Utilities/programs that analyze event viewer logs

What are some good utilities or programs that analyze event viewer logs (such as the system and application logs) to discover trends and provide detailed explanations of what the different events mean?
KnowledgeableNetwork EngineerAsked:
Who is Participating?
NVITConnect With a Mentor Commented:
Netwrix Auditor for Active Directory

Enterprise diagram provides a high-level overview of activity trends by date, user, server, object type or
data source in your IT infrastructure. The Enterprise diagram aggregates data on all monitoring plans and all data sources, while system-specific diagrams provide quick access to important statistics within one data source.

Peter SarabySenior IT ProCommented:
I've never heard or seen of "EvLog" anywhere, this is definitely not a product that's widely in use as far as I know. The site eventid.net itself has been around for a while and does have a good database for events, but I wouldn't use their software.

GFI's event manager is a dead product that hasn't been updated in years. The latest update (after years of silence) only addressed bugs and added support for newer Microsoft Operating Systems.

Netwrix's strengths lie elsewhere, I wouldn't use them for event log monitoring.

ManageEngine is somewhat common, but their products often have an insecure design, partially because they don't use agents. It's an entry level product I wouldn't really recommend. SolarWinds has a product but it's overpriced and not worth the money IMHO.

If you're looking for something free then I would suggest Graylog, although it won't provide descriptions of events and is difficult to deploy and maintain. To be honest, most products don't have embedded explanations and you're better off searching Google for specific events you encounter. Even if a product would have some explanations, it wouldn't trust it to be complete.

I've had good results with EventSentry, it's very strong on the Windows side and reasonably priced. I believe it does make it easy to search Google once you get or view an alert from it.
Ajit SinghCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.