Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: High
  • Security: Public
  • Views: 75
  • Last Modified:

Utilities/programs that analyze event viewer logs

What are some good utilities or programs that analyze event viewer logs (such as the system and application logs) to discover trends and provide detailed explanations of what the different events mean?
0
Knowledgeable
Asked:
Knowledgeable
2 Solutions
 
NVITCommented:
Netwrix Auditor for Active Directory

Enterprise diagram provides a high-level overview of activity trends by date, user, server, object type or
data source in your IT infrastructure. The Enterprise diagram aggregates data on all monitoring plans and all data sources, while system-specific diagrams provide quick access to important statistics within one data source.

https://www.netwrix.com/download/QuickStart/Netwrix_Auditor_for_Active_Directory_Quick_Start_Guide.pdf
0
 
Peter SarabySenior IT ProCommented:
I've never heard or seen of "EvLog" anywhere, this is definitely not a product that's widely in use as far as I know. The site eventid.net itself has been around for a while and does have a good database for events, but I wouldn't use their software.

GFI's event manager is a dead product that hasn't been updated in years. The latest update (after years of silence) only addressed bugs and added support for newer Microsoft Operating Systems.

Netwrix's strengths lie elsewhere, I wouldn't use them for event log monitoring.

ManageEngine is somewhat common, but their products often have an insecure design, partially because they don't use agents. It's an entry level product I wouldn't really recommend. SolarWinds has a product but it's overpriced and not worth the money IMHO.

If you're looking for something free then I would suggest Graylog, although it won't provide descriptions of events and is difficult to deploy and maintain. To be honest, most products don't have embedded explanations and you're better off searching Google for specific events you encounter. Even if a product would have some explanations, it wouldn't trust it to be complete.

I've had good results with EventSentry, it's very strong on the Windows side and reasonably priced. I believe it does make it easy to search Google once you get or view an alert from it.
0
 
Ajit SinghCommented:
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now