Logging Computer (Collector)
On the server that will be Collector (That will collect events from other servers)
Run the following commands
  • winrm qc
You can use the –q switch, to perform the actions automatically and silently

wecutil qc /q (This will configure the evet collector service)

Setting up and Configure Computer to forward to the Centralized Log Computer (Subscribing)
Run the following commands
  • winrm qc –q

For more information, please visit
http://www.windowsecurity.com/articles-tutorials/authentication_and_encryption/Centralized-Auditing-here-FREE.html

https://www.loggly.com/ultimate-guide/centralizing-windows-logs/
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

608 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question