[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 115
  • Last Modified:

Centralizing Windows Logs

Hello,

I am running Windows 2008 R2 Servers that I need to keep track of the Window event logs and the Windows System logs. Is there a way to setup an automated process that allows me to centralize my logging to one location?
0
ahmad1467
Asked:
ahmad1467
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
The 2008 R2 event viewer allows you to collect logs from remote servers automatically to a single server using Event Log Subscriptions. https://technet.microsoft.com/en-us/library/cc748890(v=ws.11).aspx has info.
0
 
Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
Hi,

Yes, you can configure Windows Event Subscription by which Windows server forward its events to a “subscribing” server call a collector to become a central repository for Windows logs from other servers in the network.

Setting up and Configure Centralized Logging Computer (Collector)
On the server that will be Collector (That will collect events from other servers)
Run the following commands
  • winrm qc
You can use the –q switch, to perform the actions automatically and silently

wecutil qc /q (This will configure the evet collector service)

Setting up and Configure Computer to forward to the Centralized Log Computer (Subscribing)
Run the following commands
  • winrm qc –q

For more information, please visit
http://www.windowsecurity.com/articles-tutorials/authentication_and_encryption/Centralized-Auditing-here-FREE.html

https://www.loggly.com/ultimate-guide/centralizing-windows-logs/
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now