Date parsed: 7/13/2004 9:38:29 PM
Date: Wed, 14 Jul 2004 02:38:29 -0400

Hello. I am a new user of SL4NT 3.1. My question is: can this product
be used to track invalid logons messages and then forward the failures
to a Windows NT Event log? I know that with each failure a message is
logged into the "Security" Event file. Can this failure message be
forwarded to our "Syslog Server", the server that is running the SL4NT
3.1 software? Would the software have to be installed on each server?
Example: someone is trying to logon on to one of our Primary Domain
servers. They try it several times. To us it may look like someone is
trying to guess at a password. I hope this makes sense? Thank you.
RA

Date parsed: 7/14/2004 12:36:24 PM
Date: Wed, 14 Jul 2004 11:36:24 +0200

Hello Martin,

SL4NT supports a single source of data: syslog messages. It cannot read
EventLog entries. But you could use one of the available EventLog-to-Syslog
tools (for example: "Eventlog to Syslog Utility",
https://engineering.purd...s/Documents/UNIX/evtsys/ , a free
tool w/ src).

Franz


"R A Martin" <martinru@washpost.com> wrote in message
news:40F4D4E5.DAB77AA3@washpost.com...
> Hello. I am a new user of SL4NT 3.1. My question is: can this product
> be used to track invalid logons messages and then forward the failures
> to a Windows NT Event log? I know that with each failure a message is
> logged into the "Security" Event file. Can this failure message be
> forwarded to our "Syslog Server", the server that is running the SL4NT
> 3.1 software? Would the software have to be installed on each server?
> Example: someone is trying to logon on to one of our Primary Domain
> servers. They try it several times. To us it may look like someone is
> trying to guess at a password. I hope this makes sense? Thank you.
> RA
>