Date: Wed, 14 Jul 2004 02:38:29 -0400

Hello. I am a new user of SL4NT 3.1. My question is: can this product

be used to track invalid logons messages and then forward the failures

to a Windows NT Event log? I know that with each failure a message is

logged into the "Security" Event file. Can this failure message be

forwarded to our "Syslog Server", the server that is running the SL4NT

3.1 software? Would the software have to be installed on each server?

Example: someone is trying to logon on to one of our Primary Domain

servers. They try it several times. To us it may look like someone is

trying to guess at a password. I hope this makes sense? Thank you.

RA

Date: Wed, 14 Jul 2004 11:36:24 +0200

Hello Martin,

SL4NT supports a single source of data: syslog messages. It cannot read

EventLog entries. But you could use one of the available EventLog-to-Syslog

tools (for example: "Eventlog to Syslog Utility",

https://engineering.purd...s/Documents/UNIX/evtsys/ , a free

tool w/ src).

Franz

"R A Martin" <martinru@washpost.com> wrote in message

news:40F4D4E5.DAB77AA3@washpost.com...

> Hello. I am a new user of SL4NT 3.1. My question is: can this product

> be used to track invalid logons messages and then forward the failures

> to a Windows NT Event log? I know that with each failure a message is

> logged into the "Security" Event file. Can this failure message be

> forwarded to our "Syslog Server", the server that is running the SL4NT

> 3.1 software? Would the software have to be installed on each server?

> Example: someone is trying to logon on to one of our Primary Domain

> servers. They try it several times. To us it may look like someone is

> trying to guess at a password. I hope this makes sense? Thank you.

> RA

>